Skip to main content
Software Recommendations

Return to Question

deleted 119 characters in body; edited tags; edited title
Source Link
unor
unor
  • 7.7k
  • 5
  • 39
  • 100

Is there an OpenSSL alternative that features better automation Propertiesproperties

i need a lil' bit o' help right now. I plan on making my own Certificate Authority, and already got quite a bit of money for the project, and now iI need a way to issue certificates. 

I was going to use OpenSSL, but it isntisn't great for automation and iI had issues where the certificate didntdidn't include an anchor, and the alternative DNS names didnt work. Now iI need a more reliable solution. 

Is there a good Linux-compatible Certificate issuing software/implementation with support for subjectAltNames, <- alternative DNS names, fairly good automation features, reliable certificate output, key generation up to 8192 bits RSA, AES256-encrypted keys, RootCA/IntermediateCA support  (being able to sign Intermediate Certs with a Root CA, and having multiple Intermediates for DV,OV and EV), being able to choose with what Intemediate you want to sign the server certificate, OCSP support, CRL support, and working anchors inside certificates.?

Of course, if the CA gets big, iI will get devs to make me a custom implementation made for my needs, but right now, iI need a pre-existing solution that is not OpenSSL or a fork of it. It should preferably be free... Also, if this is the wrong place, please move it to the correct stack or whatever its called.

Is there an OpenSSL alternative that features better automation Properties

i need a lil' bit o' help right now. I plan on making my own Certificate Authority, and already got quite a bit of money for the project, and now i need a way to issue certificates. I was going to use OpenSSL, but it isnt great for automation and i had issues where the certificate didnt include an anchor, and the alternative DNS names didnt work. Now i need a more reliable solution. Is there a good Linux-compatible Certificate issuing software/implementation with support for subjectAltNames, <- alternative DNS names, fairly good automation features, reliable certificate output, key generation up to 8192 bits RSA, AES256-encrypted keys, RootCA/IntermediateCA support(being able to sign Intermediate Certs with a Root CA, and having multiple Intermediates for DV,OV and EV), being able to choose with what Intemediate you want to sign the server certificate, OCSP support, CRL support, and working anchors inside certificates. Of course, if the CA gets big, i will get devs to make me a custom implementation made for my needs, but right now, i need a pre-existing solution that is not OpenSSL or a fork of it. It should preferably be free... Also, if this is the wrong place, please move it to the correct stack or whatever its called.

OpenSSL alternative that features better automation properties

I plan on making my own Certificate Authority, and already got quite a bit of money for the project, and now I need a way to issue certificates. 

I was going to use OpenSSL, but it isn't great for automation and I had issues where the certificate didn't include an anchor, and the alternative DNS names didnt work. Now I need a more reliable solution. 

Is there a good Linux-compatible Certificate issuing software/implementation with support for subjectAltNames, <- alternative DNS names, fairly good automation features, reliable certificate output, key generation up to 8192 bits RSA, AES256-encrypted keys, RootCA/IntermediateCA support  (being able to sign Intermediate Certs with a Root CA, and having multiple Intermediates for DV,OV and EV), being able to choose with what Intemediate you want to sign the server certificate, OCSP support, CRL support, and working anchors inside certificates?

Of course, if the CA gets big, I will get devs to make me a custom implementation made for my needs, but right now, I need a pre-existing solution that is not OpenSSL or a fork of it. It should preferably be free.

Post Migrated Here from crypto.stackexchange.com (revisions)
Source Link
hungrybeast
hungrybeast
  • 21
  • 2

Is there an OpenSSL alternative that features better automation Properties

i need a lil' bit o' help right now. I plan on making my own Certificate Authority, and already got quite a bit of money for the project, and now i need a way to issue certificates. I was going to use OpenSSL, but it isnt great for automation and i had issues where the certificate didnt include an anchor, and the alternative DNS names didnt work. Now i need a more reliable solution. Is there a good Linux-compatible Certificate issuing software/implementation with support for subjectAltNames, <- alternative DNS names, fairly good automation features, reliable certificate output, key generation up to 8192 bits RSA, AES256-encrypted keys, RootCA/IntermediateCA support(being able to sign Intermediate Certs with a Root CA, and having multiple Intermediates for DV,OV and EV), being able to choose with what Intemediate you want to sign the server certificate, OCSP support, CRL support, and working anchors inside certificates. Of course, if the CA gets big, i will get devs to make me a custom implementation made for my needs, but right now, i need a pre-existing solution that is not OpenSSL or a fork of it. It should preferably be free... Also, if this is the wrong place, please move it to the correct stack or whatever its called.