How to use external PKI

Manuel_Faux · April 20, 2011, 5:57pm

Hello,

I have an existing PKI outside of Djigzo. So I've created a Sub-CA and imported this CA incl. SKs into Djigzo. As far I understood the documentation, Djigzo does not support CRL-Generation, but the Documentation recommends using a full-blown CA like EJBCA instead.
Has anyone ever used Djigzo in such a scenario? What is the recommended way to issue and to revoke certificates? I came up with the idea about writing an additional RequestHandler, which uses the EJBCA-API to issue the certificates, but is this necessary?

Kind regards,
Manuel Faux

martijn · April 20, 2011, 6:27pm

Djigzo can generate CRLs, click CA en then click on "Create CRL".

Only if you need a more advanced CA, like multiple CAs, use different
key usage, use your own extensions etc. it's better to use an external CA.

Kind regards,

Martijn

···

On 04/20/2011 07:57 PM, Manuel Faux wrote:

Hello,

I have an existing PKI outside of Djigzo. So I've created a Sub-CA and imported this CA incl. SKs into Djigzo. As far I understood the documentation, Djigzo does not support CRL-Generation, but the Documentation recommends using a full-blown CA like EJBCA instead.
Has anyone ever used Djigzo in such a scenario? What is the recommended way to issue and to revoke certificates? I came up with the idea about writing an additional RequestHandler, which uses the EJBCA-API to issue the certificates, but is this necessary?

--
Djigzo open source email encryption

Manuel_Faux · April 20, 2011, 6:33pm

Ok, in this case I misunderstood the documentation. It only states that CRLs for CA and Sub-CAs are not implemented.

Thank's for your answer.