OpenCA
| Developer(s) | OpenCA Labs |
|---|---|
| Stable release | v1.5.2[1]
/ May 10, 2014 |
| Engine | |
| Operating system | Multi-platform |
| Type | PKI Software |
| License | GNU General Public License |
| Website | https://www.openca.org/ |
Search OpenCA on Amazon.
OpenCA, officially the OpenCA PKI Research Labs and formerly the OpenCA Project, is a PKI collaborative effort to develop a robust, full-featured and open-source out-of-the-box certification authority implementing the most used protocols with full-strength cryptography. OpenCA is based on many open-source projects; among these are OpenLDAP, OpenSSL and Apache projects.
Project development is divided into 2 main tasks: studying and refining the security scheme that guarantees the best model to be used in a certificate authority, and developing software to easily set up and manage a CA.
OpenCA PKI[edit]
The problem with Public Key Infrastructures (PKIs) is that most applications can be secured with certificates and keys but it is difficult and sometimes expensive to set up PKIs, because flexible trustcenter software is expensive.
OpenCA PKI Features[edit]
Today OpenCa supports the following elements: (this is an incomplete list just to give you an impression of how complex the subject matter is):
- Public interface
- LDAP interface
- RA interface
- CA interface
- SCEP
- OCSP
- IP-filters for interfaces
- Passphrase based login
- Certificate based login (including smartcards)
- Role Based Access Control
- Flexible Certificate Subjects
- Flexible Certificate Extensions
- PIN based revocation
- Digital signature based revocation
- CRL issuing
- Warnings for soon to expire certificates
- support for nearly every (graphical) browser
OpenCA is designed for a distributed infrastructure. It can, not only handle an offline CA and an online RA, but using it you can build a whole hierarchy with three or more levels. OpenCA is not just a small solution for small and medium research facilities. The goal is to support maximum flexibility for big organizations like universities, grids and global companies.
See also[edit]
External links[edit]
References[edit]
 | This cryptography-related article is a stub. You can help EverybodyWiki by expanding it. |
This article "OpenCA" is from Wikipedia. The list of its authors can be seen in its historical and/or the page Edithistory:OpenCA. Articles copied from Draft Namespace on Wikipedia could be seen on the Draft Namespace of Wikipedia and not main one.
