What software is used to generate an ssl certificate?

Question

Digital certificates

Interested in OP for PKI deployment. Not openssl, I believe large CAs (Certification Authorities) clearly do not use it.
And what in general can be required for deployment? What are the requirements for servers and their characteristics? Perhaps someone studied or works in this area.
Thanks in advance for any information!

Answer 1

For industrial use, I would recommend OpenTrust PKI or neXus Certificate Manger. For personal use or small installations, see retrust.me.
When choosing a PKI, there are a number of nuances. For example: what certificates do you plan to issue, what issuance scheme (centralized, decentralized), do you need SCEP support, do you need OCSP, do you need to issue certificates in accordance with GOST, are you planning to archive encryption keys, etc.
Technically, deployment is not so complicated. It is important to consider PKI use cases, architecture, develop policies and regulations, appoint "key custodians", hold a key ceremony...
Hardware requirements depend on the software. But in general, you may need:
- offline CA either in the form of a server or in the form of a flash drive (several flash drives)
- online CA - a virtual machine or a separate server
- HSM - for protecting keys
Trite, but I will mention that for everything you need to have a reserve for equipment.
And yes, I work in this area.