Home / server / Questions / 160189
Accepted
Ivan
Asked: 2010-07-14 21:32:01 +0800 CST

How to set up my own full-featured certificate authority?

  • 772

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.

linux security rsa ssl-certificate openssl

4 Answers

  1. Best Answer

    You can use TinyCA, a graphical front-end for OpenSSL that lets you manage the tasks of a certificate authority.

    Beware that the TinyCA website seems hard to reach at times.

    • 9

  2. I recommend using OpenCA and here is the install guide. This is a full fledge PKI suite, which includes an OCSP server to immediately revoke certificates. It also has a PKI Resource Protocol server. I have personally used OpenCA and it is what you want.

    If you really like RedHat and Java then you might want to go with RedHat Certificate System.

    • 5

  3. Have a look at this: http://novosial.org/openssl/ca/

    And for the entire work flow: http://novosial.org/openssl/

    • 2

  4. You can craft your own certificates with openssl command line tool.

    It is possible to generate the root certificate, hence the (sub-)certificates you need.

    You can use the following tool, simplifying the whole process: https://github.com/auino/your-own-ssl-certificate-authority

    • 0