GnoMint

Features

• All the infrastructure needed to keep and run a certification authority is saved in only one file.
• It's able to create certificate signing requests, allowing to export them to PKCS#8 files, so they can be sent to other CAs.
• Allows the creation of X.509 certificates, with a usual set of subject-parameters.
• Can export certificates and private keys to PEM files, so they can be used by external applications. It also allows to export PKCS#12 structures, so the certificates can be imported easily by web and mail clients.
• The user can establish a set of policies for certificate generation in each one of the existing CAs.
• gnoMint can import CSRs made by other applications.
• The certificates can be revoked, with generation of the corresponding CRLs
• It allows the possibility of keeping the CA private key, or other private keys, in external files or devices
• gnoMint is able to manage of a whole hierarchy of CAs, simultaneously, with their respectives certificates.
• Pre-existing Certification Authorities made by other applications, as OpenSSL or TinyCA, can be imported with all their data.
• It has a CLI intended for batch certificate creation, or integration with other utilities.

  Licence and motivation