Ross ROSS = Recommend OSS · open-source software intelligence for agents

chris2511/xca

X Certificate and Key management observed · 2026-10-10

github.com/chris2511/xca · homepage · C++ · NOASSERTION (other) observed · 2026-10-10

Health v2 · maintenance only

62/100

  • Activity 86
  • Release rhythm 8
  • Longevity 100

Flags: no_license

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 6011
  • days_rel: 571
  • days_push: 84
  • n_releases_24m: 1

Full methodology

Adoption not part of the score

2020 stars · 251 forks observed · 2026-10-10

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

XCA is a cross-platform desktop GUI application for creating and managing X.509 certificates, certificate requests, RSA/DSA/EC private keys, smartcards, and CRLs, providing everything needed to run a small certificate authority. It stores all cryptographic data in a SQL database (SQLite, MySQL/MariaDB, PostgreSQL, or MS SQL Server) and supports PKCS#7/#8/#10/#11/#12 formats.

Use cases

  • run a private certificate authority to issue TLS certificates
  • create and manage x509 certificates and private keys with a gui
  • generate certificate signing requests and CRLs
  • manage smartcards and HSMs via PKCS#11
  • import export certificates in PEM DER PKCS#12 formats
  • issue OpenVPN or IPsec client certificates
  • store company certificates in a shared SQL database with templates

When to choose

  • you need a user-friendly GUI alternative to raw OpenSSL commands for PKI work
  • you want to run a small internal CA with recursive sub-CAs and certificate chains
  • you need smartcard/HSM key management via PKCS#11
  • you want centralized certificate storage in SQLite, MySQL, or PostgreSQL

When to avoid

  • you need a large-scale, automated, or API-driven CA (use step-ca, EJBCA, or Vault instead)
  • you only need occasional one-off certificate inspection from the command line
  • you need a headless/server-side certificate issuance pipeline

Facets

application · maturity active

cryptography security gui database security developer-tools privacy windows cross-platform x509 certificate-authority pki pkcs11 smartcards crl openssl qt linux macos desktop

10 sources

Member repositories

RepositoryRoleHealth v2
chris2511/xcamain62

For agents

markdown · JSON · MCP: product_card(name="chris2511/xca")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem