Membuat CA Sendiri

1
Membuat CA Sendiri

• Onno W. Purbo
• Onno_at_indo.net.id

2
Referensi

• http//www.openca.org
• http//www.openssl.org
• http//www.apache-ssl.org
• http//www.redhat.com

3
OpenCA
4
(No Transcript)
5
Fasilitas OpenCA

• Certificate Authority (CA)
• Registration Authority (RA)

6
Certification Authority (CA)

• mengimport Requests
• membuat daftar permohonan certificate
• Export certificate
• Archivie requests
• Melihat arsip requests
• Delete requests
• Issue certificates
• Verify RA operator identity
• Export CRL

7
Registration Authorities (RA)

• Membuat daftar permohonan yang pending/deleted/arc
  hivied
• approve requests
• export requests ke removable media
• import new certs dari removable media
• import CRLs

8
Misi Proyek OpenCA

• Sebuah usaha kerjasama untuk membangun struktur
  interface berkaitan dengan masalah keamanan
  administrative untuk managemen operasi digital
  sertifikat X.509, seperti
• Admission
• Verify
• Revocation
• Suspension
• dll.

9
Mailing list OpenCA

• http//www.openca.org/docs/mlists.shtml
• openca-users_at_openca.org
• openca-bugs_at_openca.org
• openca-announce_at_openca.org
• openca-devel_at_openca.org

10
Team inti OpenCA

• Massimiliano Pala (madwolf_at_openca.org)
• Core Developer Project Manager
• Giovanni Faglioni (giova_at_openca.org)
• Project Manager Core Developer
• Sergio Duretti (duretti_at_comune.mo.it)
• Project Contacts Manager
• Miguel Armas (kuko_at_openca.org)
• Core Developer
• Victor R. Ruiz (rvr_at_openca.org)
• Core Developer
• Simos Xenitellis (simos_at_openca.org)
• Docs Developer

11
FTP sites

• ftp//ftp.openca.org/
• ftp//ftp.dti.ad.jp/pub/net/OpenCA
• ftp//sunsite.cnlab-switch.ch/mirror/OpenCA
• ftp//ftp.pca.dfn.de/pub/pca/tools/openca/

12
Paket OpenCA (7 juli 2000)

• OpenCA-0.2.0-4.tar.gz
• Modul tambahan
• OpenCA-X509-0.8.42.tar.gz
• OpenCA-Tools-0.3.01.tar.gz
• OpenCA-TRIStateCGI-1.2.35.tar.gz
• OpenCA-SV-0.5.98.tar.gz
• OpenCA-REQ-0.4.29.tar.gz
• OpenCA-PKCS7-0.1.24.tar.gz
• OpenCA-OpenSSL-0.5.58.tar.gz
• OpenCA-DB-0.5.87.tar.gz
• OpenCA-Configuration-1.3.14.tar.gz
• OpenCA-CRR-0.0.2.tar.gz
• OpenCA-CRL-0.5.36.tar.gz
• Net-LDAPapi-1.42.tar.gz

13
OpenSSL

• Termasuk dalam paket RedHat 7.0

14
(No Transcript)
15
(No Transcript)
16
(No Transcript)
17
(No Transcript)
18
(No Transcript)
19
Fasilitas OpenSSL

• Creation of RSA, DH and DSA key parameters
• Creation of X.509 certificates, CSRs and CRLs
• Calculation of Message Digests
• Encryption and Decryption with Ciphers
• SSL/TLS Client and Server Tests
• Handling of S/MIME signed or encrypted mail

20
Source

• 2086131 Sep 24 174622 2000 openssl-0.9.6.tar.gz
  LATEST
• 2103482 Sep 24 182233 2000 openssl-engine-0.9.6.
  tar.gz LATEST

21
FTP sites

• ftp//ftp.openssl.org/source/ CH
• ftp//sunsite.cnlab-switch.ch/mirror/openssl/
  CH
• ftp//ftp.funet.fi/pub/crypt/cryptography/libs/ope
  nssl/ FI
• ftp//ftp.pca.dfn.de/pub/tools/net/openssl/
  DE
• ftp//ftp.ecrc.net/pub/security/openssl/ DE
• ftp//ftp.uni-trier.de/pub/unix/security/openssl/
  DE
• ftp//ftp.webmonster.de/pub/openssl/ DE
• ftp//opensores.thebunker.net/pub/mirrors/openssl/
  UK
• ftp//ftp.net.lut.ac.uk/openssl/ UK
• ftp//ftp.mirror.ac.uk/sites/ftp.openssl.org/
  UK
• ftp//sunsite.uio.no/pub/security/openssl/ NO
  
• ftp//ftp.sunet.se/pub/security/tools/net/openssl/
  SE
• ftp//ftp.chl.chalmers.se/pub/unix/security/openss
  l/ SE
• ftp//ftp.psy.uq.edu.au/pub/Crypto/ AU
• ftp//mirror.aarnet.edu.au/pub/openssl/ AU
• ftp//gd.tuwien.ac.at/infosys/security/openssl/
  AT
• ftp//glock.missouri.edu/pub/openssl/ US
• ftp//ftp.av8.com/pub/mirrors/openssl/ US
• ftp//ftp.styx.net/mirrors/crypto/openssl/ US
  

22
Apache-SSL
23
(No Transcript)