local inhouse PKI

[Donald]

Has anyone set one of these up for a few servers. Not self signed certificates, but establish a local root and then use that so sign a small number of certificates.

 

[Colt45ws]

Yes. I my main wireless is WPA2/Enterprise which uses 802.1X Authentication with certificates to verify the authenticity of both parties. I have a CA and several certificates; one for each wireless client.

 

[Quattro Pete]

Not sure if it's the same thing you're asking, but I've used OpenVPN and easy-rsa to generate some server/client keys for establishing a secure VPN connection between two home routers.

Details pertaining to certificate generation are about half way down the page...

http://www.howtogeek.com/60774/connect-to-your-home-network-from-anywhere-with-openvpn-and-tomato/