XiPKI

What XiPKI is

XiPKI is an open-source public key infrastructure system for certification authority, registration authority, and OCSP responder functions, intended for critical infrastructure. It can manage multiple CAs in one software instance, support database clusters and active instances for the same CA, and offers CA administration through embedded OSGi commands and an API. Its protocol gateway supports EST, SCEP, CMP, ACME, and XiPKI's RESTful API. The OCSP responder supports several standards and request types, health checks, and multiple certificate status sources. HSM connections use PKCS#11, with devices from AWS CloudHSM, Nitrokey, nCipher, Sansec, SoftHSM, TASS, Thales, and Utimaco listed. The project describes native support for ML-DSA, ML-KEM, and composite post-quantum algorithms. XiPKI supports Linux and macOS, requires Java 11 or later and Tomcat 10 or 11, and lists DB2, MariaDB, MySQL, Oracle, PostgreSQL, H2, and HSQLDB as supported databases. It is free under Apache License 2.0. Setup archives are available from GitHub Releases or Maven Central, and the software can also be built from source.