dogtagpki/pki

GitHub: dogtagpki/pki

Dogtag Certificate System 是一个企业级开源证书管理系统,提供完整的证书生命周期管理与 PKI 子系统套件。

Stars: 500 | Forks: 159

# Dogtag PKI Dogtag Certificate System 是一个企业级的开源 Certificate Authority (CA)。它是一个功能齐全的系统,并经过实际部署的强化。它支持证书生命周期管理的所有方面,包括密钥归档、OCSP 和智能卡管理等。 Dogtag PKI 套件提供以下子系统: - [Certificate Authority (CA)](https://github.com/dogtagpki/pki/wiki/Certificate-Authority) - [Key Recovery Authority (KRA)](https://github.com/dogtagpki/pki/wiki/Key-Recovery-Authority) - [Online Certificate Status Protocol (OCSP) Responder](https://github.com/dogtagpki/pki/wiki/OCSP-Responder) - [Token Key Service (TKS)](https://github.com/dogtagpki/pki/wiki/Token-Key-Service) - [Token Processing System (TPS)](https://github.com/dogtagpki/pki/wiki/Token-Processing-System) - [Automatic Certificate Management Environment (ACME) Responder](https://github.com/dogtagpki/pki/wiki/ACME-Responder) ## 文档 了解该产品的最佳起点是 [Dogtag PKI Wiki](https://github.com/dogtagpki/pki/wiki)。 ## 安装 ### Fedora 要安装整个 Dogtag PKI 套件: ``` $ sudo dnf install dogtag-pki ``` 仅安装特定子系统: ``` $ sudo dnf install dogtag-pki-ca dogtag-pki-kra ``` 安装主题包: ``` $ sudo dnf install dogtag-pki-theme ``` ## 部署 成功安装软件包后,请按照以下步骤部署目标子系统: - [部署 CA](docs/installation/ca/Installing_CA.md) - [部署 KRA](docs/installation/kra/Installing_KRA.md) - [部署 OCSP](docs/installation/ocsp/Installing_OCSP.md) - [部署 TKS](docs/installation/tks/Installing_TKS.md) - [部署 TPS](docs/installation/tps/Installing_TPS.md) - [部署 ACME](docs/installation/acme/Installing_PKI_ACME_Responder.md) 有关其他类型的部署(Sub-CA、Clones、HSM 等),请参阅 [安装指南](https://github.com/dogtagpki/pki/wiki/Installation-Guide)。 ## 构建 ### Fedora/CentOS/RHEL #### 前置条件 ``` $ sudo dnf install dnf-plugins-core rpm-build git # 注意:请使用预期的 branch 名称而不是 "master" 来拉取正确的依赖版本 $ sudo dnf copr -y enable @pki/master $ sudo dnf builddep -y --spec pki.spec ``` #### 构建步骤 成功安装前置条件后,可以使用单行命令构建该项目: ``` $ ./build.sh rpm ``` 构建的 RPM 包将放置在 `~/build/pki/` 目录中。 另请参阅 [构建 PKI](docs/development/Building_PKI.md)。 ## 测试 | 测试 | 状态 | | ------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | SonarCloud | [![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=dogtagpki_pki&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=dogtagpki_pki) | | CA 测试 | [![CA Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/d1/d14d82fcb03f6914452da7280cbc3425f528f002fd4a9a31daeefe87013e0d7e.svg)](https://github.com/dogtagpki/pki/actions/workflows/ca-tests.yml) | | CA Clone 测试 | [![CA Clone Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/92/92bf021f6e1d685856c4eb019f95344c3a8d6e6f320a53425f88b9b5bf2ff619.svg)](https://github.com/dogtagpki/pki/actions/workflows/ca-clone-tests.yml) | | CA Container 测试 | [![CA Container Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/be/bef62dad58b1e59350d66f992d3fd4bb74d2c40c551e0038d22d07a9de58bafb.svg)](https://github.com/dogtagpki/pki/actions/workflows/ca-container-tests.yml) | | CA Profile 测试 | [![CA Profile Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/b2/b2f6bdbc8044967fc086f4a4213046aab4aab95b509c5984f69af0c10bf7a88c.svg)](https://github.com/dogtagpki/pki/actions/workflows/ca-profile-tests.yml) | | CA 额外测试 | [![CA Extra Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/a0/a0d9f33d233aca08c1bc3f6ec5834783b7836e80e91a7e9ec00ee75e169222b8.svg)](https://github.com/dogtagpki/pki/actions/workflows/ca-extra-tests.yml) | | SubCA 测试 | [![SubCA Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/04/0454bb9c348870f9b43c093596a2251279789a39787cba68f1586bdf8178d331.svg)](https://github.com/dogtagpki/pki/actions/workflows/subca-tests.yml) | | KRA 测试 | [![KRA Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/11/11324d86da064c8c0a617f2d8ef000afef987cd05e7fca82c63a001fe06c147f.svg)](https://github.com/dogtagpki/pki/actions/workflows/kra-tests.yml) | | KRA Clone 测试 | [![KRA Clone Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/fa/fa882c8d4d0e360a02f985204f1ae37be1cbd606b08a8a8290b01c3710c6fbfb.svg)](https://github.com/dogtagpki/pki/actions/workflows/kra-clone-tests.yml) | | OCSP 测试 | [![OCSP Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/8d/8db72bf86d02c55e362b2cde47b8257f6bb5252ba01019d4d23908cac49bb1ce.svg)](https://github.com/dogtagpki/pki/actions/workflows/ocsp-tests.yml) | | TKS 测试 | [![TKS Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/6c/6c3480e855606ce4f8674b370e95c1da7746a82c34e56886ad809e135e9b9de8.svg)](https://github.com/dogtagpki/pki/actions/workflows/tks-tests.yml) | | TPS 测试 | [![TPS Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/af/af11254f91e1fe28c957eef19665a445786f16b8db6218f82d621dd14d0ccc17.svg)](https://github.com/dogtagpki/pki/actions/workflows/tps-tests.yml) | | ACME 测试 | [![ACME Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/f4/f4d6fd228fd40f4854618deef6378f1af0bc59b7c8039698d9f91b3d290a5668.svg)](https://github.com/dogtagpki/pki/actions/workflows/acme-tests.yml) | | EST 测试 | [![EST Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/fd/fd28bc3458c0facb3682e82ba9f990d1ff8a1887a76abddb9225491ed65f1f80.svg)](https://github.com/dogtagpki/pki/actions/workflows/est-tests.yml) | | Server 测试 | [![Server Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/78/782e64a7836965e75c0910e063925140abaac36b0bd641eba8a68d96af348b35.svg)](https://github.com/dogtagpki/pki/actions/workflows/server-tests.yml) | | Java 测试 | [![Java Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/d2/d2256ade52e20c9b8b2f04e0026e99390f790814d8e86e60451ca49e3b8e9bca.svg)](https://github.com/dogtagpki/pki/actions/workflows/java-tests.yml) | | Python 测试 | [![Python Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/54/54cdf1efb45de41948132cf1c30865c88aa01b5bb14cd5978122f8e6ec7a2109.svg)](https://github.com/dogtagpki/pki/actions/workflows/python-tests.yml) | | Tools 测试 | [![Tools Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/d4/d4ea7e07bf38122d44328567b1914df79fc71d70dfe110389514e24155e891ef.svg)](https://github.com/dogtagpki/pki/actions/workflows/tools-tests.yml) | | IPA 测试 | [![IPA Tests](https://static.pigsec.cn/wp-content/uploads/repos/cas/16/162755b7cc91aa5c7011ff89259715ee5f41d2ec635a7a10cc9fec4003b69373.svg)](https://github.com/dogtagpki/pki/actions/workflows/ipa-tests.yml) | ## 联系我们 请参阅 [联系我们](https://github.com/dogtagpki/pki/wiki/Contact-Us)。 ## 许可证 [GPL-2.0 License](LICENSE)
标签:JS文件枚举, OCSP, 加密学, 域名枚举, 证书颁发机构, 逆向工具