Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Want to setup a CA, but it's hard to find a good web based X509 PKI tool, any recommend?

share|improve this question

closed as not constructive by mgorven, Dave M, sysadmin1138 Feb 2 '13 at 0:23

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

Define "good", for your purposes. – womble Mar 26 '12 at 8:18

As Dom said you can use EJBCA, but it's a PITA to set up (it uses tomcat, you have to meddle with the java key store, and the setup scripts are somewhat broken). I gave up on it.
Then there is openxpki, but the documentation is so lacking that I gave up on that as well (the config files are a labyrinth, after 6 hours of meddling with my setup and reading the docs I still have no idea of how to set up users).
openxpki was started because developers from the OpenCA project were in disagreement with the original author of the project (if I remember correctly). I couldn't figure out how to install OpenCA on debian, so I gave up on that as well.
The author of openWebPKI requires you to send him an email to obtain the source code for the web interface, this doesn't really instill confidence either.

Right now I am simply using some shell scripts (which sucks, big time).

share|improve this answer, are maybe what your are looking for. I never used them.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.