Geoff Thorpe wrote: > > Hi, > > On Tue, 16 Jul 2002, Wienckowski, Justin wrote: > > > [...] > > I'd love to re-implement our CA and directory in Unix using OpenSSL. > > Anyone know of companies or organizations who may have already done > > this? I'm finding very little publicized on the web, and dropping some > > names would help immensely. > > I haven't had a chance to play with it - but you might want to try OpenCA > and see how it pans out. http://www.openca.org
Justin, if you actually try to use OpenCA, please post your experiences to the list. We looked at OpenCA to use in a research project here and ended up taking advantage of a site license for the Netscape CA instead. The Netscape product may be huge and complex, but it is at least well-documented and stable. It looked as if OpenCA would have taken more energy than we wanted to devote to that component of the project. I'll be following OpenCA over time. The notion of a free CA is fairly attractive, and if it was also well-documented, standards-compliant, and stable, it would be compelling. Paul Allen -- Boeing Phantom Works \ Paul L. Allen, (425) 865-3297 Math & Computing Technology \ [EMAIL PROTECTED] POB 3707 M/S 7L-40, Seattle, WA 98124-2207 \ Prototype Systems Group ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]