Automate certificate signing in Linux

Question

In a private network I wish to automate signing for new clients/servers.

Something like this:

1. New client is created (dockers & etc)
2. The client create a new private key and a CSR
3. The client send the CSR to a different server which sign it using the CA (???)

Is there a solid solution for providing automated signing services?

Answer 1

The solution is: Certificate System manager

Some of the candidates are:

• DogTag
• Red Hat Certificate System (based on DogTag)
• EJBCA
• OpenCA