Commit Graph

412 Commits

Author SHA1 Message Date
Christian Hohnstaedt
f8eda7cd53 Minor improvements for EC keys 2014-10-31 22:25:41 +01:00
Christian Hohnstaedt
8ed9bab7df Support EC key generation on PKCS#11 token
move EC builtin sources into extra class and file
2014-10-31 00:23:39 +01:00
Christian Hohnstaedt
85d9a1ec29 SF Bug #82 Certificate Creation out of Spec
Fix certificate renewal for DSA-with-SHA256
and ECDSA-with-sha256/384/512
by adding those aliases for looking up the correct digest
type by signed certificate.
2014-10-31 00:16:03 +01:00
Christian Hohnstaedt
2bc49fe82f Improve Dropping items onto XCA on MAC OSX 2014-04-13 12:11:16 +02:00
Christian Hohnstaedt
6fabd4014f SF Bug #89 Validating CRL distribution point results in error
Take focus from input field before validating
2014-04-13 12:11:16 +02:00
Christian Hohnstaedt
9710a78592 First preparation of version 1.0.0
update changelog and documentation
avoid warnings about unused variables
2014-04-11 19:29:46 +02:00
Christian Hohnstaedt
1b0730eb0d SF Feature Req. #69 Create "Recent databases..." file menu item
Add the menu, which contains the last 10 opened databases
2014-04-11 19:29:46 +02:00
Christian Hohnstaedt
c28c15495d SF FeatureReq. #73 Add further EC curves supported by OpenSSL
Add support for NID_wap_wsg_idm_ecid_wtls1 - 12 curves
Add support for BrainPool curves if openssl version >= 1.0.2 beta1
2014-04-11 19:29:46 +02:00
Christian Hohnstaedt
4d13fceb3c SF Bug #75 authorityInfoAccess set error
Fix display error OCSP / CA Issuers
2014-04-11 19:29:46 +02:00
Christian Hohnstaedt
a2a5161979 SF Bug #88 Minor spelling error
Certifikate -> Certificate
Revokation -> Revocation
2014-04-11 19:29:45 +02:00
Christian Hohnstaedt
df78e4380e SF Bug #87: Unable to set default key length
Added a "Remember as default" checkbox to the key input dialog.
The default key size is now 2048 for RSA and DSA keys.
2014-04-11 19:29:45 +02:00
Christian Hohnstaedt
8168ca5181 QMessageBox: protect against HTML parsing
The default message box displays the message as HTML
Don't do that.

Thanks to Artur Czyz (artur_czyz at wp.pl) for finding it.
2014-04-11 19:29:45 +02:00
David von Oheimb
9507a6a154 Add more EC curves
Since OpenSSL supports a couple of more EC curves
than currently selectable by XCA.

Signed-off-by: Christian Hohnstaedt <chohnstaedt@innominate.com>
2013-11-22 16:27:50 +01:00
Christian Hohnstaedt
aebc916a7b Overwite extensions from the PKCS#10 request by local extensions
Also avoid error message if a request is self-signed
and no unused key is available, but the private key of the request
is available.
2013-11-22 00:18:16 +01:00
Christian Hohnstaedt
3cbd020bfc Update copyright notes 2013-11-20 09:32:39 +01:00
Christian Hohnstaedt
0105a2c1b7 SF Bug #82 Certificate Creation out of Spec
Add sha256, sha384 and sha512 when compiling against OpenSSL > 1.0.0
Thanks "dvo" for the patch proposal
2013-11-20 07:41:11 +01:00
Christian Hohnstaedt
07603fec1b Add general supporter 2013-11-20 07:29:05 +01:00
Christian Hohnstaedt
4085580cde Add Croatian translation
Translated by "Nevenko Bartolincic"
Thanks!
2013-11-20 07:28:11 +01:00
Christian Hohnstaedt
19e0cf5e60 Don't reset certificate extension to .crt
... after closing the file-name select dialog during certificate export
2012-05-12 09:40:25 +02:00
Christian Hohnstaedt
5d1a2baa0c Don't interpret HTML tags in DN entries
just show clear text
2012-05-08 06:50:40 +02:00
Christian Hohnstaedt
38ed0b60b5 Update Copyright dates 2012-05-06 11:16:44 +02:00
Christian Hohnstaedt
e38dd7758f fix support for MAC OS X 2012-05-06 11:16:41 +02:00
Christian Hohnstaedt
10436bf753 Differentiate between invalid and undefined date
Undefined end dates are described in RFC-5280
Invalid dates should never ever arise in certificates.

Add configuration option to disable the colorization of expired dates.
2012-04-10 13:09:09 +02:00
Christian Hohnstaedt
25ab20a735 Fixup least supported QT version
compiling against QT 4.3 fails already with XCA 0.9.1
Check support of at least QT 4.4
2012-04-06 08:40:28 +02:00
Christian Hohnstaedt
a0baea653b Improve Date displays and input
Make asn1time be based on QDateTime

Support for local time and GMT in
displays and input
2012-04-03 21:07:08 +02:00
Christian Hohnstaedt
a9b5caa0bc Bug #3461403 Error when create certificate with CRL distribution point
become more userfriendly:
 - by indicating the validity with an appropriate
   icon in front of AIA, SAN IAN and CDP.

 - by checking the validity before creating the real certificate.

 - by improving the edit button, to automatically add an "URI"
   as type, if the type is missing, or is for example "http"
2012-04-01 12:41:43 +02:00
Christian Hohnstaedt
5f4d3e1084 Bug #3485139 Exception when creating certificates in passwordless db
Fix key decryption in case of an empty password.
Use "" instead of NULL for EVP_BytesToKey()
2012-03-31 14:28:37 +02:00
Christian Hohnstaedt
323923f00c Add PKCS#11 library searching facility
Also fix dir-separator on W32
2011-07-20 07:21:31 +02:00
Christian Hohnstaedt
813faede06 catch error in driver info when displying pkcs#11 libs 2011-07-16 10:16:07 +02:00
Christian Hohnstaedt
1a3a417bb6 cleanup after closing a db and reset settings before opening it
Since OpenSC is not part of XCA anymore, set the default
PKCS#11 lib on windows to C:\WINDOWS\system32\opensc-pkcs11.dll

Also disable Token menu after closing a database.
2011-07-15 07:18:18 +02:00
Christian Hohnstaedt
e33eb7e076 minor gui fixes 2011-07-08 18:45:39 +02:00
Christian Hohnstaedt
72840d483a fix build system 2011-07-07 18:24:18 +02:00
Christian Hohnstaedt
ab28907db7 support building in extra build dir 2011-07-06 23:38:45 +02:00
Christian Hohnstaedt
6cd878133b improve paste-PEM import 2011-06-22 07:12:24 +02:00
Christian Hohnstaedt
0db95822a4 fix typo 2011-06-21 22:06:46 +02:00
Christian Hohnstaedt
c432a9eb91 update build-system
avoid partial linking, which seems to break OS X builds

no more opensc for windows. There is an opensc installer
for opensc now.
2011-06-20 05:51:03 +02:00
Christian Hohnstaedt
04c704b88f Fix bug [ 3314262 ] Incorrect "Path length" template parameter handling
add special handling of an empty path
when saving the template from NewX509 dialog.
2011-06-11 06:38:33 +02:00
Christian Hohnstaedt
90dadf57cd Fix IPv6 address handling in v3 extensions 2011-06-08 06:19:16 +02:00
Christian Hohnstaedt
642295dc88 update docs and DH parameter label 2011-05-02 06:56:43 +02:00
Christian Hohnstaedt
42eae29dfb re-add paste PEM file to import menu 2011-04-30 10:37:09 +02:00
Christian Hohnstaedt
2502a0531f Feature Request [3286442] Make success/import messges optional 2011-04-30 07:53:39 +02:00
Christian Hohnstaedt
722c20a2b4 improve pasting PEM data 2011-04-30 07:53:39 +02:00
Christian Hohnstaedt
b622e64209 consolidate Password and Pin input dialogs
change storage type of passwords from char[] to QByteArray
Create PwDialog class and drop passWrite and passRead
Create Passwd class derived from QBytearray
move PKCS12 password input to PwDialog
2011-04-30 07:53:26 +02:00
Christian Hohnstaedt
257641be16 improve DH parameter message 2011-04-26 06:33:59 +02:00
Christian Hohnstaedt
54d13f1445 update docs 2011-02-28 20:09:05 +01:00
Christian Hohnstaedt
84998b6ca3 reduce overlong filenames
Thanks Andreas Piesk
2011-02-02 18:12:38 +01:00
Christian Hohnstaedt
49543a322d improve password dialogs 2011-02-01 19:20:30 +01:00
Christian Hohnstaedt
3899b74738 set configured CRL days when creating CRLs 2011-02-01 19:19:27 +01:00
Christian Hohnstaedt
0401eb54ee Improve version display
If the OpenSSL or QT version of the currently used library
differs from the one used during compilation of XCA then
both versions will be shown.
2011-01-28 18:28:21 +01:00
Christian Hohnstaedt
00f1bbb5b3 Make EC parts of XCA depend on OpenSSL config
Some distributions ship an OpenSSL installation without
EC Support.
XCA evaluates the OPENSSL_NO_EC flag to disable EC

Thanks to Andreas Piesk for his patch
2011-01-06 07:01:29 +01:00