EJBCA - The J2EE Certificate Authority
Search ejbca.org for:

Architecture

Internal architecture

The following diagram is a very rough schema of the current architecture of EJBCA.

EJBCA architecture

Sample setup architecture

The following diagram shows a good example setup of a secured CA with external OCSP responders and an external RA server that receives certificate requests. The request are periodically pulled by the CA and responses returned to the external RA. No network traffic flows from the right the left across FW2.

EJBCA sample setup