OpenXPKI is a comprehensive public key infrastructure platform designed to operate certificate authorities and trust centres. It targets organisations that require more extensive certificate lifecycle management than is provided by simple certificate generation utilities.
The software combines a browser-based interface with a configurable workflow system. Workflows can be adapted to model certificate requests, approvals, issuance and other processes without changing the underlying PKI engine. Its file-based configuration also makes settings easier to version, review and deploy through controlled environments.
OpenXPKI can manage multiple separate certificate authorities from a single installation and supports automated rollover between CA generations. It offers SCEP and EST enrollment and can interact with external certificate authorities, including services using ACME.
Cryptographic operations can be delegated to supported hardware security modules, allowing private CA keys to be protected by dedicated hardware. The platform also offers extensive automation facilities for organisations managing large numbers of certificates.
OpenXPKI is built around Perl and OpenSSL and is designed for Unix-like systems. Its combination of workflows, multiple CA support and lifecycle management makes it particularly suited to more complex internal PKI deployments.
This is free and open source software.
Key Features
- Operates complete public key infrastructure environments.
- Manages multiple certificate authorities from one installation.
- Provides a browser-based user interface.
- Offers configurable certificate management workflows.
- Supports SCEP certificate enrollment.
- Supports EST certificate enrollment.
- Provides automated CA generation rollover.
- Can integrate with hardware security modules.
- Supports interaction with external certificate authorities.
- Uses file-based configuration suitable for version control.
- Offers extensive certificate lifecycle management.
- Provides configurable authentication and authorization mechanisms.
Website: github.com/openxpki/openxpki
Support:
Developer: OpenXPKI Project
License: Apache License 2.0
OpenXPKI is written in Perl. Learn Perl with our recommended free books and free tutorials.
 LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of recommended applications, including alternatives to popular proprietary software.We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our Linux resources to discover more. Know a useful free and open source Linux application we haven't covered? Suggest a program for inclusion. Has your software been featured on LinuxLinks? Display one of our Featured on LinuxLinks badges on your website or GitHub README. |
Please read our Comment Policy before commenting.