EJBCA - Open Source PKI Certificate Authority
Search ejbca.org for:

Sample setup architecture

The following diagram shows a good example setup of a secured CA with external OCSP responders and an external RA server that receives certificate requests. The request are periodically pulled by the CA and responses returned to the External RA. No network traffic flows from the right the left across FW2.

EJBCA sample setup

Internal architecture

The following diagram is a very rough schema of the current architecture of EJBCA.

EJBCA architecture

All the web modules are packaged as Web Archives (WAR) and packaged inside an Enterprise Archive (EAR) together with EJB modules for business logic, code for mapping Java objects to database rows and additional libraries need by the application that isn't provided by the application server.

EJB Stateless Session Beans Dependencies

The following diagram shows the internal relations between the Stateless Session Beans as they are injected. An updated version of this diagram can be generated by running "ant gen-depgraph" on a machine where the "dot" application is available.

EJB dependencies