Web application to register FIDO keys from TLS ClientAuth sessions
...The TLS ClientAuth strong authentication process validates the digital certificate's chain (if any) and uses CRLs to verify the certificate's revocation status (OCSP checking will come in the next release).
Once the certificate chain is validated, it checks an LDAP server to determine if the user is authorized to register a FIDO Security key with the site.
Since PKI2FIDO is a sample application, a De-register button is enabled to delete FIDO keys; This enables the user to keep testing with the same username.
The OpenCA PKI Development Project is a collaborative effort to develop a robust, full-featured and Open Source out-of-the-box Certification Authority implementing the most used protocols with full-strength cryptography world-wide.
This package provides the following pure Java extensions to the Bouncy Castle framework www.bouncycastle.org and was made freely available by www.novosec.com:
1. OCSP (RFC 2560) server and client /
2. CMP (RFC 2510, RFC 2511) generator and parser