Developer(s) | The OpenXPKI Foundation |
---|---|
Written in | Perl |
Operating system | Unix-like operating systems |
Type | Public key infrastructure |
License | Apache License V 2.0 |
Website | http://www.openxpki.org/ |
The OpenXPKI project stewards an open-source Public Key Infrastructure (PKI) software.
The OpenXPKI project commenced c. 2005 and began to produce usable software from c. 2010 but choose to take a precautionary approach with the first production level release in 2015.[1] The approach taken was to create a modular system with most modules capable of being re-utilised in other systems.[2] A Workflow engine centered approach.[3]
The software has been mostly written in Perl.[4] and designed to run on Unix-like operating systems such as FreeBSD and Linux.[4] Database backends have been created for MySQL, PostgreSQL, the Oracle Database and IBM Db2.[4]
After installation the software on the node is configured to act as a Certificate Authority (CA), Registration Authority (RA) or End-Entity Enrolement (EE) node.[4][2]
One client implementation is a web frontend that allows end-users to access the OpenXPKI system using a web browser, and a command line interface available also available for system administrators.[5] OpenXKPI also has available a SCEP interface.[1][6]
OpenXPKI has been used successfully in scenarios from performance testing up to enterprise level environments. Shortcomings are that it requires additional components to complete a certificate based authentication, including software for efficient certificate distribution.[7]