github.com/opencoff/go-pki (go): Package pki abstracts creating an opinionated PKI. The certs and keys are stored in a boltDB instance. The private keys are stored in encrypted form. The CA passphrase is used in a KDF to derive the encryption keys. User (client) certs are also encrypted - but with user provided passphrase.
Keywords: boltdb|golang|golang-crypto|golang-library|pki|tls-pki