OpenVPN/easy-rsa

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

4475 stars · 1230 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

easy-rsa is a shell-based CLI utility for building and managing a PKI certificate authority. It creates root and intermediate CAs, signs certificate requests, and manages certificate revocation lists (CRLs).

Use cases

• set up a certificate authority for OpenVPN
• generate and sign TLS certificates from the command line
• create a root CA and intermediate CA
• revoke certificates and manage a CRL
• issue client certificates for VPN users
• manage x509 certificates with a simple shell script

When to choose

• you need a lightweight, scriptable CA without running a full PKI stack
• you are setting up OpenVPN or another service that needs its own CA
• you want POSIX shell tooling that works across Linux, macOS, and Windows

When to avoid

• you need an ACME/Let's Encrypt workflow for public certificates
• you require a full-featured CA with web UI, database, or automated issuance
• you need certificates managed at scale with policies and compliance features

Facets

cli-tool · maturity active

security cryptography cli security developer-tools networking windows cli cross-platform pki certificate-authority openvpn openssl x509 shell linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="OpenVPN/easy-rsa")