Re: Local CA on Gentoo

Ramon van Alteren <[email protected]> Wed, 15 Feb 2012 01:29:13 +0100
Newsgroups gmane.linux.gentoo.server
Message-ID <CAOAuWywxhJeB1TofoJqSB6WaPxdQMQ0T-xTjfMiLNy8uEEtJ5Q@mail.gmail.com>
I did, but it is far from trivial to do right....
And even then the mess in certificate fields and the non-standard way
all kinds of implementations are done over various services sometimes
drives me insane.....

Anyway, if your needs are fairly simple (1-2 level CA + signing
certificates) I can definitly recommend xca:
http://xca.sourceforge.net/

I has reasonable documentation and a nice GUI. It also produces well
defined certificates and most importantly has the ability to revoke
certificates that you have issued...

If you stick it's database into a VCS you can share the work.

/Ramon

2012/2/10 Vinícius Ferrão <[email protected]>:
> Hi peeps,
>
> I would like to know if someone successfully implemented a Local CA to sign services and servers using Gentoo or other Linux.
>
> I'm currently in a Mixed Environment (we have: Windows 2008R2, OS X Lion, Linux and FreeBSD), and I really want a single solution, since I need certs for my servers, as example: a Postfix Mail Gateway, a W2k8 Domain Controller, Exchange Server, Mac OS X Time Machine Server, etc.
>
> Thanks in advance,
> Vinícius