Commit Graph

2028 Commits

Author SHA1 Message Date
Christian Hohnstaedt
4f706fb3de Move Help window into separate class
Start it on application start and keep it around
for context sensitive help.
2021-04-09 17:36:03 +02:00
Christian Hohnstaedt
7ace0db0d5 Add ED25519 support for commandline key generation
Enable the key-job class to parse ED25519 key description
without size and EC-Group correctly.
Don't check the size parameter of ED25519 keys.
2021-04-09 17:36:03 +02:00
Christian Hohnstaedt
46f6959f5d Update xca.pro 2021-04-09 17:36:03 +02:00
Christian Hohnstaedt
d53d64d23d Transform XCA documentation from SGML to sphinx
linuxdoc is pretty outdated, while sphinx is really cool:

 - Sphinx is modern with a broad user base
 - The generated documentation is themeable
 - The sphinx-source is much more readable than the
   SGML-tag scattered linuxdoc.
 - The different topics can be splitted into different files
 - It can be converted to qt-context sensitive help
 - It supports syntax highlighting for the SQL database documentation
 - It is supported on MacOSX,because it is python-based.

Drop code2html perl-script, which was used to colorize the SQL schema.
Generate "doc/arguments.rst" with XCA_MAN="rst" ./xca
2021-04-09 17:36:03 +02:00
Christian Hohnstaedt
b0190bf8fb Update changelog 2021-04-01 21:32:40 +02:00
Christian Hohnstaedt
c05b58c6e6 Fix for building against libreoffice 2021-04-01 20:27:11 +02:00
Christian Hohnstaedt
0bdd964443 Use .priv as SSH private key extension 2021-04-01 17:25:27 +02:00
Christian Hohnstädt
7f9f61c5c7 Issue a warning when using an insecure hash algorithm
md5, ripemd160 and sha1 are considered insecure.
Issue a warning if one of them is used.
2021-04-01 14:02:59 +02:00
Christian Hohnstädt
9f0d70746f Fix issuing ED25519 certificates 2021-04-01 13:44:49 +02:00
Christian Hohnstädt
45de747461 Add support for SSH2 ED25519 private key export
Encrypting the SSH2 private keys is not supported, yet.
2021-04-01 12:24:01 +02:00
Christian Hohnstädt
241abffaad Close #258: xca aborts on exit and on access to own templates
Double check the values used to call beginRemove/InsertRows()
2021-04-01 11:02:22 +02:00
Christian Hohnstädt
6d76fe1206 Close #142: Support Ed25519 Export private SSH2 key
Currently "PEM private" will export the key in SSH2
for PEM export into the clipboard
2021-04-01 11:02:22 +02:00
Christian Hohnstaedt
fdb2894e80 Close #142: Support Ed25519 Import private SSH2 key
Support loading OpenSSH ED25519 private key

Improve private key verification in general.
ED25519 does not support EVP_PKEY_sign(), so use
EVP_DigestSign(), which in turn only works since OpenSSL 1.1.1
resulting in a backward compatibility quirk in openssl_compat.
2021-04-01 11:02:22 +02:00
Christian Hohnstaedt
9cd58ff262 Close #142: Support Ed25519 Import public key
Import ED25519 key from SSH2 public key format
2021-04-01 11:02:22 +02:00
Christian Hohnstaedt
86cfff35d0 Close #142: Support Ed25519 Public export an Details
- Export SSH2 Public key
- Detect whether ED25519 key is private key
- Support ED25519 in the KeyDetails dialog
   o Display public key
   o Curve name
   o Fingerprints
   o Availability of private key
2021-04-01 11:02:22 +02:00
Christian Hohnstaedt
dbb3c48ef3 Close #142: Support Ed25519 Keygen
Support generating ED25519 keys
2021-04-01 11:02:22 +02:00
Christian Hohnstädt
1a0ef9c9ee Extend OpenSSL 1.0.2 compatibility layer
Add EVP_MD_CTX_new/free() and EVP_CIPHER_CTX_new/free()
as backward compatibility layer
2021-04-01 11:02:22 +02:00
Christian Hohnstädt
58896e1d1a INSTALL.mac: Fix minor documentation typo 2021-04-01 11:02:22 +02:00
Christian Hohnstaedt
46cbba45a3 pki_evp: Fix indentation 2021-04-01 11:02:22 +02:00
Christian Hohnstaedt
25347fa28a OpenDb: Fix opening remote database when local DB was open
The OpenDB dialog did not show up and the previous sqlite
database was opened again.

Start the dialog without current Database preset to always show it.
2021-04-01 11:01:10 +02:00
Christian Hohnstädt
496fb5e0bc Close #251: AuthorityKeyIdentifier: use issuer:always
When analysing and translating the AuthorityKeyIdentifier
extension to OpenSSL syntax, take an existing DirName
as "issuer:always", because openssle otherwise ignores it,
when the keyid succeeds.
2021-02-08 17:07:06 +01:00
Christian Hohnstädt
bab4326c0e Change language maintainer of brazilian portuguese 2021-02-06 22:55:20 +01:00
Ulisses Guedes
1c97a12921 Complete brazilian translation 2021-02-06 22:52:54 +01:00
Christian Hohnstädt
c90302ddd8 Close #230: Change PKCS12 export extension from .p12 to .pfx
[Change Request] Consider changing PKCS12 export
extension from .p12 to .pfx by default,
as p12 is a legacy Netscape holdover,
and PFX is the 'standard' per RFC now.
2021-02-06 22:52:54 +01:00
Christian Hohnstaedt
66cff37ad9 Close #208: XCA hung when importing EC keys. For example prime256v1
Fix Null-Pointer exception, which is strange, because:
 - it only happens on windows
 - the key still works fine
2021-02-06 22:52:54 +01:00
Christian Hohnstädt
a12266dfa8 Merge branch 'master' of https://github.com/rlinfati/xca 2020-11-19 13:47:20 +01:00
Christian Hohnstädt
ebfbbcb5f1 Extend commit f03ea67bdd by adding the OIDs to OIDS.txt
This commit supports OpenSSL < 1.1.0, since the OIDs
have only been added for OpenSSL 1.1.0 and later
2020-11-19 13:44:49 +01:00
Christian Hohnstädt
d853838282
Merge pull request #231 from rlinfati/patch-1
update EKU
2020-11-19 13:38:11 +01:00
Rodrigo Linfati
6dd7894b1c add document signing 2020-11-02 00:10:22 -03:00
Rodrigo Linfati
f03ea67bdd
update EKU
add kerberos and ssh EKU
2020-11-02 00:04:08 -03:00
Christian Hohnstädt
e2a0e41151 Close #210: Make dialog to edit SAN less strict
Dialog to edit Subject Alternative Name does now
allow URI scheme to contain digits or special chars.
2020-10-16 11:20:56 +02:00
Christian Hohnstädt
af711cc174 Templates: constify 2020-10-16 00:37:12 +02:00
Christian Hohnstädt
63cf680908 Templates: Fix editing on doubleclick 2020-10-16 00:37:12 +02:00
Christian Hohnstaedt
e9edb75442 ImportMulti: Update pointer management to always free all items 2020-10-16 00:37:12 +02:00
Christian Hohnstaedt
cbe7709b20 Close #224: Store original path/filename on import 2020-10-16 00:37:12 +02:00
Christian Hohnstädt
b60bd0226b
Merge pull request #228 from chris2511/issue/github#213
Close #213: configure.ac: add description to AC_DEFINE_UNQUOTED
2020-10-16 00:36:27 +02:00
Christian Hohnstädt
ef5bb98a90 Initialize workingdir with trailing slash
All users of the workingdir assume it ends with a /
2020-10-15 06:21:32 +02:00
Christian Hohnstädt
e4f9dd6389 Fix opening new database, while another one is open
Avoid crashes by checking for model being set.
Thoroughly close previous database before opening a new one.
Drop changeDB() function and replace by init_database.
2020-10-14 22:02:48 +02:00
Christian Hohnstädt
6f8a543761 Improve Item properties dialog
Change form layout to table layout, which is nicer and matches better
2020-10-14 22:00:20 +02:00
Christian Hohnstädt
0745af1d63 Fix editing revocation entries and generate CRL from that dialog 2020-10-14 19:48:18 +02:00
Christian Hohnstädt
a010c091df Manage Revocations: Fix double click on item to edit 2020-10-14 19:48:18 +02:00
Christian Hohnstädt
ed29b5f3a5 Fix typo to start CRL Management 2020-10-14 19:48:18 +02:00
Christian Hohnstädt
497e4a6120 Extend Password input by filedescriptor number and automatic man page
Also extend the documentation about the password.
Automatically generate the man page from the options.

Call xca as "XCA_MAN=1 ./xca" to print the current man-page options
2020-10-14 19:48:18 +02:00
Christian Hohnstädt
8963590053 Create user-settings directory after creating QApplication
At least on OSX this is required to have
QCoreApplication::applicationName() return "xca"
2020-10-14 19:48:18 +02:00
Christian Hohnstädt
0340b1c759 Improve OSX build instructions 2020-10-14 19:48:17 +02:00
Christian Hohnstädt
33787e852b ReqTreeView: signReq() and toRequest() got mixed up. Sort it out 2020-10-14 19:48:17 +02:00
Christian Hohnstädt
6474d6356b Improve finding certs/requests with same key
The SELECT query now also only selects items of the required type:
 Request / x509 certificate
This avoids error messages
2020-10-14 19:48:17 +02:00
Christian Hohnstädt
78d6b5e67c Check XCA_ABORT_ON_WARNING envvar to abort() on any warning or worse
This allows easy debugging of warnings and errors
2020-10-14 19:48:17 +02:00
Christian Hohnstädt
21cd74c62e Add key.png converted from key.xpm, because on OSX xpm does not work 2020-10-14 19:48:17 +02:00
Christian Hohnstädt
24009b13c7 Fix warnings 2020-10-14 19:48:17 +02:00