OpenXPKI is a comprehensive public key infrastructure platform designed to operate certificate authorities and trust centres. It targets organisations that require more extensive certificate lifecycle management than is provided by simple certificate generation utilities.
The software combines a browser-based interface with a configurable workflow system. Workflows can be adapted to model certificate requests, approvals, issuance and other processes without changing the underlying PKI engine. Its file-based configuration also makes settings easier to version, review and deploy through controlled environments.
OpenXPKI can manage multiple separate certificate authorities from a single installation and supports automated rollover between CA generations. It offers SCEP and EST enrollment and can interact with external certificate authorities, including services using ACME.
Cryptographic operations can be delegated to supported hardware security modules, allowing private CA keys to be protected by dedicated hardware. The platform also offers extensive automation facilities for organisations managing large numbers of certificates.
OpenXPKI is built around Perl and OpenSSL and is designed for Unix-like systems. Its combination of workflows, multiple CA support and lifecycle management makes it particularly suited to more complex internal PKI deployments.
This is free and open source software.
Key Features
- Operates complete public key infrastructure environments.
- Manages multiple certificate authorities from one installation.
- Provides a browser-based user interface.
- Offers configurable certificate management workflows.
- Supports SCEP certificate enrollment.
- Supports EST certificate enrollment.
- Provides automated CA generation rollover.
- Can integrate with hardware security modules.
- Supports interaction with external certificate authorities.
- Uses file-based configuration suitable for version control.
- Offers extensive certificate lifecycle management.
- Provides configurable authentication and authorization mechanisms.
Website: github.com/openxpki/openxpki
Support:
Developer: OpenXPKI Project
License: Apache License 2.0
OpenXPKI is written in Perl. Learn Perl with our recommended free books and free tutorials.
 Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category.This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more. Discovered a useful open source Linux program that we haven’t covered yet? Let us know by completing this form. |
Please read our Comment Policy before commenting.