Introducing CFSSL – CloudFlare's PKI toolkit

Re:Introducing CFSSL – CloudFlare's PKI toolkit by zdw on Thursday July 10, 2014 @09:51AM (#8014941)

The main use case brought up is supporting people still on Win XP SP2 (released in August 2004), when the answer should be for them to upgrade to something newer, either OS or browser.

That said, there are probably a lot of embedded systems of similar ancient vintage that may not be easily upgradable. The wisdom of having them internet connected is questionable at best.

It appears that this really works best with CloudFlare's systems - if you're looking to set up your own CA, and want help working through all the openssl commands and configuration files, this is pretty helpful:

https://pki-tutorial.readthedocs.org/en/latest/

[ Parent | on HN ]

Re:Introducing CFSSL – CloudFlare's PKI toolkit by grittygrease on Thursday July 10, 2014 @09:59AM (#8014969)

We find that Android 2.2 and 2.3 are also relevant platforms that require alternative toolchains. Upgrades are not possible for many of these devices.

As for setting up your CA, openssl's command line interface can be very clunky. CFSSL not only has a clean and simple command line interface, but it has a nice RESTful JSON API for simple integration into web services.

[ Parent | on HN ]