Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Tools for creating TLS certificates for use with, e.g. MQTT and RabbitMQ.
NOTE: these are temporary tools for non-production deployments. This library is more or less equivalent to a README containing OpenSSL commands, but less manual.
This library is a thin wrapper around ownca, which wraps pyca/cryptography, which wraps the OpenSSL C library. See also tls-gen, a repo from rabbitmq, which performs a similar task using a stack of make/python/OpenSSL CLI.
gwcert ca create
.gwcert key add
.gwcert tui
.The recommended way to install gwcert is with pipx from PyPI:
$ pipx install gridworks-cert
Get help with any of:
gwcert
gwcert ca
gwcert key
Create a Certificate Authority directory with a self-signed certificate via:
gwcert ca create
Show information about the locally created ca and keys with:
gwcert ca info
Add a named set of keys (public, private, certificate) via, for example:
gwcert key add KEY_NAME
Show information about a certificate:
gwcert key info KEY_NAME
Build CLI commands visually:
gwcert tui
Please see the Command-line Reference for more details.
Contributions are very welcome. To learn more, see the Contributor Guide.
Distributed under the terms of the MIT license, gwcert is free and open source software.
If you encounter any problems, please file an issue along with a detailed description.
This project was generated from @cjolowicz's Hypermodern Python Cookiecutter template.
FAQs
TLS certificate management tools for GridWorks
We found that gridworks-cert demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.