Design and implementation of a safe Public Key Infrastructure

This paper introduces the design and implementation of a safe Public Key Infrastructure based on Transport Layer Security. Through the establishment of safe connection between each part of the PKI system, it can effectively resist the attack from the internal department. But the use of safe connection increases burden to inquiring certificate. To improve the efficiency of the certificate inquiring, we use OpenLdap server as the certificate distribution system in the premise of not reducing safety performance.