The_Great_Archive/xca
1
0
Fork 0
mirror of https://github.com/chris2511/xca.git synced 2026-09-14 11:06:19 +05:00
Code Issues Actions Packages Projects Releases Wiki Activity

documentation update

Browse Source
This commit is contained in:
chris 2008-01-27 23:13:55 +01:00
parent 8c9fc71c64
commit dd40eb75f4
4 changed files with 56 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
AUTHORS
View File

@ -9,3 +9,6 @@ Ilya Kozhevnikov <ilya@ef.unn.ru>
Wolfgang Glas <wolfgang.glas@ev-i.at>
Adding SPKAC support and testing
Geoff Beier <geoffbeier@gmail.com>
MAC OS X Support and testing

2
changelog
View File

@ -1,4 +1,6 @@
* Major changes for MAC OS X
* extend template format for nconf settings
* add nconf input field for arbitrary OpenSSL extensions
and a "validate" button to check the settings before applying
* fix xca.desktop Bug [ 1837956 ]

49
doc/xca.sgml
View File

@ -315,14 +315,16 @@ by selecting it and clicking <em>Apply</em>.
<sect1>Personal settings
<sect2>Distinguished Name
<sect2>Subject
<p>
On this Page all personal data like country, name and email address
can be filled in. Only the <tt>Internal name</tt> is mandatory.
can be filled in.
The <tt>Country code</tt> field must either be empty or exactly contain
two letters representing your country code; e.g. <tt>DE</tt> for Germany.
If you want to create an SSL-server certificate the <tt>Common name</tt>
must contain the <tt>DNS</tt> name of the server.
If the <tt>internal name</tt> is empty, the common name will be used.
It will also be used, when a new key is created here.
<p>
Other rarely used <tt>name-entries</tt> can be selected in the dialog
below. Only items that were added using the <em>Add</em>
@ -331,10 +333,14 @@ button are recognized. All items can be added more than once, even those from ab
<sect2>Private Key
<p>
Keys can be generated here <tt>on the fly</tt> by pressing the button.
The name of the new key will be preset by the common name of the certificate.
The newly generated key will be stored in the database and stay there,
even if the input dialog is canceled. The drop-down list of the keys
only contains keys that were not used by any other certificates or
requests. The key-list is not available for creating or changing templates.
By checking <tt>Used keys too</tt> the list contains all available
keys. Use this with care. You'Re likely doing something wrong when using this
option.
<p>
This tab does not appear when signing a request, because the request
contains all needed data from this tab.
@ -370,6 +376,38 @@ template. Applying the time range means to set notBefore to "now" and notAfter
to "now + time range". If the <tt>midnight</tt> button is set both dates will be
rounded down and up to midnight.
<sect2>Advanced
<p>
Any extension, not covered on the other tabs can be added here as
defined in OpenSSL nconf. The validity can be checked by clicking
<tt>Validate</tt>. All extensions from all tabs will be shown here
to see them all in their final form. Click on <tt>Edit</tt> to continue
editing the extensions here.
<sect3>Certificate Policies
<p>
The following example of <tt>openssl.txt</tt> also works in the advanced tab
to define certificate policies
<tscreen><verb>
certificatePolicies=ia5org,1.2.3.4,1.5.6.7.8,@polsect
[polsect]
policyIdentifier = 1.3.5.8
CPS.1="http://my.host.name/"
CPS.2="http://my.your.name/"
userNotice.1=@notice
[notice]
explicitText="Explicit Text Here"
organization="Organisation Name"
noticeNumbers=1,2,3,4
</verb></tscreen>
<!-- %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% -->
<sect>RSA and DSA keys <label id="keys">
@ -634,6 +672,7 @@ The search path for all the files is listed below.
<item>/etc/xca/
<item>$HOME/xca/
</itemize>
<p>
<bf>Windows</bf>
<itemize>
<item>Installation directory <newline>e.g.: C:\Programs\xca
@ -658,6 +697,12 @@ Lines starting with a <bf>#</bf> are ignored.
If this files shall contain new inofficial OIDs, they must be also mentioned
in one of the <tt>oids.txt</tt> files.
<sect>Step by Step guides
<p>
Beginners may follow this steps to easily create the first certificates
and take advantage of the several features.
<!-- %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% -->
<sect>Appendix

6
widgets/NewX509_ext.cpp
View File

@ -221,8 +221,7 @@ extList NewX509::getAdvanced()
if (!bio)
return elist;
conf = NCONF_new(NULL);
ret = NCONF_load_bio(conf, bio , &err_line);
BIO_free(bio);
ret = NCONF_load_bio(conf, bio, &err_line);
if (ret != 1) {
int i = ERR_get_error();
printf("Ret: %d, ERRLINE=%ld: %s\n", ret, err_line,
@ -231,6 +230,7 @@ extList NewX509::getAdvanced()
QMessageBox::warning(this, XCA_TITLE,
tr("Advanced Settings Error: ") +
ERR_error_string(i ,NULL), tr("OK"));
BIO_free(bio);
return elist;
}
X509V3_set_nconf(&ext_ctx, conf);
@ -238,6 +238,8 @@ extList NewX509::getAdvanced()
elist.setStack(sk);
sk_X509_EXTENSION_pop_free(sk, X509_EXTENSION_free);
X509V3_set_nconf(&ext_ctx, NULL);
NCONF_free(conf);
BIO_free(bio);
return elist;
}