From 4b76522d9e752beeaa7370b86e4fc9be8beeda68 Mon Sep 17 00:00:00 2001 From: Christian Hohnstaedt Date: Sun, 29 Sep 2024 12:51:45 +0200 Subject: [PATCH] Close #199: Templates and Key Identifiers Extend all 3 templates. Skip AKID for self-signed certificates. Visualize this by disabling the AKID checkbox if a self-signed certificate is going to be created. --- misc/CA.xca | Bin 862 -> 1308 bytes misc/TLS_client.xca | Bin 808 -> 1352 bytes misc/TLS_server.xca | Bin 828 -> 1381 bytes ui/NewX509.ui | 16 ++++++++++++++++ widgets/NewX509_ext.cpp | 3 +-- 5 files changed, 17 insertions(+), 2 deletions(-) diff --git a/misc/CA.xca b/misc/CA.xca index 6cbf40916efe29d0d39e730f0a6aa7a6fbc2a1e4..08374fa94bf33895bf308ea81a2884b9e7c3d545 100644 GIT binary patch literal 1308 zcmaKsL2ueX5QXpjiu?gol2VCF4sY<UQdTo#IQd3HC)*(y{YudoVwJ01bZ_K{CKcY4C6dNv3%)Sa!61KZ9fC<3;y zBZ@}nb7b0ZJ<`EF>;m}=_cd=XYCq87?N*|V3RGcT^CA`Tdn$6-PzlQPgrbt<6NxpV|!!K*d}v z!FQEVVH^2jpn}?7|1Kemc0f3)v=7J|u{gZb5-n@>{_99J{wK48EnU%6$_`kRVzEQf z;f^e*V1`X?-&8vfCer7N+^Fcg6fqM^b5=*eP5~x-4>72vz;uZ$UIdF$O&OT+S~WAl zAw|`*!|tW2?I!qWnM}o#9_^& zKKOxrt8*Ht!zVE)+Ef}7(?2;OMma1R=ThV9s(pV}Py!W=^4+~e|krRs> zwe>;t(=2dkIE5WckdaKSImzN{|rwhyMAAf(p0HHK_?*IS* literal 862 zcmaiz%}YX25XBEAEkaz#BO*kiRm*GF@%j3b&}0VkMerpf=wH)ns5fXKy*0V%>8r|EA^EOLS2SeW<5<4fW;L z8am3Xbz&@u5Niq^q^cD3k(;20dMBpoZC(!`E6vo0VM#tS-gfa#GOlCiGOv{T={4o? zvf~ZjO+AAY7OASWGoGR?vN4aiA&TW0W$yy|L}hb4r33m@lhu8adBp0#Zk_Dom5+Uv zdDOM5ijd_E*)NEa=QxLBrWdRUr^&D7X|)b?OBHi$))~t!OexYE^Jq}j#Otz}l5Yf$ z3Ybl)>v8`0Y#55aylgkFbp;y1xZrG?=@GpD#T~LAyW*DM2wN2LBP3FyuQu<@&g7G!v%clVQ5hgAhN5*3ZmR>CuI`5hyllCo3HQ8iVo5T4)zWH*6mDktt2tfYI2k;VYb5m^{{0wb$D-^&sx(ubq7Ve0$ z)A<~^HY`UvxPzOZnBlJF?W(mCJqox-R2}Z&Uf_4w1os`@qmSKg5?keReD0%2=XtKJ5@aBoqnvhm0uzS;tPtEu5I1n&glrStE6Pj=P9Kq#K@_bp5wHT)wam9MB_K4FAyl?A zqKhe^Y11h_OXmkBpazi?2#r*hh9D(S5J0ZtUhQxrjRqfhiMV8!MsO4_vW?!vJXkx` zE~BCZY^OGdgw!bIC}(Q} zlgmp)QfiZNnCQkd(&4b^m#HY{a%9JDQG;G;8|1-22JP>Q>-USS+<{03A3QUGi9-ht zv!p^)e?Vg5)q>h7j?k?;M0}|@A+|2i!pxXqBlWGnJmp+HBi3{XLhVPV5F};Yn)K+8Ml!J*{nsEii|Cz#j(Z{onrpJIe}YaU$Enn|segbgk}b q+(}_4gDld1ved~JtT0K##o=j*RHr?fhzauU^T_^+ev$v@SNR(dkA^D% literal 808 zcmaiy%}YX25XBEAEh1dVBf^D9tCnRHv@~rIVMrge3_nTyq^D;8eZO<>liot=KJL{! zXXebAnJevAB^{n~sLVdnS{+R^QeThU4|J((UGcA!Ls|i!VcnBM^HHswHPuR8J!qis zV7=f>6s>i#EXmQ)6g;kqW}wgP3Fkncj`A7xq2`x(K9FZ72iq5brQJjHDiB; zs`7X#;0@xYLBR|bsiI9_ta3WDnTPC{#X6HLE}}0~w!qV!aF@y%+EE*3_pygZKJRJf zQP+PJM1{8~PsxzyID=!ZH>?xBCcoC`I{Uh#f(15rCF=5o5{;QfgNjC>CfDOmZRa<} z*E*d^DyXKL5H-S*YS*le@%)Rk2p%WDWliXXJK~8f;aqWkkfn&-b8CX7*y1XLo?Brp yDCu(FrQdI=#4B@`-0gO#+`L{zZZXgAD~$cv+V4>_L`{z`F30qFTkj~{L_I&A0Cc+m diff --git a/misc/TLS_server.xca b/misc/TLS_server.xca index f24123a95a61b34d876a0d8bfa6bd2672b5b56e8..92332c1ac2432fce6ee590bd7759e079b5dee5ba 100644 GIT binary patch literal 1381 zcmZuxT~FIU5PbKq;13|VD3$WU!z@03NI0q67-8O$Ko9CvAf@1vU*DOv1GMTrxLJ}i1B0;9YZB3(*ufHlwVQw%J`(;4BUHE#Bc2e0+2BmOQ^J~ zgc{q(z(59#9X^(jMcX0lRoZ9dt+d$b784%Cl=sdE;9u;mRt4x{vBzy=8Oln)q};3a zdlatqQN&097l#23^el=S*mp784E75}DhAIVnH5nb&Q$6yQ3k5($kzh{1<<@vWjhD7 z0|6-_fnHH|<35)1L;z|qn28z@mmdLCFEC)O+RGkS(uhpCf<&xYO#-8M1KSu}%qMTB z+U2DvmVw#~6H_lKLowIygSS!VxQP1W1^HGK>9_%3StE*0BC@nrhRab#IWj20sDUm= z^5hCpV$lziaR_wf8tHIc^vg^oXL4lAZc&3yYCGl8Ku+!7i|euae41TpEf#aAPq6OB+S3 zuyQA=zsEGxiQV8VJVQU!?jSV46l@Ph*|w z0dk`mty~c4_<$&g4+yFGY_OyrAysMp1bm!ACg@xv0`zj&((gtbkabuz=jVw(nPHLr H=NlHVMrD&!^R}>lg7;c`+n!W85|<&4e!p( z{W$mB4{7sE()KYzHSUg<>S?T@`nuzPOLbl7oUcm3(hl}1+6_6h7}YLlQ+?<~w|doA z(4HWxirNNQ7Ubw@g5CNSe_dTF(M)q95;?;@GDV-_-^KGC9+vA!oHDO_EK8yjP#18V z5&MYm*e;yCfMu^K_cK&lv{!VWLtCU_L{9%dd5{Z~O`cm?y63`LA1FlKr}JLYNeHb>Xl*EJQ)(YY&;m#0?M zi1{?BXc%g8J?>OK(-FSr=}c0ITIwNch$hv~`C-y7o_}GMvBz!5QN0c8nKt0F&>Ki) zdgQsa;Fh9`rxbdg_qEDyCBO3bo>j2AOYU|jRBl|KGJi48dNX4`a{Uc`8&F}w6OUv1 L?A9}ESCP**8)|r+ diff --git a/ui/NewX509.ui b/ui/NewX509.ui index 2a375487..46cf44a3 100644 --- a/ui/NewX509.ui +++ b/ui/NewX509.ui @@ -1594,5 +1594,21 @@ + + selfSignRB + toggled(bool) + authKey + setDisabled(bool) + + + 372 + 319 + + + 625 + 172 + + + diff --git a/widgets/NewX509_ext.cpp b/widgets/NewX509_ext.cpp index f020f1fc..1fddf6e3 100644 --- a/widgets/NewX509_ext.cpp +++ b/widgets/NewX509_ext.cpp @@ -47,7 +47,6 @@ x509v3ext NewX509::getSubKeyIdent() return ext; } - x509v3ext NewX509::getOCSPstaple() { x509v3ext ext; @@ -61,7 +60,7 @@ x509v3ext NewX509::getOCSPstaple() x509v3ext NewX509::getAuthKeyIdent() { x509v3ext ext; - if (!authKey->isChecked() || !authKey->isEnabled()) + if (!authKey->isChecked() || !authKey->isEnabled() || selfSignRB->isChecked()) return ext; QString x = "keyid,issuer";