Christian Hohnstaedt
4f706fb3de
Move Help window into separate class
...
Start it on application start and keep it around
for context sensitive help.
2021-04-09 17:36:03 +02:00
Christian Hohnstaedt
7ace0db0d5
Add ED25519 support for commandline key generation
...
Enable the key-job class to parse ED25519 key description
without size and EC-Group correctly.
Don't check the size parameter of ED25519 keys.
2021-04-09 17:36:03 +02:00
Christian Hohnstaedt
46f6959f5d
Update xca.pro
2021-04-09 17:36:03 +02:00
Christian Hohnstaedt
d53d64d23d
Transform XCA documentation from SGML to sphinx
...
linuxdoc is pretty outdated, while sphinx is really cool:
- Sphinx is modern with a broad user base
- The generated documentation is themeable
- The sphinx-source is much more readable than the
SGML-tag scattered linuxdoc.
- The different topics can be splitted into different files
- It can be converted to qt-context sensitive help
- It supports syntax highlighting for the SQL database documentation
- It is supported on MacOSX,because it is python-based.
Drop code2html perl-script, which was used to colorize the SQL schema.
Generate "doc/arguments.rst" with XCA_MAN="rst" ./xca
2021-04-09 17:36:03 +02:00
Christian Hohnstaedt
b0190bf8fb
Update changelog
2021-04-01 21:32:40 +02:00
Christian Hohnstaedt
c05b58c6e6
Fix for building against libreoffice
2021-04-01 20:27:11 +02:00
Christian Hohnstaedt
0bdd964443
Use .priv as SSH private key extension
2021-04-01 17:25:27 +02:00
Christian Hohnstädt
7f9f61c5c7
Issue a warning when using an insecure hash algorithm
...
md5, ripemd160 and sha1 are considered insecure.
Issue a warning if one of them is used.
2021-04-01 14:02:59 +02:00
Christian Hohnstädt
9f0d70746f
Fix issuing ED25519 certificates
2021-04-01 13:44:49 +02:00
Christian Hohnstädt
45de747461
Add support for SSH2 ED25519 private key export
...
Encrypting the SSH2 private keys is not supported, yet.
2021-04-01 12:24:01 +02:00
Christian Hohnstädt
241abffaad
Close #258 : xca aborts on exit and on access to own templates
...
Double check the values used to call beginRemove/InsertRows()
2021-04-01 11:02:22 +02:00
Christian Hohnstädt
6d76fe1206
Close #142 : Support Ed25519 Export private SSH2 key
...
Currently "PEM private" will export the key in SSH2
for PEM export into the clipboard
2021-04-01 11:02:22 +02:00
Christian Hohnstaedt
fdb2894e80
Close #142 : Support Ed25519 Import private SSH2 key
...
Support loading OpenSSH ED25519 private key
Improve private key verification in general.
ED25519 does not support EVP_PKEY_sign(), so use
EVP_DigestSign(), which in turn only works since OpenSSL 1.1.1
resulting in a backward compatibility quirk in openssl_compat.
2021-04-01 11:02:22 +02:00
Christian Hohnstaedt
9cd58ff262
Close #142 : Support Ed25519 Import public key
...
Import ED25519 key from SSH2 public key format
2021-04-01 11:02:22 +02:00
Christian Hohnstaedt
86cfff35d0
Close #142 : Support Ed25519 Public export an Details
...
- Export SSH2 Public key
- Detect whether ED25519 key is private key
- Support ED25519 in the KeyDetails dialog
o Display public key
o Curve name
o Fingerprints
o Availability of private key
2021-04-01 11:02:22 +02:00
Christian Hohnstaedt
dbb3c48ef3
Close #142 : Support Ed25519 Keygen
...
Support generating ED25519 keys
2021-04-01 11:02:22 +02:00
Christian Hohnstädt
1a0ef9c9ee
Extend OpenSSL 1.0.2 compatibility layer
...
Add EVP_MD_CTX_new/free() and EVP_CIPHER_CTX_new/free()
as backward compatibility layer
2021-04-01 11:02:22 +02:00
Christian Hohnstädt
58896e1d1a
INSTALL.mac: Fix minor documentation typo
2021-04-01 11:02:22 +02:00
Christian Hohnstaedt
46cbba45a3
pki_evp: Fix indentation
2021-04-01 11:02:22 +02:00
Christian Hohnstaedt
25347fa28a
OpenDb: Fix opening remote database when local DB was open
...
The OpenDB dialog did not show up and the previous sqlite
database was opened again.
Start the dialog without current Database preset to always show it.
2021-04-01 11:01:10 +02:00
Christian Hohnstädt
496fb5e0bc
Close #251 : AuthorityKeyIdentifier: use issuer:always
...
When analysing and translating the AuthorityKeyIdentifier
extension to OpenSSL syntax, take an existing DirName
as "issuer:always", because openssle otherwise ignores it,
when the keyid succeeds.
2021-02-08 17:07:06 +01:00
Christian Hohnstädt
bab4326c0e
Change language maintainer of brazilian portuguese
2021-02-06 22:55:20 +01:00
Ulisses Guedes
1c97a12921
Complete brazilian translation
2021-02-06 22:52:54 +01:00
Christian Hohnstädt
c90302ddd8
Close #230 : Change PKCS12 export extension from .p12 to .pfx
...
[Change Request] Consider changing PKCS12 export
extension from .p12 to .pfx by default,
as p12 is a legacy Netscape holdover,
and PFX is the 'standard' per RFC now.
2021-02-06 22:52:54 +01:00
Christian Hohnstaedt
66cff37ad9
Close #208 : XCA hung when importing EC keys. For example prime256v1
...
Fix Null-Pointer exception, which is strange, because:
- it only happens on windows
- the key still works fine
2021-02-06 22:52:54 +01:00
Christian Hohnstädt
a12266dfa8
Merge branch 'master' of https://github.com/rlinfati/xca
2020-11-19 13:47:20 +01:00
Christian Hohnstädt
ebfbbcb5f1
Extend commit f03ea67bdd by adding the OIDs to OIDS.txt
...
This commit supports OpenSSL < 1.1.0, since the OIDs
have only been added for OpenSSL 1.1.0 and later
2020-11-19 13:44:49 +01:00
Christian Hohnstädt
d853838282
Merge pull request #231 from rlinfati/patch-1
...
update EKU
2020-11-19 13:38:11 +01:00
Rodrigo Linfati
6dd7894b1c
add document signing
2020-11-02 00:10:22 -03:00
Rodrigo Linfati
f03ea67bdd
update EKU
...
add kerberos and ssh EKU
2020-11-02 00:04:08 -03:00
Christian Hohnstädt
e2a0e41151
Close #210 : Make dialog to edit SAN less strict
...
Dialog to edit Subject Alternative Name does now
allow URI scheme to contain digits or special chars.
2020-10-16 11:20:56 +02:00
Christian Hohnstädt
af711cc174
Templates: constify
2020-10-16 00:37:12 +02:00
Christian Hohnstädt
63cf680908
Templates: Fix editing on doubleclick
2020-10-16 00:37:12 +02:00
Christian Hohnstaedt
e9edb75442
ImportMulti: Update pointer management to always free all items
2020-10-16 00:37:12 +02:00
Christian Hohnstaedt
cbe7709b20
Close #224 : Store original path/filename on import
2020-10-16 00:37:12 +02:00
Christian Hohnstädt
b60bd0226b
Merge pull request #228 from chris2511/issue/github#213
...
Close #213 : configure.ac: add description to AC_DEFINE_UNQUOTED
2020-10-16 00:36:27 +02:00
Christian Hohnstädt
ef5bb98a90
Initialize workingdir with trailing slash
...
All users of the workingdir assume it ends with a /
2020-10-15 06:21:32 +02:00
Christian Hohnstädt
e4f9dd6389
Fix opening new database, while another one is open
...
Avoid crashes by checking for model being set.
Thoroughly close previous database before opening a new one.
Drop changeDB() function and replace by init_database.
2020-10-14 22:02:48 +02:00
Christian Hohnstädt
6f8a543761
Improve Item properties dialog
...
Change form layout to table layout, which is nicer and matches better
2020-10-14 22:00:20 +02:00
Christian Hohnstädt
0745af1d63
Fix editing revocation entries and generate CRL from that dialog
2020-10-14 19:48:18 +02:00
Christian Hohnstädt
a010c091df
Manage Revocations: Fix double click on item to edit
2020-10-14 19:48:18 +02:00
Christian Hohnstädt
ed29b5f3a5
Fix typo to start CRL Management
2020-10-14 19:48:18 +02:00
Christian Hohnstädt
497e4a6120
Extend Password input by filedescriptor number and automatic man page
...
Also extend the documentation about the password.
Automatically generate the man page from the options.
Call xca as "XCA_MAN=1 ./xca" to print the current man-page options
2020-10-14 19:48:18 +02:00
Christian Hohnstädt
8963590053
Create user-settings directory after creating QApplication
...
At least on OSX this is required to have
QCoreApplication::applicationName() return "xca"
2020-10-14 19:48:18 +02:00
Christian Hohnstädt
0340b1c759
Improve OSX build instructions
2020-10-14 19:48:17 +02:00
Christian Hohnstädt
33787e852b
ReqTreeView: signReq() and toRequest() got mixed up. Sort it out
2020-10-14 19:48:17 +02:00
Christian Hohnstädt
6474d6356b
Improve finding certs/requests with same key
...
The SELECT query now also only selects items of the required type:
Request / x509 certificate
This avoids error messages
2020-10-14 19:48:17 +02:00
Christian Hohnstädt
78d6b5e67c
Check XCA_ABORT_ON_WARNING envvar to abort() on any warning or worse
...
This allows easy debugging of warnings and errors
2020-10-14 19:48:17 +02:00
Christian Hohnstädt
21cd74c62e
Add key.png converted from key.xpm, because on OSX xpm does not work
2020-10-14 19:48:17 +02:00
Christian Hohnstädt
24009b13c7
Fix warnings
2020-10-14 19:48:17 +02:00