The OpenCA PKI Project is a collaborative effort to develop a robust, full-featured and Open Source out-of-the-box Certification Authority implementing the most used protocols with full-strength cryptography world-wide. OpenCA is based on many Open-Source Projects. Among the required software there are OpenLDAP, OpenSSL, Apache Project, Apache mod_ssl.

The project development is divided in two main tasks: studying and refining the security scheme that guarantees the best model to be used in a CA and developing software to easily setup and manage a Certification Authority.

• 14.10.2008 The new OpenCA PKI v1.0.2 (ten-ten2) package is available here. This version fixes a couple of minor bugs in the ten-ten release. In particular it fixes ECDSA support, mis-handled file permissions in binary packages, and a missing configuration option in ca.conf.template. Please check out the ChangeLog link from the downloads page.
• 10.10.2008 The OpenCA PKI v.1.0.1 (codename ten-ten) is out! After almost two years, the OpenCA team is proud to present you the new release. The changes are too long to list here, please check out the ChangeLog link from the downloads page.
• 19.09.2008 The OpenCA PKI v.1.0.1 is finally on its way. Newly added features are: support for Elliptic Curves (ECDSA), improved dynamic menu system, on-line engines (to automatically issue certificates and CRLs), and a new and simple graphical installer (for binary distributions only - thanks to BitRock for its Install Builder).
• 09.04.2008 The OpenCA PKI new version is almost ready. New features will include support for Vista, DSA, Safari and a security patch.
• New release candidate (rc1) is available for download
• Fosdem slides are available here