{{tag>Brouillon PKI}}

= Notes PKI

Infrastructure à clés publiques (ICP ou PKI)

Voir :
* [[Notes PKI avec XCA X Certificate and key manager]]
* [[https://github.com/cloudflare/cfssl|CloudFlare's PKI/TLS toolkit]] (a command line tool and an HTTP API server)

Voir aussi :
* [[Notes PKI EasyRSA OpenVPN]]
* [[BounCA - Une WebUI pour gérer vos certificats SSL/TLS PKI]]
* [[https://blog.stephane-robert.info/post/homelab-certificats-https-ssl-mkcert/|MKCert]]
* [[http://www.tutorialspoint.com/unix_commands/keytool.htm|keytool]]
* https://github.com/sektioneins/micro-ca-tool
* https://fladnag.net/?page_id=167
* KeyStore Explorer


Solutions Pro :
* OpenXPKI
* [[Notes PKI avec XCA X Certificate and key manager|XCA]]
* EJBCA
* [[https://www.dogtagpki.org|Dogtag PKI]]
* Redhat Certificate System



EJBCA :
* https://www.smartcard-hsm.com/2014/09/05/Accessing_your_SmartCard-HSM_from_EJBCA.html

Generating intermediate CA
https://forums.openvpn.net/topic10023.html

https://wiki.archlinux.org/index.php/Create_a_Public_Key_Infrastructure_Using_the_easy-rsa_Scripts
https://code.google.com/p/android-openvpn-settings/wiki/CertificateHowTo

Révocation OpenVPN
http://blog.remibergsma.com/2013/02/27/improving-openvpn-security-by-revoking-unneeded-certificates/