XiPKI on Ubuntu 24.04, a high performance certificate authority for issuing and managing X.509 certificates.
XiPKI is an open source Certificate Authority and PKI server. It issues, renews and revokes X.509 certificates through CMP, EST and REST enrolment protocols, and answers certificate status queries with a built in OCSP responder backed by a PostgreSQL certificate database.
cloudimg ships XiPKI fully patched on a hardened Ubuntu 24.04 base with the certificate authority, enrolment gateway and OCSP responder already running. Every instance generates its own certificate authority signing key, database password and enrolment credential on first boot, so no key material is shared between instances, every interface is bound to loopback by default, and the image is backed by 24/7 support.