|
From: LANDAIS G. <gla...@as...> - 2016-07-02 11:48:41
|
Hi, I am evaluating EJBCA to see if it will fit my current needs. This needs includes the possibility to automate the signing of CSR generated by users. My "users" will be systems that I will plug to my isolated and trusted network, they will automatically generate key pairs, the corresponding CSR, submit it for signing before leaving into the wild with their certificate. I had a look at the SOAP API but it seems it is more focused on RA and CA functionality (e.g. it requires authentication with certificate that my systems don't have yet). I had a look at SCEP and CMP protocols but open-source implementations seems outdated/hard to get working and they seems overkill for what I want to do. I though about manually sending HTTP POST requests to the public web interface but maybe there is a better way ? |