should not be used at the same time. Actually "Keep serial number"
should generally be used with care.
When checking "Keep serial number", "Revoke old certificate" is disabled
and unchecked and "Replace old certificate" is disabled and checked.
Add
- MYSQL_OPT_SSL_ENFORCE
- MYSQL_OPT_SSL_VERIFY_SERVER_CERT
- MARIADB_OPT_TLS_PEER_FP
- MARIADB_OPT_TLS_PEER_FP_LIST
options to control the SSL behavior.
Especially to disable SSL you need to set
MYSQL_OPT_SSL_VERIFY_SERVER_CERT to false on macosx.
A new tab on the certificate details dialog
shows the result of the OpenSSL validation process
and the calculated OpenSSL Purpose.
The translation of the OpenSSL X509_V_ERR.... messsages
back to strings is done by grepping them from "openssl/x509_vfy.h"
and wrapping them into a macro-call.
Additionally guard them by an #ifdef (Zombieland rule #2: Double-Tap)
This way:
- I don't need to test and check in which versions of OpenSSL
which errors are available or not
- New errors will be picked up automatically, as long as they
match the "X509_V_ERR_" pattern
Changing RST files in doc now result in a recreation
of the HTML and QtHelp files during build.
The sphinx-html and sphinx-qthelp targets need to
depend on sphinx-src to create that target files only once
(and not twice in parallel during parellel builds)
and also on all output files sphinx-src depends on.
.
Replace "UPN:" by "otherName:msUPN;UTF8:" when generating
the extension from the Subject- and IssuerAlternativeName.
Extend the Edit dialog of the SAN and IAN by the "UPN" prefix.
Replace "otherName:msUPN;UTF8:" by "UPN:" when creating a template
from an existing certificate or request.
The OpenSSL config file export, the configuration display
and edit on the "Advanced Tab" are not afffected, since
this is an XCA syntax sugar, not supported by OpenSSL.
Update documentation
In case of SOURCE_DIR == BINARY_DIR the "doc/rst"
directory was the same directory for some copy operations
and dependencies became recursive.
Change the binary "doc/rst" directory to doc/rst-build
Also drop some superflous ""
Create/copy from README.md documentation about remote databases.
Add Help button to Remote database dialog.
Extend documentation in the Windows msi installer
Qt5 before 5.12 has to use qcollectiongenerator
instead of qhelpgenerator, which also exists but creates an error.
if qcollectiongenerator prioritize it.
Use "${QT}::qhelpgenerator" instead of
"find_program(QTCOLLGEN NAMES qhelpgenerator ....)"
Add CACHE Variable QTFIXEDVERSION allowing to force Qt5 or Qt6
if both are installed.
XCA now supports both, Qt6 and Qt5 down to Qt-5.2
Use CMAKE_PREFIX_PATH to point to the QT dompiler directory like
$ cmake -B build -DCMAKE_PREFIX_PATH=$HOME/6.3.1/gcc_64
When I followed the step-by-step documentation for the first time, I was confused at first by the New Certificate button being greyed out.
This commit adds a section which explains creating the database before creating a certificate.
Also remove stamp files and simplify CMake rules:
- Name all generated files in OUTPUT
- Drop BYPRODUCT, which is not necessary now.
- Let the target depend on all OUTPPUTs of the command.
