trust-store

Audit and trim CA trust stores on your system and apps: list, backup, whitelist, restore.

Small utility to convert the system trust store to a system Java KeyStore

System CA certificate installer for rooted Android, managed from a WebUI. Magisk, KernelSU, SukiSU, APatch. APEX bypass for Android 14+.

PoC: how the eMudhra/emSign weak CA-key compromise (Oct 2026) MITMs systems with stale trust stores — lab-only, throwaway keys

Open-source, single-binary, cross-platform manager for DoD PKI CA certificate trust stores — a modern, auditable replacement for DISA InstallRoot.

Сертификаты Минцифры без доверия «ко всему сразу» (Linux, macOS)

Offline eMudhra / emSign certificate scanner for Windows, Linux and macOS. Find compromised CA certificates, affected trust stores and signed software with Python or PowerShell.

eMudhra CA Compromise CVE-2026-111943 CVE-2026-114406 CVE-2026-91403 CVE-2026-113812

Charm libraries for providers and requirers of the certificate-transfer integration.

no_std, no-alloc Rust crate for curated DER-encoded CA root certificates, addressable by OpenSSL subject hash (e.g. 062cdee6.0)

Pure Go library and CLI for inventorying X.509 certificates and trust stores in files and package archives.

Which trust stores and runtimes still accept the compromised eMudhra intermediate keys, and what removing Comodo AAA did to the chains of the top 20,000 sites. Package-file stores, real clients, a scanner.

A certval-stores provider for the Mozilla root program: trust anchors and a CA store with partial paths, generated from CCADB and verified against NSS's certdata.txt, for TLS server and S/MIME validation.

Keyhole finds weak and compromised certificate keys and trust-store exposure across your code, dependencies, and signed artifacts.

Find CA bundles in venvs, node_modules, wheels, jars, container images and binaries that still trust a revoked CA (eMudhra 2026, CVE-2026-111943) and the package to upgrade. Offline Rust CLI, SARIF output.

A library for issuing certificates for secure localhost development.

Audit the certificate authorities your machine trusts: who operates them, which government they answer to, and which roots nobody vouches for. Zero dependencies, read-only.

CLI and GUI tool to easily install SSL/TLS and CA certificates into Linux trust stores, browsers, and web servers.

Trust anchors, CA certificates and partial paths compiled into certval binaries: Federal PKI, DoD (NIPR, ECA, WCF), Microsoft, TPM vendors and the Web PKI.

OS の信頼ストアにある X.509 証明書の有効期限・署名・信頼チェーン・失効（CRL / OCSP）を検証する GPUI 製デスクトップダッシュボード兼 CLI。