摘要： 该文提出了一种基于ＬＤＡＰ目录服务实现ＰＫＩ管理系统证书库的设计方案。通过与传统证书库实现方法的比较，阐述了该方案的优点，并具体给出了在开放的教育网这样的大规模应用环境下的具体实现技术和方法。最后对该方案的进一步使用前途作了总结与展望。

关键词: LDAP, PKI, 证书库, 目录

Abstract: In this paper, the design of PKI certificate repository is proposed basing on LDAP directory service. Comparisons are made between traditional PKI repository design and this solution to show its advantages. Key technique points and methods are described for how to realize such a repository in large scale network educational application environment. The end of this paper summarizes the design and discusses the further applications of it.

中图分类号: 

• TP393.08