How to set up my own full-featured certificate authority?

Question

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.

Answer 1

You can use TinyCA, a graphical front-end for openssl that lets you manage the tasks of a certificate authority.

A screenshot from their page.

Answer 2

I recommend using OpenCA and here is the install guide. This is a full fledge PKI suite, which includes an OCSP server to immediately revoke certificates. It also has a PKI Resource Protocol server. I have personally used OpenCA and it is what you want.

If you really like RedHat and Java then you might want to go with RedHat Certificate System.

Answer 3

Have a look at this: http://sial.org/howto/openssl/ca/

And for the entire work flow: http://sial.org/howto/openssl/