Gentoo Archives: gentoo-server

From: Ramon van Alteren <ramon@××××××××××.nl>
To: gentoo-server@l.g.o
Subject: Re: [gentoo-server] Local CA on Gentoo
Date: Wed, 15 Feb 2012 00:30:06
Message-Id: CAOAuWywxhJeB1TofoJqSB6WaPxdQMQ0T-xTjfMiLNy8uEEtJ5Q@mail.gmail.com
In Reply to: [gentoo-server] Local CA on Gentoo by "Vinícius Ferrão"
1 I did, but it is far from trivial to do right....
2 And even then the mess in certificate fields and the non-standard way
3 all kinds of implementations are done over various services sometimes
4 drives me insane.....
5
6 Anyway, if your needs are fairly simple (1-2 level CA + signing
7 certificates) I can definitly recommend xca:
8 http://xca.sourceforge.net/
9
10 I has reasonable documentation and a nice GUI. It also produces well
11 defined certificates and most importantly has the ability to revoke
12 certificates that you have issued...
13
14 If you stick it's database into a VCS you can share the work.
15
16 /Ramon
17
18 2012/2/10 Vinícius Ferrão <viniciusferrao@××××××××××.br>:
19 > Hi peeps,
20 >
21 > I would like to know if someone successfully implemented a Local CA to sign services and servers using Gentoo or other Linux.
22 >
23 > I'm currently in a Mixed Environment (we have: Windows 2008R2, OS X Lion, Linux and FreeBSD), and I really want a single solution, since I need certs for my servers, as example: a Postfix Mail Gateway, a W2k8 Domain Controller, Exchange Server, Mac OS X Time Machine Server, etc.
24 >
25 > Thanks in advance,
26 > Vinícius