cfssl
« Back to VersTracker
Description:
CloudFlare's PKI toolkit
Type: Formula  |  Latest Version: 1.6.5@0  |  Tracked Since: Dec 17, 2025
Links: Homepage  |  @Cloudflare  |  formulae.brew.sh
Category: Security
Tags: pki tls certificates security encryption
Install: brew install cfssl
About:
CFSSL is CloudFlare's open-source PKI toolkit for signing, verifying, and bundling TLS certificates. It provides a complete certificate authority API and a set of command-line tools for certificate management. The tool simplifies the creation and management of cryptographic keys and certificates.
Key Features:
  • Certificate Authority (CA) server with REST API
  • Command-line tools for certificate and key management
  • Certificate signing request (CSR) generation and signing
  • OCSP responder and certificate bundling capabilities
Use Cases:
  • Setting up a private certificate authority for internal infrastructure
  • Automating TLS certificate generation for microservices
  • Generating certificates for development and testing environments
Alternatives:
  • OpenSSL – OpenSSL is a more general-purpose cryptography library with a complex CLI, while CFSSL provides a simpler, API-first approach specifically designed for PKI operations.
  • HashiCorp Vault – Vault offers broader secret management beyond PKI, whereas CFSSL is focused specifically on certificate authority operations.
License: BSD-2-Clause
Dependencies: libtool
Bottles available for: arm64_tahoe, arm64_sequoia, arm64_sonoma, arm64_ventura, sonoma, ventura, arm64_linux, x86_64_linux
Version History
Detected Version Rev Change Commit
Oct 10, 2025 3:01am 0 VERSION_BUMP 007c5493
Sep 13, 2025 7:21am 0 VERSION_BUMP 46f0eb54
Nov 10, 2024 4:33pm 0 VERSION_BUMP de5aceac