Projects / EJBCA


EJBCA is a fully functional Certificate Authority in Java using JEE technology. It builds on the JEE platform to create a robust, high performance, platform independent, flexible, and component-based CA to be used standalone or integrated in any JEE app. EJBCA comes with a flexible and powerful Web-based admin GUI.

Operating Systems

Recent releases

  •  30 Dec 2013 11:52

    Release Notes: A new Crypto Token concept. Complete GUI support for configuring software and hardware security modules. CMP configuration in the GUI, supporting multiple different configurations through CMP Aliases. A new Internal Key binding concept merges the Certificate Authority and Validation Authority functionality. Support for Java 7 and JBoss 7. Support for OCSP extended revoked status compliant with RFC6960. OCSP RFC5019 responses with unknown response code are no longer cached. Support for OCSP archive cutoff date for expired certificates. Speedups when starting the command line interface.

    •  16 Aug 2012 12:37

      Release Notes: This is a maintenance release containing a few new features and improvements. Noteworthy changes: the ability for External OCSP responder key renewal at absolute times. Certificate expiration notifier can now filter on certificate profiles, not only CAs. A publisher for sampling of issued certificates. User-friendly output of certificate profile dependencies when deletion can not be done. A new language tool for developers and localizers. OCSP rekeying now works on JBoss 6.1.0 and JBoss EAP5.

      •  25 Dec 2011 12:15

        Release Notes: This release fixes a bug reading large OCSP requests over HTTP 1.1 using chunked encoding. It fixes a few minor XSS issues. It fixes an issue where building the Validation Authority (VA) failed on specific platforms. The VA health-check URL is now what it is claimed to be in the property file. You will need to reconfigure devices monitoring this URL. This release documents EJBCA integration with Djigzo. It adds a plug-in build system. It has improved support for Chinese in the admin GUI.

        •  03 Nov 2011 10:45

          Release Notes: This release corrects comparison of public keys in HSM and CA certificates, fixes regression during republishing, and adds many small bugfixes.

          •  02 Jun 2011 10:15

            Release Notes: Improved CMP interoperability, and minor improvements and bugfixes. A bug that made it impossible to delete end entity profiles on certain databases and hsql (test database) in particular was fixed.


            Project Spotlight


            A Fluent OpenStack client API for Java.


            Project Spotlight

            TurnKey TWiki Appliance

            A TWiki appliance that is easy to use and lightweight.