Christian Hohnstaedt
e3c9d7bff8
SF Bug #121 CA serial number is ignored in hierarchical view
...
Remove Serial number from "Authority Key Identifier"
2018-01-06 13:00:08 +01:00
Christian Hohnstaedt
dda100c100
OSSL 1.1 vs. 1.0: Private keys
2017-06-19 08:33:29 +02:00
Patrick Monnerat
ad6c2baae5
Add support for OpenSSL 1.1.0
...
The API changed heavily. New functions arrived, old functions
disappeared and many structures became opaque.
This version of the patch implements pkcs11 signing as follows:
- openssl < 1.0.0: rsa & dsa without engine
- openssl 1.0.x: rsa, dsa & ec with engine
- openssl >= 1.1.0: rsa, dsa & ec without engine
In the operation, we therefore also gain implementation of dsa signing for openssl < 1.0.0 (ec disabled because EC_KEY_METHOD was not yet invented!).
I've given up trying to use a PKEY_ENGINE with openssl 1.1: seems not possible anymore.
I've succeeded compiling the patched xca with openssl 0.9.8n, 1.0.2j and 1.1.0e.
I've successfully tested pkcs11 signing using softhsm with openssl 1.0.2j and 1.1.0e.
The patch also removes gcc7 new warnings.
2017-06-19 08:32:39 +02:00
Christian Hohnstaedt
e5541c6d67
SF. Bug. #81 Make xca qt5 compatible
...
Extend XCA to also compile against Qt5
Remove directory from Qt includes
2015-09-17 18:42:42 +02:00
Christian Hohnstaedt
698c10216f
Add option for disabling the very very legacy Netscape extensions
...
Maybe this setting will become the default in future releases....
2015-04-09 18:49:03 +02:00
Christian Hohnstaedt
9210df0626
Check Netscape extensions to be IA5 clean
2015-04-04 13:13:49 +02:00
Christian Hohnstaedt
aebc916a7b
Overwite extensions from the PKCS#10 request by local extensions
...
Also avoid error message if a request is self-signed
and no unused key is available, but the private key of the request
is available.
2013-11-22 00:18:16 +01:00
Christian Hohnstaedt
38ed0b60b5
Update Copyright dates
2012-05-06 11:16:44 +02:00
Christian Hohnstaedt
a9b5caa0bc
Bug #3461403 Error when create certificate with CRL distribution point
...
become more userfriendly:
- by indicating the validity with an appropriate
icon in front of AIA, SAN IAN and CDP.
- by checking the validity before creating the real certificate.
- by improving the edit button, to automatically add an "URI"
as type, if the type is missing, or is for example "http"
2012-04-01 12:41:43 +02:00
Christian Hohnstaedt
1ee65645a3
add pathlen only for CA certificates
2010-08-06 19:12:07 +02:00
Christian Hohnstaedt
d1fad54743
Only apply authorityKeyIdentifier if the button is enabled
2010-08-06 08:27:15 +02:00
Christian Hohnstaedt
a7c40be095
After all we are able to convert all extensions to config
...
Add a button to the certificate detila dialog to show the
extensions as OpenSSL config
improve AuthKeyId
Allow selecting public keys for certificates.
This works if it is signed by an other cert.
2010-07-21 17:52:17 +02:00
Christian Hohnstaedt
766192d61c
improve extension to conf functionality
...
get rid of ext_str_new() and ext_str_free()
use d2i() and XX_free() instead
support for unrecognized extensions as DER stream
improve altName: otherName
Support Bitfields: keyUsage and ns_certType
2010-07-20 21:03:29 +02:00
Christian Hohnstaedt
0ec2462715
improve creating templates from cert
...
- enhance parsing of CRL-DP, SAN, IAN and AuthInfoAcc
- add support for CertificatePolicies
2010-07-20 07:28:51 +02:00
Christian Hohnstaedt
de851ed3a9
Changed all header includes to QT4 names and included the correct component name
...
By Andreas Piesk. Thanks!
adapt to HEAD since the patch is based on 0.6.4
drop qt4/Qt include in list of includes during configuration
2010-06-13 11:49:38 +02:00
Christian Hohnstaedt
02de3bfb8c
improve advanced extensions and cert2template functionality
...
- if subAltName, issAltName or crlDist contain commas, put them
on the advanced tab
- regard critical flag for the extensions above
2010-03-14 09:34:25 +01:00
Christian Hohnstaedt
f1c528fcc9
update copyright information
2010-03-11 07:13:48 +01:00
Christian Hohnstaedt
345cdc1083
improve messages and usability
...
- update german translation
2010-02-21 16:24:00 +01:00
Christian Hohnstaedt
76a1a2286c
reduce pathLen to numbers
2009-12-07 09:22:53 +01:00
Christian Hohnstaedt
e293eb1f4f
support for pathlen of 0
2009-12-06 17:50:06 +01:00
Christian Hohnstaedt
7f3ce42d4d
finish certificate to request transformation
...
- Implement feature request [2213094] and [1108304]
2009-12-05 09:07:04 +01:00
Christian Hohnstaedt
9f900ae6f7
update copyright date to 2009 where appropriate
2009-11-24 17:54:21 +01:00
Christian Hohnstaedt
356cab3401
check for duplicate x509 v3 extensions
...
- while taking extensions from the request, the advanced tab
and the other tabs, extensions may be duplicated.
They will be now diplayed in
detail and duplicates are found and shown clearly.
Warning message will allow for modifications.
- Fixes
[ 1881482 ] Copy extensions from request seems to fail
[ 1998815 ] xca adds basic constraint "CA" twice resulting in invalid CA
2009-03-03 21:52:32 +01:00
chris
d1524a44d7
fix auth key id
...
- Fix: [ 2342561 ] Checkbox disabled in template dialog
- Fix: [ 2088468 ] Create self signed w. ext."Authority Key Identifier" fails
- Start fixing
1998815: xca adds basic constraint "CA" twice resulting in invalid CA
2009-02-26 08:09:55 +01:00
chris
dd40eb75f4
documentation update
2008-01-27 23:13:55 +01:00
Christian
0d7a35d126
minor improvement
2007-11-26 21:32:55 +01:00
Christian
71afef8472
add validation button to see all extensions before creating the cert.
2007-11-25 19:23:52 +01:00
Christian
57cdbd7ba4
fix typos and nconf extensions
2007-11-23 22:50:45 +01:00
Christian Hohnstaedt
9b8de0581e
add Advanced settings tab to support extensions in nconf format (as in openssl.conf)
2007-11-23 21:59:18 +01:00
Christian
0195dcf746
Request attributes added
...
- remove extension and attribute tab in details dialog if
no extensions or attributes available
- documentation updated
X509 request attributes (like challange password) can be set and viewed.
2007-05-28 16:33:13 +02:00
Christian
8283d8e7b9
replace copyright notice in source files
...
(copyright and licence itself remain unchanged)
fix configure to set Qt include dir
code justifying
2007-04-12 12:25:28 +02:00
Christian
d4a90be207
replace "include <Qt/" by "include <"
2007-04-11 11:19:22 +02:00
Christian Hohnstaedt
e28e2cc4b2
fix email:copy and issuer:copy for requests
2007-02-12 20:34:19 +01:00
Christian Hohnstaedt
51510e9390
remove sleepycat from licence info
...
add connects for edit and doubleClick
2006-11-14 23:04:16 +01:00
Christian
813e115b8e
Spaces deleted
2006-05-21 10:08:39 +02:00
chris2511
b9278c547f
more QT4
2006-03-22 22:57:08 +00:00
chris2511
13b6bb9e07
more QT4 changes
2006-03-18 12:59:37 +00:00
chris2511
462eac83a3
certificates for QT4
2006-03-12 23:57:24 +00:00
chris2511
9a58b1513c
add V3 extension support for Requests
2005-02-25 23:41:56 +00:00
chris2511
b722ca5655
add "validation" function for editable extensions
2005-02-16 23:23:20 +00:00
chris2511
cd7207e74c
add "edit" buttons for subject/issuer alt. name, crl dist. point and cert. auth. info access for easier data input.
2005-02-15 22:41:46 +00:00
chris2511
0091853a73
changes in building,
...
DSA keys
key format in database changed to contain the public key and
the private one in encrypted form.
2005-02-07 21:56:21 +00:00
chris2511
a9a34847c2
"Authority info Access" enhanced
...
"aia.txt" as oid list added
2004-04-14 23:36:54 +00:00
chris2511
d932fc0e82
Authority info access added
...
Certificate policies pending...
2003-11-30 20:56:56 +00:00
chris2511
0a2612d55e
use AuthKey of the right issuer
2003-08-03 09:35:15 +00:00
chris2511
592ae276a4
critical flag in key usage and extended key usage works now
...
Import of Multiple items is done and works
2003-07-30 14:55:29 +00:00
chris2511
e5e646d022
Authority Key identifier repaired
...
Verion 0.4.2
2003-07-20 21:37:32 +00:00
chris2511
639f2cc26e
time moved back to generalized time
2003-07-08 15:13:28 +00:00
chris2511
37e803e444
This version works already pretty good
2003-07-06 16:28:21 +00:00
chris2511
3f01984ae0
*** empty log message ***
2003-07-04 16:27:57 +00:00
