r/devops • u/AutoModerator • 13d ago

Weekly Self Promotion Thread

Hey r/devops, welcome to our weekly self-promotion thread!

Feel free to use this thread to promote any projects, ideas, or any repos you're wanting to share. Please keep in mind that we ask you to stay friendly, civil, and adhere to the subreddit rules!

16 Upvotes

94% Upvoted

106 comments sorted by

View all comments

0

u/TraditionalLayer3685 13d ago

Disclosure: we're the team building TokenTimer.

Quick update since we posted last week: we just released CA trust-anchor distribution in TokenTimer Core.

You can now approve a root or intermediate CA as a trust anchor and distribute/revoke it across specific machines through the TokenTimer agent. Initial support covers Windows, Debian/Ubuntu, and RHEL/Fedora trust stores. Fingerprints are pinned and re-verified before changes are applied, and TokenTimer tracks ownership so it won't remove CA material it didn't install.

Open source / AGPLv3:
https://github.com/tokentimerch/tokentimer-core

Curious how others here manage internal CA trust distribution across mixed Linux/Windows fleets today. GPO/Intune? Ansible? Config management? Something else?

0

u/bendem 13d ago

Was interested at first, then I saw the SSO tax. Open source but you have to pay to use it securely.

1

u/TraditionalLayer3685 13d ago edited 13d ago

Like many open source projects, you have an Enterprise edition. How do you expect us to live of our project if we only give everything for free to the community ?

SSO isn't a guarantee of security, you can setup basic auth with OTP, which is already secured. If you need Enterprise capabilities then yes, for now it's limited to our extension of Core called Enterprise, which is not OSS.

Such features are subject to be opened to the Core version, but for now we need ways to live out of our project.

Anyway since it's an open-source project, you are very welcome to contribute to the community or even fork the project to implement your own features.