Mock DoD PKI for OpenSSL

This is a kit for cloning and then creating your own PKI system.

This will allow you to create the following certificate chains:

• DoD Root CA
  • DoD Intermediate CA
    • Server Certificates
  • DoD Signing CA
    • Client Certificates

This system has two intermediaries, a DoD Intermediate CA (for servers) and a DoD Signing CA (for users). You can use the Root CA to make more intermediaries and you can use the intermediaries to create more client certificates for testing your software.

Setup

1. Clone the repository into a new folder at C:\Certificates

   git clone https://github.com/KBuroz/DoD-PKI-OpenSSL.git C:\Certificates
   

2. Run PrepareDirectory.bat to create the files needed by OpenSSL:

   cd C:\Certificates
   PrepareDirectory.bat
   

3. Install OpenSSL if it isn't already

4. Finally, add OpenSSL to the PATH (system environment variables)

Table of Contents

• Create the DoD Root CA
  • Import the Root CA onto Client
  • Create the DoD Intermediate CA
    • Create a localhost Server Certificate
      • Import the Server Certificate into IIS
  • Create the DoD Signing CA
    • Create a Client Certificate