Add
- MYSQL_OPT_SSL_ENFORCE
- MYSQL_OPT_SSL_VERIFY_SERVER_CERT
- MARIADB_OPT_TLS_PEER_FP
- MARIADB_OPT_TLS_PEER_FP_LIST
options to control the SSL behavior.
Especially to disable SSL you need to set
MYSQL_OPT_SSL_VERIFY_SERVER_CERT to false on macosx.
Extend all 3 templates.
Skip AKID for self-signed certificates.
Visualize this by disabling the AKID checkbox
if a self-signed certificate is going to be created.
Use the provided plural mechanisms of QT.
The "PO" translation also works smoothly and
the translation mechanisms between .po <-> .qt
was tested successfully.
The new english translation file translates
the single phrase:
"Delete the %n revocation list(s): '%1'?"
into
"Delete the revocation list: '%1'?" for one item
and
"Delete the %n revocation lists: '%1'?" otherwise
coreApp->setOrganizationDomain() expects the domain
in DNS order (hohnstaedt.de) and not reversed.
Change the WM_CLASS property to "de.hohnstaedt.xca"
via setApplicationName().
While Qt6 prepends the reversed "OrganizationDomain",
Qt5 does not and setting the complete name with
domain-prefix works for both.
Also adopt the ".desktop" file name to follow the application-name
and fix issues found by "desktop-file-validate"
Add the name from the "provisionprofile" to the
entitlements to silence the error and allow
testflights.
Extend legacy.dylib to also include the x86_64 binary
Bump patch version to get new versions
even with commit amending.
Re-add file associations as extra installation item.
Always install the XCA specific extensions (*.xdb, *.xca)
with the main application, but allow to skip the generic
extensions like *.crl, *.pem, *.crt
Put it into the "PlugIns" directory and load it from there.
Show whether the legacy-provider was loaded in the About-Dialog.
CmakeLists.txt: Improve OpenSSL Major version detection
and replace the foreach() loop in misc/CMakeLists.txt
by the simpler list(TRANSFORM ...)
The "en" language was missing from the list of languages
in Info.plist:CFBundleLocalization.
English is the source language for all translations and
not part of the LANGUAGES_PLIST variable.
The LANGUAGES_PLIST is compiled from the list of all
languages, XCA is translated to.
If no translated language is installed in the system,
the first one from the list will be picked, apparently.
Add static "en" entry to Info.plist:CFBundleLocalizations
as first language-entry and thus as fallback language if nothing
else matched.
Create/copy from README.md documentation about remote databases.
Add Help button to Remote database dialog.
Extend documentation in the Windows msi installer
Enable legacy provider to allow loading keys
encrypted with an ancient, insecure
algorithm like "pbeWithSHA1And40BitRC2-CBC" for PKCS#12/PFX
Install the dynamic.dll in the portable app and WIX installer.
APPSTORE_COMPLIANT = ON:
- Turns off the File menu and moves the language selector to
the "Extra" Menu. "Options" and "Exit" are at the xca-macos
special-menu anyway.
- Switches the signing key from "Developer ID Application" to
"3rd Party Mac Developer Application"
- Sets the database name to "default.xdb"
- Adds "-appstore-compliant" option to macdeployqt
- Picks the "entitlement-appstore-compliant.plist"
- Disables the "Token" menu and "PKCS#11 provider" tab
in the option dialog
XCA now supports both, Qt6 and Qt5 down to Qt-5.2
Use CMAKE_PREFIX_PATH to point to the QT dompiler directory like
$ cmake -B build -DCMAKE_PREFIX_PATH=$HOME/6.3.1/gcc_64
Enabling Library Validation Entitlement is only good if an application
does not load any libraries other than its own
xca works by loading external pkcs11 libraries, written and signed by others.
Also apply for smartcard usage.
in my msi installation of openssl, the DLL were also installed
in the toplevel directory, which is unusual.
However, they are always also found in bin/
The long list of translations and html documentation
pages is now auto-generated by the cmake files,
which know the translations and html files. (DRY)
TODO: Windows SQL drivers for mysql and psql
