From 3ef46f750166d26b69cc559404294c5ab107ecfe Mon Sep 17 00:00:00 2001 From: Christian Hohnstaedt Date: Tue, 17 Nov 2009 07:35:14 +0100 Subject: [PATCH] minor UI fixes in Certificate dialog --- ui/NewX509.ui | 995 +++++++++++++++++++++++++------------------------- 1 file changed, 507 insertions(+), 488 deletions(-) diff --git a/ui/NewX509.ui b/ui/NewX509.ui index c81e106b..397a0c22 100644 --- a/ui/NewX509.ui +++ b/ui/NewX509.ui @@ -1,29 +1,30 @@ - + + NewX509 - - + + 0 0 - 547 + 553 599 - + Dialog - + - - + + 6 - + 0 - - + + Arial 14 @@ -34,20 +35,20 @@ false - + Create - + Qt::Horizontal - + QSizePolicy::Expanding - + 20 20 @@ -56,20 +57,20 @@ - - + + 95 40 - + 95 40 - + true @@ -77,30 +78,30 @@ - - - 2 + + + 0 - - + + Source - - + + 6 - + 9 - + Qt::Vertical - + QSizePolicy::Expanding - + 20 16 @@ -109,62 +110,62 @@ - - + + Signing request - - + + 6 - + 9 - - - + + + 0 - + 6 - - - + + + A certificate signing request can be signed, even if the private key of the request is not available. This is the intention of a CSR: Getting signed by a CA certificate, whoes certificate of course must be in the database Of course you need the private key of the CSR if you want to create a self-signed cert from it. - - - + + + Show request - - - + + + Sign this Certificate signing &request - - - + + + Copy extensions from the request - + true - - - + + + Modify subject of the request @@ -173,12 +174,12 @@ Of course you need the private key of the CSR if you want to create a self-signe - - - + + + 6 - + 0 @@ -189,13 +190,13 @@ Of course you need the private key of the CSR if you want to create a self-signe - + Qt::Vertical - + QSizePolicy::Expanding - + 20 16 @@ -204,41 +205,41 @@ Of course you need the private key of the CSR if you want to create a self-signe - - + + Signing - - + + 6 - + 9 - - + + 6 - + 0 - - + + Create a &self signed certificate with the serial - + true - - + + If you leave this blank the serial 00 will be used - + 1 @@ -246,26 +247,26 @@ Of course you need the private key of the CSR if you want to create a self-signe - - + + 6 - + 0 - - + + Use &this Certificate for for signing - - + + All certificates in your database that can create valid signatures - + This list contains all certificates with the CA-flag set to true and whoes private key is present in the key-database. If this list is disabled, you only can create a self-signed certificate. @@ -278,10 +279,10 @@ If this list is disabled, you only can create a self-signed certificate. - + Qt::Vertical - + 20 16 @@ -290,34 +291,34 @@ If this list is disabled, you only can create a self-signed certificate. - - + + 6 - + 0 - - + + Signature algorithm - + - + Qt::Vertical - + QSizePolicy::Expanding - + 20 16 @@ -326,43 +327,43 @@ If this list is disabled, you only can create a self-signed certificate. - - + + Template - - + + 6 - + 9 - - + + Template for the new certificate - - - + + + 0 0 - + All available templates - + This list contains all templates from the toplevel template Tab - - + + Apply @@ -372,13 +373,13 @@ If this list is disabled, you only can create a self-signed certificate. - + Qt::Vertical - + QSizePolicy::Expanding - + 20 16 @@ -388,179 +389,197 @@ If this list is disabled, you only can create a self-signed certificate. - - + + Subject - - + + 6 - + 9 - - + + Distinguished name - - + + 6 - + 8 - - + + 0 - + 6 - - - + + + 60 - - - + + + + O + + Organisation - - - + + + This name is only used internally and does not appear in the resulting certificate - + 100 - - - + + + Must be exactly 2 letter of size (DE, UK) - + 2 - - - + + + 64 - - - + + + + C + + Country code - - - + + + + ST + + State or Province - - + + - - - + + + + L + + Locality - - - + + + + OU + + Organ. unit - - - + + + + CN + + Common name - - - + + + + emailAddress + + E-Mail address - - + + - - + + - - - + + + Internal name - - + + - - + + Qt::Horizontal - - + + 6 - + 0 - + - - - This name is only used internally and does not appear in the resulting certificate - - + + 100 - - + + Add - - + + Delete @@ -568,17 +587,17 @@ If this list is disabled, you only can create a self-signed certificate. - - + + QAbstractItemView::SingleSelection - + QAbstractItemView::SelectRows - + 0 - + 0 @@ -587,40 +606,40 @@ If this list is disabled, you only can create a self-signed certificate. - - + + Private key - - + + 6 - + 9 - - - + + + 0 0 - + This list only contains unused keys - - + + Used keys too - - + + &Generate a new key @@ -630,68 +649,68 @@ If this list is disabled, you only can create a self-signed certificate. - - + + Extensions - + - - + + 6 - + 0 - - + + Basic constrains - - + + 6 - + 8 - - + + 6 - + 0 - - + + Type - - + + If this will become a CA certificate or not - + Set this to TRUE if you want to create a CA certificate that signs other certificates. This is always set to FALSE for client or server certificates. In most cases self-signed certificates are CA certificates. Self-signed non-CA certificates are unusual although they are possible. - + Not defined - + Certification Authority - + End Entity @@ -700,37 +719,37 @@ Self-signed non-CA certificates are unusual although they are possible. - - + + 6 - + 0 - - + + Path length - - + + How much CAs may be below this. - + If this is left empty the pathlen is not included in the certificate. Otherwise it distinguishes the count of chained CA certificates below this one. A pathlen of 0 means, that this certificate may not issue other sub-CA certificates. Although it can do it, all chain-checking algorithms in e.g. your browser or openssl will (should) fail. - - + + The basic constraints should always be critical - + &Critical @@ -741,37 +760,37 @@ A pathlen of 0 means, that this certificate may not issue other sub-CA certifica - - + + Key identifier - - + + 6 - + 8 - - + + Creates a hash of the key following the PKIX guidelines - + &Subject Key Identifier - - + + Copy the Subject Key Identifier from the issuer - + If this box is checked an attempt is made to copy the subject key identifier from the signing certificate. It also copies the issuer and serial number from the issuer certificate. Normally this will only be done if the keyid option fails. - + &Authority Key Identifier @@ -783,10 +802,10 @@ It also copies the issuer and serial number from the issuer certificate. Normall - + Qt::Vertical - + 20 40 @@ -795,59 +814,59 @@ It also copies the issuer and serial number from the issuer certificate. Normall - - + + true - - + + -1 - + 0 - - + + Validity - - - - + + + + Not before - - - + + + yyyy-MM-dd hh:mm - + true - + Qt::UTC - - - + + + Not after - - - + + + yyyy-MM-dd hh:mm - + true - + Qt::UTC @@ -856,59 +875,59 @@ It also copies the issuer and serial number from the issuer certificate. Normall - - + + Time range - - - + + + - - + + - + Days - + Months - + Years - - - - + + + + 0 0 - + Apply - - - + + + Set the time to 00:00:00 and 23:59:59 respectively - + Midnight - - - + + + No well-defined expiration @@ -921,10 +940,10 @@ It also copies the issuer and serial number from the issuer certificate. Normall - + Qt::Vertical - + 20 40 @@ -933,77 +952,77 @@ It also copies the issuer and serial number from the issuer certificate. Normall - - + + 0 - + 6 - - - + + + Authority Info Access - - - + + + CRL distribution point - - - + + + issuer alternative name - - - + + + URI: - + This is a multi-valued extension that supports all the literal options of subject alternative name. Of the few software packages that currentlyi nterpret this extension most only interpret the URI option. Currently each option will set a new DistributionPoint with the fullName field set to the given value. Other fields like cRLissuer and reasons cannot currently be set or displayed: at this time no examples were available that used these fields. -If you see this extension with <UNSUPPORTED> when you attempt to print it out or it doesn't appear to display correctly then let steve know, including the certificate (mail steve at openssl dot org) . +If you see this extension with <UNSUPPORTED> when you attempt to print it out or it doesn't appear to display correctly then let steve know, including the certificate (mail steve at openssl dot org) . Examples: URI:http://www.myhost.com/myca.crl URI:http://www.my.com/my.crl, URI:http://www.oth.com/my.crl - - - - can be altered by the file "aia.txt" + + + + can be altered by the file "aia.txt" - - - + + + Edit - - - + + + Edit - - - + + + DNS: IP: URI: email: RID: - + The authority information access extension gives details about how to access certain information relating to the CA. Its syntax is accessOID;location where 'location' has the same syntax as subject alternative name (except that email:copy is not supported). accessOID can be any valid OID but only certain values are meaningful for example OCSP and caIssuers. OCSP gives the location of an OCSP responder: this is used by Netscape PSM and other software. Example: @@ -1013,47 +1032,47 @@ caIssuers;URI:http://my.ca/ca.html - - - + + + DNS: IP: URI: email: RID: - - The subject alternative name extension allows various literal values to be used. These include "email" (an email address) , "URI" a uniform resource indicator, "DNS" (a DNS domain name) , RID (a registered ID: OBJECT IDENTIFIER) and IP (an IP address). + + The subject alternative name extension allows various literal values to be used. These include "email" (an email address) , "URI" a uniform resource indicator, "DNS" (a DNS domain name) , RID (a registered ID: OBJECT IDENTIFIER) and IP (an IP address). Examples: email:my@other.address, IP: 1.1.1.1 , URI:http://my.url.here/ email:my@other.address, RID:1.2.3.4, DNS: ns.server.tld - - - + + + Edit - - - + + + subject alternative name - - - + + + Edit - - - + + + DNS: IP: URI: email: RID: - - The issuer alternative name extension allows various literal values to be used. These include "email" (an email address) , "URI" a uniform resource indicator, "DNS" (a DNS domain name), RID (a registered ID: OBJECT IDENTIFIER) and IP (an IP address). + + The issuer alternative name extension allows various literal values to be used. These include "email" (an email address) , "URI" a uniform resource indicator, "DNS" (a DNS domain name), RID (a registered ID: OBJECT IDENTIFIER) and IP (an IP address). Examples: email:my@other.address, IP: 1.1.1.1 , URI:http://my.url.here/ email:my@other.address, RID:1.2.3.4, DNS: ns.server.tld @@ -1064,97 +1083,97 @@ email:my@other.address, RID:1.2.3.4, DNS: ns.server.tld - - + + Key Usage - - + + 6 - + 8 - + - - + + 6 - + 0 - - + + Key usage - - + + 6 - + 8 - - + + &Critical - - + + QAbstractItemView::MultiSelection - + QAbstractItemView::SelectRows - + Digital Signature - + Non Repudiation - + Key Encipherment - + Data Encipherment - + Key Agreement - + Certificate Sign - + CRL Sign - + Encipher Only - + Decipher Only @@ -1164,30 +1183,30 @@ email:my@other.address, RID:1.2.3.4, DNS: ns.server.tld - - + + Extended key usage - - + + 6 - + 8 - - + + C&ritical - - + + QAbstractItemView::MultiSelection - + QAbstractItemView::SelectRows @@ -1198,8 +1217,8 @@ email:my@other.address, RID:1.2.3.4, DNS: ns.server.tld - - + + 0 0 @@ -1209,62 +1228,62 @@ email:my@other.address, RID:1.2.3.4, DNS: ns.server.tld - - + + Netscape - - + + 6 - + 8 - - + + 6 - + 0 - - + + QAbstractItemView::MultiSelection - + SSL Client - + SSL Server - + S/MIME - + Object Signing - + SSL CA - + S/MIME CA - + Object Signing CA @@ -1272,13 +1291,13 @@ email:my@other.address, RID:1.2.3.4, DNS: ns.server.tld - + Qt::Horizontal - + QSizePolicy::Expanding - + 20 20 @@ -1287,38 +1306,38 @@ email:my@other.address, RID:1.2.3.4, DNS: ns.server.tld - - + + 6 - + 0 - - + + 107 107 - + Great picture , heh ? - + true - + Qt::Vertical - + QSizePolicy::Expanding - + 20 20 @@ -1331,83 +1350,83 @@ email:my@other.address, RID:1.2.3.4, DNS: ns.server.tld - - + + 0 - + 6 - - + + - - + + - - - + + + CA Revocation URL - - + + - - - + + + Revocation URL - - - + + + SSL server name - - + + - - + + - - - + + + Certificate renewal URL - - - + + + Comment - - - + + + CA policy URL - - - + + + Base URL - - + + - - - + + + If you know a more pretty one tell me @@ -1415,8 +1434,8 @@ email:my@other.address, RID:1.2.3.4, DNS: ns.server.tld - - + + 0 0 @@ -1425,8 +1444,8 @@ email:my@other.address, RID:1.2.3.4, DNS: ns.server.tld - - + + 0 0 @@ -1436,22 +1455,22 @@ email:my@other.address, RID:1.2.3.4, DNS: ns.server.tld - - + + Advanced - + - + - + - + Qt::Horizontal - + 40 20 @@ -1460,18 +1479,18 @@ email:my@other.address, RID:1.2.3.4, DNS: ns.server.tld - - + + Validate - + Qt::Horizontal - + 40 20 @@ -1486,32 +1505,32 @@ email:my@other.address, RID:1.2.3.4, DNS: ns.server.tld - - + + 6 - + 0 - - - + + + 0 0 - + Cancel - + Qt::Horizontal - + 311 31 @@ -1520,14 +1539,14 @@ email:my@other.address, RID:1.2.3.4, DNS: ns.server.tld - - - + + + 0 0 - + OK @@ -1617,11 +1636,11 @@ email:my@other.address, RID:1.2.3.4, DNS: ns.server.tld NewX509 reject() - + 96 569 - + 179 282