OpenXPKI
{{Short description|Open source public key infrastructure software}}
{{Orphan|date=December 2024}}
{{Use dmy dates|date=May 2021}}
{{Infobox software
| name = OpenXPKI
| logo = OpenXPKI logo.png
| screenshot =
| caption =
| developer = The OpenXPKI Foundation
| operating_system = Unix-like operating systems
| programming_language = Perl
| genre = Public key infrastructure
| license = Apache License V 2.0
| website = http://www.openxpki.org/
}}
{{Portal|Free and open-source software}}
The OpenXPKI project stewards an open-source Public Key Infrastructure (PKI) software.
History
The OpenXPKI project commenced {{Circa}} 2005 and began to produce usable software from {{Circa}} 2010 but choose to take a precautionary approach with the first production level release in 2015.{{Sfn|Schmeh|2016|loc=Vorword (preface)}}
The approach taken was to create a modular system with most modules capable of being re-utilised in other systems{{sfn|Bartosch|2005|p=1}} - a Workflow engine centered approach.{{Sfn|Müller|2011|p=546}}
The software has been mostly written in Perl{{Sfn|Mahnke|Leitner|Damm|2009|p=240}} and designed to run on Unix-like operating systems such as FreeBSD and Linux.{{Sfn|Mahnke|Leitner|Damm|2009|p=240}} Database backends have been created for MySQL, PostgreSQL, the Oracle Database and IBM Db2.{{Sfn|Mahnke|Leitner|Damm|2009|p=240}}
Technical
After installation the software on the node is configured to act as a Certificate Authority (CA), Registration Authority (RA) or End-Entity Enrollment (EE) node.{{Sfn|Mahnke|Leitner|Damm|2009|p=240}}{{Sfn|Bartosch|2005|p=1}}
One client implementation is a web frontend that allows end-users to access the OpenXPKI system using a web browser, and a command line interface also available for system administrators.{{Sfn|Bartosch|2005|pp=1-2}} OpenXKPI also has a SCEP interface available.{{Sfn|Schmeh|2016|loc=Vorword (preface)}}{{sfn|OpenXPKI|2021|p=1}}
Reception
OpenXPKI has been used successfully in scenarios from performance testing up to enterprise level environments. Shortcomings are that it requires additional components to complete a certificate based authentication, including software for efficient certificate distribution.{{Sfn|Raphaely|2021}}
References
=Footnotes=
{{Reflist}}
=Sources=
- {{Cite web|last1=Bartosch|first1=Martin|date=19 November 2005|title=White Paper - Architecture Overview
|url=http://www.openxpki.org/download/OpenXPKI-Architecture-Overview.pdf|website=openxpki.org|url-status=dead|archive-date=28 April 2021
|archive-url=https://web.archive.org/web/20210428141756/http://www.openxpki.org/download/OpenXPKI-Architecture-Overview.pdf}}
- {{Cite web |last=Raphaely |first=Eytan |date=25 February 2021 |title=What is OpenXPKI? |url=https://www.securew2.com/blog/what-is-openxpki |access-date=6 May 2021 |website=securew2 |language=en-US}}
- {{Cite book|last1=Mahnke|first1=Wolfgang|last2=Leitner|first2=Stefan–Helmut|last3=Damm|first3=Matthias|date= 2009|title=OPC Unified Architecture
|publisher=Springer|location=Berlin|isbn=978-3-540-68899-0|doi=10.1007/978-3-540-68899-0|oclc=1259125048}}
- {{Cite book|last1=Müller|first1=Klaus-Rainer|date=2011|title=IT-Sicherheit mit System
|trans-title=Systematic IT security
|publisher=Springer|isbn=978-3-8348-8178-6|oclc=7326304165|language=de}}
- {{Cite web|author=OpenXPKI|date=2021|title=OpenXPKI feature overview
|url=http://www.openxpki.org/features.html|website=openxpki.org|access-date=14 November 2021|url-status=live|archive-date=28 April 2021
|archive-url=https://web.archive.org/web/20210428141449/http://www.openxpki.org/features.html}}
- {{Cite book|last1=Schmeh|first1=Klaus|date=2016|title=Kryptografie: Verfahren, Protokolle, Infrastrukturen
|trans-title=Cryptography: procedures, protocols, infrastructures
|language=de|publisher= Heidelberg dpunkt Verlag|oclc=936174582|isbn=9783864903564}}
External links
- [http://www.openxpki.org/ The OpenXPKI Project]