dogtagpki/pki

GitHub: dogtagpki/pki

Stars: 493 | Forks: 155

# Dogtag PKI The Dogtag Certificate System is an enterprise-class open source Certificate Authority (CA). It is a full-featured system, and has been hardened by real-world deployments. It supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management, and much more. The Dogtag PKI suite provides the following subsystems: - [Certificate Authority (CA)](https://github.com/dogtagpki/pki/wiki/Certificate-Authority) - [Key Recovery Authority (KRA)](https://github.com/dogtagpki/pki/wiki/Key-Recovery-Authority) - [Online Certificate Status Protocol (OCSP) Responder](https://github.com/dogtagpki/pki/wiki/OCSP-Responder) - [Token Key Service (TKS)](https://github.com/dogtagpki/pki/wiki/Token-Key-Service) - [Token Processing System (TPS)](https://github.com/dogtagpki/pki/wiki/Token-Processing-System) - [Automatic Certificate Management Environment (ACME) Responder](https://github.com/dogtagpki/pki/wiki/ACME-Responder) ## Documentation The best place to start learning about the product is the [Dogtag PKI Wiki](https://github.com/dogtagpki/pki/wiki). ## Installing ### Fedora To install the whole Dogtag PKI suite: $ sudo dnf install dogtag-pki To install specific subsystems only: $ sudo dnf install dogtag-pki-ca dogtag-pki-kra To install the theme package: $ sudo dnf install dogtag-pki-theme ## Deploying - [Deploy CA](docs/installation/ca/Installing_CA.md) - [Deploy KRA](docs/installation/kra/Installing_KRA.md) - [Deploy OCSP](docs/installation/ocsp/Installing_OCSP.md) - [Deploy TKS](docs/installation/tks/Installing_TKS.md) - [Deploy TPS](docs/installation/tps/Installing_TPS.md) - [Deploy ACME](docs/installation/acme/Installing_PKI_ACME_Responder.md) For other types of deployments (Sub-CA, Clones, HSMs, etc) please see the [Installation Guide](https://github.com/dogtagpki/pki/wiki/Installation-Guide). ## Building ### Fedora/CentOS/RHEL #### Prerequisites $ sudo dnf install dnf-plugins-core rpm-build git # NOTE: Use the intendended branch name instead of "master" to pull right dependency version $ sudo dnf copr -y enable @pki/master $ sudo dnf builddep -y --spec pki.spec #### Build Procedure After successfully installing the prerequisites, the project can be built with a one-line command: $ ./build.sh rpm The built RPMS will be placed in `~/build/pki/` directory. See also [Building PKI](docs/development/Building_PKI.md). ## Testing | Test | Status | | ------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | SonarCloud | [![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=dogtagpki_pki&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=dogtagpki_pki) | | CA Tests | [![CA Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/6d6475538b233035.svg)](https://github.com/dogtagpki/pki/actions/workflows/ca-tests.yml) | | CA Clone Tests | [![CA Clone Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/7e9d0ab3cc233036.svg)](https://github.com/dogtagpki/pki/actions/workflows/ca-clone-tests.yml) | | CA Container Tests | [![CA Container Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/f26ce2c69c233037.svg)](https://github.com/dogtagpki/pki/actions/workflows/ca-container-tests.yml) | | CA Profile Tests | [![CA Profile Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/9febf4cd92233038.svg)](https://github.com/dogtagpki/pki/actions/workflows/ca-profile-tests.yml) | | CA Extra Tests | [![CA Extra Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/6464bcea47233038.svg)](https://github.com/dogtagpki/pki/actions/workflows/ca-extra-tests.yml) | | SubCA Tests | [![SubCA Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/fbce2574cd233039.svg)](https://github.com/dogtagpki/pki/actions/workflows/subca-tests.yml) | | KRA Tests | [![KRA Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/ed512fad30233040.svg)](https://github.com/dogtagpki/pki/actions/workflows/kra-tests.yml) | | KRA Clone Tests | [![KRA Clone Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/6da8433b65233041.svg)](https://github.com/dogtagpki/pki/actions/workflows/kra-clone-tests.yml) | | OCSP Tests | [![OCSP Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/fc6108a097233042.svg)](https://github.com/dogtagpki/pki/actions/workflows/ocsp-tests.yml) | | TKS Tests | [![TKS Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/9efeb3b48a233043.svg)](https://github.com/dogtagpki/pki/actions/workflows/tks-tests.yml) | | TPS Tests | [![TPS Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/98e2d63279233044.svg)](https://github.com/dogtagpki/pki/actions/workflows/tps-tests.yml) | | ACME Tests | [![ACME Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/9112684ef1233045.svg)](https://github.com/dogtagpki/pki/actions/workflows/acme-tests.yml) | | EST Tests | [![EST Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/f83787312c233046.svg)](https://github.com/dogtagpki/pki/actions/workflows/est-tests.yml) | | Server Tests | [![Server Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/a883fa78f8233046.svg)](https://github.com/dogtagpki/pki/actions/workflows/server-tests.yml) | | Java Tests | [![Java Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/e23fa87038233047.svg)](https://github.com/dogtagpki/pki/actions/workflows/java-tests.yml) | | Python Tests | [![Python Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/8ab2a304b3233048.svg)](https://github.com/dogtagpki/pki/actions/workflows/python-tests.yml) | | Tools Tests | [![Tools Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/ff8fdfbbab233049.svg)](https://github.com/dogtagpki/pki/actions/workflows/tools-tests.yml) | | IPA Tests | [![IPA Tests](https://static.pigsec.cn/wp-content/uploads/repos/2026/06/18f82006a1233050.svg)](https://github.com/dogtagpki/pki/actions/workflows/ipa-tests.yml) | ## Contact Us See [Contact Us](https://github.com/dogtagpki/pki/wiki/Contact-Us). ## License [GPL-2.0 License](LICENSE)
标签:域名枚举