Open Source certificate authority?

[Philip J. Koenig]

I'm looking for the simplest possible way to generate an X.509 
certificate. (specifically, I have a piece of network hardware which 
supports SSL, but which requires the user to import their own 
certificate and I don't feel like paying for one.  Validation of the 
certificate by a 'legit' CA is not an issue in this case)

There is a project called "openCA" but it seems somewhat complicated 
and I can't find any RPMs out there.

So I was looking at this "tinyCA" thingy, but I can't tell if it has 
everything I need to create a certificate.  Does anyone have 
experience with this?  Can I create certificates with just this, perl-
tk, and OpenSSL?

http://tinyca.sm-zone.net/


Thanks,

Phil

--
Philip J. Koenig                                       
pjklist at ekahuna.com
Electric Kahuna Systems -- Computers & Communications for the New 
Millenium