Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am using the nice XCA packge on my WS to generate and track the keys and CSRs we submit to various CAs, track the certificates we get back from then and to manage the full lifecycle of other self-signed certificates we generate for internal use.

Now I need to share this task with other coworkers, but XCA does not fit the bill, essentially because we need something that will run on a Centos5 machine and have a web interface.

I have been on the openCA site, but the rpms cater mostly to fedora 12 and up. I could try and build fresh RPMs, but that often proves a fruitless, frustrating activity.

Does anybody know of a package that would fulfill my requisites?

share|improve this question
up vote 2 down vote accepted

I personally use EJBCA. It works quite well, you can delegate privileges to other people (set what kind of certificates they can create), can publish certificates in LDAP, works as OCSP server.

The only grievance is that it is quite resource heavy, a 1GB RAM is a reasonable minimum, with 768MB the system is swapping.

share|improve this answer
Thanks, I'll look it up, but the "EJB" part probably means that it's not suitable exactly for the reason you mention - the CA related activity is peripheral enough to not warrant the resources/maintenance hurdle of an EJB site. – Alien Life Form Jan 16 '12 at 10:41
Setting it up is definitely non trivial, but after that, it's basically maintenance free. – Hubert Kario Jan 16 '12 at 11:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.