Skip to content
/ cmpossl Public
forked from openssl/openssl

An OpenSSL-based implementation of the Certificate Management Protocol (CMP), defined in IETF RFCs 4210, 4211, and 6712. It is being extended according to the emerging RFCs 'CMP Updates' (CMPv3), 'CMP Algorithms', and 'Lightweight CMP Profile'.

License

Notifications You must be signed in to change notification settings

mpeylo/cmpossl

 
 

Repository files navigation

CMPforOpenSSL (cmpossl)

This is an intermediate CMP, CRMF, and HTTP version abstraction library based on the OpenSSL libarary. It is needed only if required special CMP features or fixes are not yet (fully) available in the OpenSSL version being used.

As of October 2025, this software is no more actively maintained.

Note that this library offers just a low-level API and does not provide a CLI. A CMP CLI is provided both by OpenSSL and by the Generic CMP Client.
The genCMPClient offers a more high-level API. It can be built using OpenSSL 3.0 or later (and possibly this library, which was formerly needed in order to provide more recent developments).

Purpose

The purpose of this software was to provide a uniform interim CMP and HTTP client API and implementation library that links with all current OpenSSL versions.

Since version 3.0, OpenSSL includes an implementation of CMP version 2 and CRMF, as well as a lean HTTP client. With the relase of OpenSSL 3.5 in April 2025, the CMP features added by RFC 9480 (CMP Updates) and specified in more detail in the Lightweight CMP Profile (LCMPP) are available via the upstream OpenSSL library. Therefore, in most cases, this intermediate library is no longer needed.

Support model

As far as still required, the maintainers offer paid professional support upon request.

Further information

Unmaintained further detailed and partly outdated information may be found in the former README file.

Disclaimer

This software including associated documentation is provided ‘as is’. Effort has been spent on quality assurance, but there are no guarantees.

License

This work is licensed under the terms of the Apache Software License 2.0. See the LICENSE.txt file.

SPDX-License-Identifier: Apache-2.0

About

An OpenSSL-based implementation of the Certificate Management Protocol (CMP), defined in IETF RFCs 4210, 4211, and 6712. It is being extended according to the emerging RFCs 'CMP Updates' (CMPv3), 'CMP Algorithms', and 'Lightweight CMP Profile'.

Topics

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • C 96.8%
  • Makefile 1.9%
  • CMake 1.3%