ssl - Is there a standard way to run a x509 key server? -


Is the name of a project / product that is standardized for HTTP to access / download x509 / SSL certificates is? I have seen RFC 4387 but those who apply it did not get it. Actually, I'm trying to set up a major server for an internal application.

So less than implementing oneself, does anyone have any suggestions?

This is the "standard" for an HTTP-accessible certificate repository, but I have never implemented it Most CAs that provide an HTTP repository do not use standard, machine-accessible interfaces. For example, Verisign provides a certificate store for certificates which it releases to American government employees, and makes it accessible through a form-based web application.

For machine interfaces, "everyone" uses LDAP, more importantly, while LDAP-enabled clients are normal, I've never seen a client application that supports an HTTP interface is. What are you planning to do with the HTTP repository?


Comments

Popular posts from this blog

windows - Heroku throws SQLITE3 Read only exception -

lex - Building a lexical Analyzer in Java -

python - rename keys in a dictionary -