PKI root signing ceremony, etc.

[Dave Howe]

Rich Salz wrote:
> Some folks here might be interested in
>    http://webservices.xml.com/pub/a/ws/2003/12/09/salz.html
> which walks through a secure, auditable root keygen and signing
> ceremony. The context is using OpenSSL to build a PKI so that we can
> write an XKMS server, building up to secure Web Services messages
> using XML DSIG and Encryption.
>
> But hey, ya gotta start somewhere.
Looks good. A group I am involved with followed though similar steps a few
years ago - using openssl and batch files.
These days there is a very nice oss/free gui tool which makes the whole
process a whole lot easier - check out:
http://sourceforge.net/projects/xca

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com