Open-source PKI on SELinux - a technology description

In July 2002, BBN Technologies published the first release of the OpenSource CMS (Certificate Management System), a system of software components enabling the deployment of a fully functional X.509 PKI (public key infrastructure). The paper provides a brief and practical overview of the CMS technology describing project goals, system functionality and components, basic system operation, system-level characteristics, and assurance characteristics.