This is a little perl script to manage a Certification Authority using the openssl command. Though, unlike CA.[sh|pl] (from OpenSSL) it is very simple to use, and it ask only few questions. It comes with few templates files. One of these can be use to create wildcard certificates.

• Few requirements : Perl and Openssl
• Very easy to use, no OpenSSL knowledges required, but theirs are welcome
• asyd-ca.pl doesn't require Openssl templates

# ls -1
asyd-ca.pl
changes.log
templates
# vi templates/ca-req.cnf
[..]
emailAddress     = asyd@asyd.net
countryName      = FR
organizationName = asyd.net
commonName       = "asyd dot net CA"
localityName     = Paris

It's more or less the only file you need to edit. It's very easy, isn't it ?

# ./asyd-ca.pl init
[openssl's output remove]
# ls -1
asyd-ca.pl
CA
certs
changes.log
keys
misc
pkcs12
reqs
templates

The content of each directory is explain below.

Note: You can edit the file templates/simple.cnf, especially the field with _default suffix. These values are the default one (but can be override) used by openssl prompting for the certificat request informations.

• Coming soon

• Export cert (including CRL) to LDAP
• Remove openssl output when useless