PKI root signing ceremony, etc.
Rich Salz
rsalz at datapower.com
Sun Dec 14 11:14:19 EST 2003
> These days there is a very nice oss/free gui tool which makes the whole
> process a whole lot easier - check out:
> http://sourceforge.net/projects/xca
It's nice to have a GUI, but seeing phrases like
For building the chains the CA flag is disregarded ...
doesn't make me feel very comfortable. Also, there's no discussion of key
management, auditing, etc. XCA is probably useful, but as a Level 1 CA,
not an enterprise root or management thereof. Those are the points I
tried to address in the column.
/r$
--
Rich Salz Chief Security Architect
DataPower Technology http://www.datapower.com
XS40 XML Security Gateway http://www.datapower.com/products/xs40.html
XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.html
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com
More information about the cryptography
mailing list