On 21.09.18 15:28, Tim Jones wrote:
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Friday, September 21, 2018 1:21 PM, Gregory Edigarov <[email protected]>
wrote:
Hello, list.
I need to setup a CA for intranet. I have some (rather not very
positive) experience with ejbca.
before I will set it up, I want to take a look at alternatives, and so i
need an advice on the choice of software.
what would you guys use? something with less dependencies is preferred
(but with web interface).
thank you.
Depends what you want to do and the scale of your infrastructure ?
If its your home lab or a small(ish) business then buy some Yubikeys (for the
"secure your keys in an HSM" element) and fire up a copy of OpenSSL, and Robert
is your uncle.
If your talking thousands of users or tens of thousands of servers, then I'm
sure you've got the budget for to pay for advice. ;-)
Thank you.
we're talking about hundreds of users, almost all of them are
roadwarriors with ipsec/openvpn (depending on their preference), and
tens of servers.
and no, I do not have any budget ;-)
