PKI root signing ceremony, etc.

Rich Salz rsalz at datapower.com
Sun Dec 14 11:14:19 EST 2003


> These days there is a very nice oss/free gui tool which makes the whole
> process a whole lot easier - check out:
> http://sourceforge.net/projects/xca

It's nice to have a GUI, but seeing phrases like
   For building the chains the CA flag is disregarded ...
doesn't make me feel very comfortable.  Also, there's no discussion of key
management, auditing, etc.  XCA is probably useful, but as a Level 1 CA,
not an enterprise root or management thereof.  Those are the points I
tried to address in the column.

	/r$
--
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
XML Security Overview      http://www.datapower.com/xmldev/xmlsecurity.html

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com



More information about the cryptography mailing list