# Install minica with Homebrew, apt, Nix Small, simple certificate authority. Version 1.1.0 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:minica ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install minica ``` Evidence: local Homebrew formula metadata ### Linux - Debian apt (92%): ```sh sudo apt install minica ``` Evidence: Debian stable package indexes: minica from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - Nix (92%): ```sh nix profile install nixpkgs#minica ``` Evidence: nixpkgs package indexes: pkgs/by-name/mi/minica/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:minica - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.1.0 - **Source summary:** Small, simple certificate authority - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** MIT - **Source archive:** - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - minica (cli) - minica (alias) ## Build dependencies - go ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, monterey, sonoma, ventura, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 1.1.0 - Local data: ok - Upstream repository: https://github.com/jsha/minica - Upstream latest detected: v1.1.0 (current) - info: No package-manager update timestamp was available. ## Project history and usage minica is a small certificate-authority utility from the `jsha/minica` repository. Its README defines the intended trust model narrowly: it is for situations where the CA operator also operates each host that will use the generated certificate. ### Project history The tool automatically creates a root key and certificate and then signs end-entity certificates for requested DNS names or IP addresses. It does not provide OCSP or CRL services, and the README positions it as appropriate for RPC systems or microservices rather than as a public CA or full PKI platform. ### How it is used In practice, minica is used by developers and operators who need local or internal TLS certificates with more structure than a single ad hoc self-signed certificate. The Homebrew package installs a tiny Go-based CLI alternative to heavier internal-CA systems such as step-ca, Vault PKI, or a full ACME deployment when the operator controls both the CA and the hosts. ### Sources - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** minica - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - minica - 1.0-2+b16: normalized package name match | Debian stable package indexes: minica from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | super micro binary to issue new CAs | https://github.com/paultag/minica - Nix - minica: normalized package name match | nixpkgs package indexes: pkgs/by-name/mi/minica/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - minica - 1.0-2build1: normalized package name match | Ubuntu 24.04 LTS package indexes: minica from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | super micro binary to issue new CAs | https://github.com/paultag/minica ## Related links - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [certstrap](https://www.automicvault.com/pkg/brew/certstrap/) - Shares av.db curated category or tags: certificate-authority, certificates, cli, pki, security. - [easy-rsa](https://www.automicvault.com/pkg/brew/easy-rsa/) - Shares av.db curated category or tags: certificate-authority, certificates, cli, pki, security. - [certbot](https://www.automicvault.com/pkg/brew/certbot/) - Shares av.db curated category or tags: certificates, cli, security, tls. - [certgraph](https://www.automicvault.com/pkg/brew/certgraph/) - Shares av.db curated category or tags: certificates, cli, security, tls. - [certigo](https://www.automicvault.com/pkg/brew/certigo/) - Shares av.db curated category or tags: certificates, cli, security, tls. - [crip](https://www.automicvault.com/pkg/brew/crip/) - Shares av.db curated category or tags: certificates, cli, security, tls. - [gimmecert](https://www.automicvault.com/pkg/brew/gimmecert/) - Shares av.db curated category or tags: certificate-authority, certificates, cli, security. - [mkcert](https://www.automicvault.com/pkg/brew/mkcert/) - Shares av.db curated category or tags: certificates, cli, security, tls. ## Combined YAML source View the package source record on GitHub. [combined/minica.yml](https://github.com/automic-vault/db/blob/main/combined/minica.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph