mirleft/ocaml-x509

X509 (RFC5280) handling in OCaml

OCaml

52

760 commits

updated Sep 11, 2026

See the code

README

X.509 - Public Key Infrastructure purely in OCaml

%%VERSION%% X.509 is a public key infrastructure used mostly on the Internet. It consists of certificates which include public keys and identifiers, signed by an authority. Authorities must be exchanged over a second channel to establish the trust relationship. This library implements most parts of RFC5280 and RFC6125. The Public Key Cryptography Standards (PKCS) defines encoding and decoding in ASN.1 DER and PEM format, which is also implemented by this library - namely PKCS 1, PKCS 7, PKCS 8, PKCS 9 and PKCS 10.

Read our Usenix Security 2015 paper.

Documentation

API documentation

Installation

opam install x509 will install this library.

mirageos
ocaml
pkcs
pki
rfc5280
x509

Contributors

hannesm

535 commits

pqwy

196 commits

reynir

7 commits

torinnd

5 commits

mirleft/ocaml-x509

X509 (RFC5280) handling in OCaml

OCaml

52

760 commits

updated Sep 11, 2026

See the code

README

X.509 - Public Key Infrastructure purely in OCaml

%%VERSION%% X.509 is a public key infrastructure used mostly on the Internet. It consists of certificates which include public keys and identifiers, signed by an authority. Authorities must be exchanged over a second channel to establish the trust relationship. This library implements most parts of RFC5280 and RFC6125. The Public Key Cryptography Standards (PKCS) defines encoding and decoding in ASN.1 DER and PEM format, which is also implemented by this library - namely PKCS 1, PKCS 7, PKCS 8, PKCS 9 and PKCS 10.

Read our Usenix Security 2015 paper.

Documentation

API documentation

Installation

opam install x509 will install this library.

mirageos
ocaml
pkcs
pki
rfc5280
x509

Contributors

hannesm

535 commits

pqwy

196 commits

reynir

7 commits

torinnd

5 commits

Languages

OCaml

99.9%