SPORK Package Repository
Install and update SPORK PKI tools via apt or dnf.
Packages are GPG-signed and built as static musl binaries — zero runtime dependencies.
FIPS 140-3 by default. All packages use aws-lc-rs (NIST Certificate #4816).
ECDSA P-256/P-384, RSA 2048–4096, ML-DSA, SLH-DSA.
APT Setup (Debian / Ubuntu)
Automatic
curl -fsSL https://pkg.rayketcham.com/setup.sh | sudo bash
Manual
# Import the GPG signing key
curl -fsSL https://pkg.rayketcham.com/gpg.key | \
sudo gpg --dearmor -o /usr/share/keyrings/spork.gpg
# Add the repository
echo "deb [signed-by=/usr/share/keyrings/spork.gpg arch=amd64] \
https://pkg.rayketcham.com/apt stable main" | \
sudo tee /etc/apt/sources.list.d/spork.list
# Update and install
sudo apt update
Install Packages
sudo apt install spork-acme # Standalone ACME server
sudo apt install spork-ca # Full CA engine
RPM Setup (RHEL / Fedora / Rocky)
Automatic
curl -fsSL https://pkg.rayketcham.com/setup.sh | sudo bash
Manual
# Import the GPG signing key
sudo rpm --import https://pkg.rayketcham.com/gpg.key
# Add the repository
sudo tee /etc/yum.repos.d/spork.repo <<EOF
[spork]
name=SPORK Package Repository
baseurl=https://pkg.rayketcham.com/rpm
gpgcheck=1
gpgkey=https://pkg.rayketcham.com/gpg.key
enabled=1
EOF
Install Packages
sudo dnf install spork-acme
sudo dnf install spork-ca
Available Packages
spork-acme
| Field | Value |
|---|
| Version | 0.4.0-beta.10 |
| License | Apache-2.0 |
| Size | ~5 MB |
| Description | Standalone RFC 8555 ACME server with built-in micro-CA. certbot-compatible.
5 deployment modes. Admin dashboard. Interactive setup wizard. |
| Installs to | /usr/bin/spork-acme |
| Systemd | spork-acme.service, spork-acme-renew.timer |
spork-ca
| Field | Value |
|---|
| Version | 0.3.0-beta.11 |
| License | BSL-1.1 |
| Size | ~8 MB |
| Description | Full CA engine with OCSP, CRL, EST, SCEP, CMP, Shell, API, Sign, TSA, TUI.
12 binaries in one package. |
| Installs to | /usr/bin/spork, /usr/bin/spork-shell, /usr/bin/spork-api |
| Systemd | spork-api.service |
Verify Installation
# ACME server
spork-acme --version
sudo systemctl status spork-acme
# CA engine
spork --version
sudo systemctl status spork-api
GPG Signing Key
| Field | Value |
|---|
| UID | SPORK Package Signing <packages@rayketcham.com> |
| Algorithm | Ed25519 |
| Fingerprint | D214 C7D9 9E0B 49F4 F02F 45D1 2DF9 F49E 7CBC 4DB9 |
| Expires | 2031-02-28 |
| Download | gpg.key |
Repository URLs