ssl - Is there a standard way to run a x509 key server? -
Is the name of a project / product that is standardized for HTTP to access / download x509 / SSL certificates is? I have seen RFC 4387 but those who apply it did not get it. Actually, I'm trying to set up a major server for an internal application.
So less than implementing oneself, does anyone have any suggestions?
This is the "standard" for an HTTP-accessible certificate repository, but I have never implemented it Most CAs that provide an HTTP repository do not use standard, machine-accessible interfaces. For example, Verisign provides a certificate store for certificates which it releases to American government employees, and makes it accessible through a form-based web application.
For machine interfaces, "everyone" uses LDAP, more importantly, while LDAP-enabled clients are normal, I've never seen a client application that supports an HTTP interface is. What are you planning to do with the HTTP repository?
Comments
Post a Comment