ftw-pki-caroot-creator
The authoritative Root Certificate Authority (Root CA) creation tool of the ftw-pki suite. This repository provides the ftwpkicaroot executable, specifically designed for the initial generation of the Root CA.
🛠 Features
- Root CA Initialization: Dedicated logic to generate the ultimate anchor of trust for the entire PKI infrastructure.
- Security-First Lifecycle: Designed as a temporary tool. Once the Root CA is established, this program should be decommissioned to minimize the system's attack surface.
- Hardened Passphrase Support: Works in conjunction with
ftw-pki-passwordto handle high-entropy passphrases (~80+ characters). - Standard Compliance: Generates X.509 root certificates following strict security profiles.
📖 Documentation & Usage
Note on Security: This program is intended for the creation of the Root CA only. For ongoing signing operations, a separate, dedicated signing tool is used.
- Usage: The
ftwpkicarootutility handles the lifecycle of the Root CA's initial setup. Runftwpkicaroot --helpfor available commands. - Post-Setup Recommendation: After successfully creating and backing up the Root CA, it is highly recommended to uninstall this package and remove the executable from the environment.
- Technical Manual: Detailed security considerations and operational guides are located in the
doc/source/directory.
📄 License
This project is licensed under the LGPL v2.1 (or later).
© 2026 ftw-pki Contributors
1 maintainer
Metadata
1 maintainer
Release files for ftw-pki-caroot-creator 0.0.4
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| ftw_pki_caroot_creator-0.0.4.tar.gz | 36.1 MB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| ftw_pki_caroot_creator-0.0.4-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 36.1 MB
Release files / ftw_pki_caroot_creator-0.0.4.tar.gz
| Download URL | ftw_pki_caroot_creator-0.0.4.tar.gz |
|---|---|
| Size | 36.1 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
5cfd7d6cfcf72cbab44dd1a9544e080c891e87974b91a21532e0232521736e78
|
|
BLAKE2b-256 checksum How to use checksums |
5dc1f25cfef29df756456c147a11f2881631150bc6d503b26a3dedf882a18287
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jun 17, 2026.
Transparency logRelease files / ftw_pki_caroot_creator-0.0.4-py3-none-any.whl
| Download URL | ftw_pki_caroot_creator-0.0.4-py3-none-any.whl |
|---|---|
| Size | 17.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
d57b12bcde7c26c59cc6d99458789b8916b6a1a3b1efc9443fc7f52988f6f92a
|
|
BLAKE2b-256 checksum How to use checksums |
3f1305bbf06472472e182223ddc667e24eb8d53c59001af2bbb284eccc052fbf
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jun 17, 2026.
Transparency log
