The OpenCA Project is a collaborative effort to develop a robust, full-featured and Open Source out-of-the-box Certification Authority implementing the most used protocols with full-strength cryptography world-wide. OpenCA is based on many Open-Source Projects. Among the supported software is OpenLDAP, OpenSSL, Apache Project, Apache mod_ssl.
| Tags | Security Cryptography PKI Digital Certificates X509 |
|---|---|
| Licenses | BSD Revised |
| Operating Systems | Linux Solaris Mac OS X BSD |
| Implementation | C JavaScript Perl PL/SQL Unix Shell |
| Translations | English Italian Spanish German Japanese French Romanian Russian Slovenian |
Recent releases


Release Notes: An #include error in OpenCA.xs that prevented ECDSA from being correctly enabled was fixed. A missing keyword in the ca.conf.template configuration file that caused the RA Operator Certificate request to fail was added. Wrong permissions in binary distributions that prevented the correct import of data among different PKI components were fixed.


Release Notes: This release has support for the Elliptic Curves (ECDSA) algorithm, improved DSA support, an improved dynamic menu system, new online engines (to automatically issue certificates and CRLs), new automatic email message handling for newly issued certificates and expiration warnings, enhanced compatibility with different Unix systems (e.g. Fedora, CentOS, FreeBSD, OpenSolaris, etc.), and a new and simple graphical installer (binary packages).


Release Notes: The new package build and installation dir mode of the PREFIX/etc directory was fixed. openca-sv and openca-scep were packaged outside the base package (no more C-related modules inside the base package). ocspd is now completely independent from the openca base package. Building of binary packages and installation of packages were fixed.


Release Notes: Improved UTF-8 support, LDAP authentication support, SCEP Certificate template request, and authenticated requests support.


Release Notes: Dynamic engine support, a Russian translation for messages, UTF8 support, and bugfixes for timeouts with OpenSSL calls. Policy management on SCEP servers was improved. Other minor bugfixes and documentation updates were made.