I have been, recently, working with OpenSSL as a mini CA.

As it is a great product, does everything with PKI what you need. Even after a while it is making sense how to use it. No problems.

One issue, which held me a while was lack of clear information, instructions or interface to perform the most basic tasks regarding certification, delivered with the package. Non … you are dumped in to deep water… it may often push off some people as they will have no clue what they are doing, even using online instructions. Do you know some nice GUI for openssl ?

So after scary swim in deep waters, I am quite casual with all that PKI, ssl/tls, certificates etc. stuff. It is like a completely new world… world which you trust, where you can easily manage that trust… it is beautiful! Suddenly setting up encrypted and authenticated channels is just a flick of your own CA. Love it.