Show HN: distrust, a Go CLI tool for blocking CA certificates

Category: security

Tags: certificate-management, pki, go, cli, security, trust-store

Score: 7.3/10 (Innovation: 7, Technical: 8, Documentation: 8, Utility: 6)

distrust is a Go CLI tool that manages CA certificate distrust across multiple trust stores (NSS, system, Java, bundles, Chromium) using a policy-based desired-state model. It handles a notoriously fragmented problem with an idempotent reconciliation engine, exact undo state, and cross-store verification, though it's an alpha release tested on only Debian and Windows.

Target audience: devops, security engineers, system administrators

Repository: https://github.com/hyperreality/distrust · Go

View on Hacker News