I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.
4 Answers
I recommend using OpenCA and here is the install guide. This is a full fledge PKI suite, which includes an OCSP server to immediately revoke certificates. It also has a PKI Resource Protocol server. I have personally used OpenCA and it is what you want.
If you really like RedHat and Java then you might want to go with RedHat Certificate System.
-
mm.cs.dartmouth.edu/wiki/index.php/Installing_OpenCA link is no longer working as of 10/14/2013 or sooner. Oct 14, 2013 at 15:39
Have a look at this: http://novosial.org/openssl/ca/
And for the entire work flow: http://novosial.org/openssl/
-
3
You can craft your own certificates with openssl
command line tool.
It is possible to generate the root
certificate, hence the (sub-)certificates you need.
You can use the following tool, simplifying the whole process: https://github.com/auino/your-own-ssl-certificate-authority