Complimentary software
Complimentary software
To build a succesfull PKI you can benefit from a lot of tools available. Here are listed some tools and packages that can be used together with PKI to even further improve your PKI experience.
Signserver
The SignServer is an application for automatic signatures called by other systems not able to connect
to crytographic hardware.
It is a framework that can be customized to specific needs using simple plug-in modules.
The SignServer have a ready to use TimeStamp Authority (RFC 3161 compliant) and a MRTD Signer.
Another usage is to provide a simplified method to provide signatures in different application
managed from one location in the company.
The SignServer have been designed for high-availability and can be clustered for maximum reliability.
Hard Token Management Framework
Hard Token Management Framework
The hard token management framework is a framework for creating applications to manage to complete life cycle of
issuing hard tokens (smart cards, USB PKI dongles, etc) to end users.
The framework is an API that you build a GUI on top of.
CSRTool
CSRTool website
or
CSRTool at sourceforge
A graphical tool for generating RSA and ECDSA cryptographic key-pairs, creating Certificate Signing Requests (CSRs) from them, and combining the key-pair with an issued digital certificate to create a secure portable container (PKCS12, JKS, JCEKS, etc.)
Some features:
- Generates RSA public and private key-pairs in sizes ranging from 1024 to 8192 bits.
- Generates Elliptic Curve DSA public and private key-pairs using either the ANSI X9.62 named curves, or custom parameters for your own curve if so inclined.
- Saves the private-key in a PKCS8 file with Password-Based-Encryption using the SHA1withTripleDES algorithm.
- Generates a PEM-encoded CSR that can be submitted to a CA either through a web-form or e-mail.
- Generates keyUsage and/or the subjectAltName extensions (optionally) in the RSA-based CSR.
- Combines the private-key from the previously-stored PKCS8 file and the newly returned digital certificate, into a PKCS12 file that can be used for importation into desired applications.