用OpenCA构建自己的PKI  

Build your own PKI with OpenCA

作　　者：孔宁[1] 毛伟[2] 

机构地区：[1]中国科学院计算机网络信息中心,北京100080 [2]中国科学院研究生院,北京100080

出　　处：《微电子学与计算机》2005年第8期71-75,共5页Microelectronics & Computer

摘　　要：随着互联网络的飞速发展,网络中的安全问题日益受到人们的重视。众所周知,PKI公钥基础设施是目前比较成熟、完善的互联网络安全解决方案。但PKI实施起来比较繁琐,并且当前实现PKI的商用软件价格较为昂贵,这都阻碍了PKI的广泛应用。本文针对这一现状,重点介绍实现PKI技术的开源软件OpenCA。由于OpenCA的配置、使用过程比较繁杂,并且相关文档比较缺乏,因此本文通过讲解笔者用OpenCA搭建的一套PKI系统,详细介绍了OpenCA的配置、使用方法。With the explosive growth of Intemet, increasingly importance has been attached to the security problem of Intemet. As we all know, PKI（Public Key Infrastructure） is a mature and consummate formula for settling the security problem of Intemet at present, but it＇s very complicated to put into practice, and the commercial software which performs PKI is expensive, those retard the progress of the widespread use of PKI. In face of this actual state, this dissertation briefly introduces the open source software： OpenCA which realizes the technology of PKI. As the configuration and use of OpenCA is rather complicated, and lack of associated file, so this paper gives a detailed account of the configuration and use of OpenCA by explaining a PKI system built by author with OpenCA, and it will have some effect on improving the extension and development of PKI.

关 键 词：OpenCA 公钥基础设施PKI 认证中心CA 数字证书 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]