xca

X Certificate and Key management

OTHER License

Stars
1.5K
Committers
52

Bot releases are hidden (Show)

xca - XCA 2.7.0 Latest Release

Published by chris2511 about 2 months ago

XCA - X Certificate and Key Management

CMake

Release Notes

Changelog:

A detailled changelog can be found here:

https://hohnstaedt.de/xca/index.php/software/changelog

Documentation

This application is documented in the Help menu and here:

https://www.hohnstaedt.de/xca/index.php/documentation/manual

Build from Source

Dependencies

To build XCA you need:

Linux / Unix

  • Install the dependencies
    # Bookworm
    sudo apt install build-essential libssl-dev pkg-config cmake qttools5-dev python3-sphinxcontrib.qthelp
    # Bullseye
    sudo apt install build-essential libssl-dev pkg-config cmake qttools5-dev python3-sphinx
    # Either Qt5
    sudo apt install qtbase5-dev qttools5-dev-tools libqt5sql5 libqt5help5 qttools5-dev
    # Or Qt6
    sudo apt install qt6-base-dev qt6-tools-dev
    
  • Clone: git clone https://github.com/chris2511/xca.git
  • Configure: cmake -B build xca
  • Make: cmake --build build -j5
  • Install: sudo cmake --install build
  • Or install local and copy later as root: DESTDIR=DEST cmake --install build --prefix /usr

Apple macos

  • Install the dependencies
    xcode-select --install
    brew install openssl@3 qt6 python3 cmake
    pip3 install sphinx
    
  • Clone: git clone https://github.com/chris2511/xca.git
  • Configure: cmake -B build xca
  • Make: cmake --build build -j5
  • Build the DMG: cd build && cpack
  • Build the PKG: cd build && cpack -G productbuild

XCA can be used with Xcode after initializing the directory with:
cmake -G Xcode -B .

Windows

  • Install the dependencies

    • Install Python for windows from the store or https://www.python.org/downloads/windows/
    • Install OpenSSL from here: https://slproweb.com/download/Win64OpenSSL-3_1_5.msi and verify the sha256 from https://github.com/slproweb/opensslhashes/blob/master/win32_openssl_hashes.json
    • To install the Qt libraries, cmake and the MinGW compiler aqtinstall is used.
      Sphinx is used to generate the documentation
      pip3 install sphinx aqtinstall
      
    • Add the PATH shown by pip to your PATH
    • Install Qt, cmake and the MinGW toolchain
      aqt install-qt windows desktop 6.6.3 win64_mingw
      aqt install-tool windows desktop tools_mingw90 qt.tools.win64_mingw900
      aqt install-tool windows desktop tools_vcredist qt.tools.vcredist_64
      
    • If 7z is missing, install it from the store. 7-Zip File Manager (unofficial) or from 7-zip.org
    • Install the "vcredist\vcredist_64.exe"
    • Add cmake, MinGW, OpenSSL and Qt6 to your Path
      %USERPROFILE%\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.10_qbz5n2kfra8p0\LocalCache\local-packages\Python310\Scripts;
      %USERPROFILE%\AppData\Local\Microsoft\WindowsApps;
      %USERPROFILE%\Tools\CMake_64\bin;
      %USERPROFILE%\Tools\mingw_64\bin;
      %USERPROFILE%\6.6.3\mingw_64\bin;
      
    • Create CMAKE_PREFIX_PATH environment variable:
      %USERPROFILE%\6.6.3\mingw_64\lib\cmake
      
    • Install https://wixtoolset.org/releases/ if you want to create the MSI installer
  • Clone: git clone https://github.com/chris2511/xca.git

  • Configure: cmake -B build -G "MinGW Makefiles" xca

  • Make: cmake --build build -j5

  • Create the Portable App: cmake --build build -t install

  • Build the MSI installer (and the Portable App): cd build ; cpack

SQL Remote Database Drivers

MySQL plugins are not shipped with QT anymore because of license issues.

Linux

  • Debian: libqt6sql6-psql libqt6sql6-mysql or libqt6sql6-odbc.
  • RPM: libqt6-database-plugin-pgsql libqt6-database-plugin-mysql libqt6-database-plugin-odbc
    They should pull in all necessary dependencies.

Apple macos

  • PostgreSQL: Install the https://postgresapp.com/
  • ODBC: It requires the /usr/local/opt/libiodbc/lib/libiodbc.2.dylib.
    When installing unixodbc via brew the library must be symlinked from
    /opt/homebrew/Cellar/libiodbc/3.52.16/lib/libiodbc.2.dylib
  • MariaDB: Probably via ODBC ?

Windows

xca - XCA 2.6.0

Published by chris2511 8 months ago

XCA -- X Certificate and Key Management

CMake

Release Notes

Changelog:

A detailled changelog can be found here:

https://hohnstaedt.de/xca/index.php/software/changelog

Documentation

This application is documented in the Help menu and here:

https://www.hohnstaedt.de/xca/index.php/documentation/manual

xca - XCA 2.5.0

Published by chris2511 about 1 year ago

XCA -- X Certificate and Key Management

CMake

Release Notes

  • The latest release is 2.5.0
  • Drop support for Qt4, old XCA < 2.0.0 databases and OpenSSL < 1.1.0
  • Add Support for Qt6 and OpenSSL 3.x
  • Switch from autotools/qmake to cmake
  • Fix a lot of bugs (and probably added some new)
  • Add translations for Indonesian, Persian and Bulgarian
  • Please report issues on github https://github.com/chris2511/xca/issues

Changelog:

A detailled changelog can be found here:

https://hohnstaedt.de/xca/index.php/software/changelog

Documentation

This application is documented in the Help menu and here:

https://www.hohnstaedt.de/xca/index.php/documentation/manual

Build from Source

Dependencies

To build XCA you need:

Linux / Unix

  • Install the dependencies
    # Bookworm
    sudo apt install build-essential libssl-dev pkg-config qtbase5-dev qttools5-dev-tools libqt5sql5 libqt5help5 cmake qttools5-dev python3-sphinxcontrib.qthelp
    # Bullseye
    sudo apt install build-essential libssl-dev pkg-config qtbase5-dev qttools5-dev-tools libqt5sql5 libqt5help5 cmake qttools5-dev python3-sphinx
    
  • Clone: git clone https://github.com/chris2511/xca.git
  • Configure: cmake -B build xca
  • Make: cmake --build build -j5
  • Install: sudo cmake --install build
  • Or install local and copy later as root: DESTDIR=DEST cmake --install build --prefix /usr

Apple macos

  • Install the dependencies
    xcode-select --install
    brew install openssl@3 qt6 python3 cmake
    pip3 install sphinx
    
  • Clone: git clone https://github.com/chris2511/xca.git
  • Configure: cmake -B build xca
  • Make: cmake --build build -j5
  • Build the DMG: cd build && cpack
  • Build the PKG: cd build && cpack -G productbuild

XCA can be used with Xcode after initializing the directory with:
cmake -G Xcode -B .

Windows

  • Install the dependencies

    • Install Python for windows from the store or https://www.python.org/downloads/windows/
    • Install OpenSSL from here: https://slproweb.com/download/Win64OpenSSL-3_0_8.msi and verify the sha256 from https://github.com/slproweb/opensslhashes/blob/master/win32_openssl_hashes.json
    • To install the Qt libraries, cmake and the MinGW compiler aqtinstall is used.
      Sphinx is used to generate the documentation
      pip3 install sphinx aqtinstall
      
    • Add the PATH shown by pip to your PATH
    • Install Qt, cmake and the MinGW toolchain
      aqt install-qt windows desktop 6.6.0 win64_mingw
      aqt install-tool windows desktop tools_mingw90 qt.tools.win64_mingw900
      aqt install-tool windows desktop tools_vcredist qt.tools.vcredist_64
      
    • If 7z is missing, install it from the store. 7-Zip File Manager (unofficial) or from 7-zip.org
    • Install the "vcredist\vcredist_64.exe"
    • Add cmake, MinGW, OpenSSL and Qt5 to your Path
      %USERPROFILE%\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.10_qbz5n2kfra8p0\LocalCache\local-packages\Python310\Scripts;
      %USERPROFILE%\AppData\Local\Microsoft\WindowsApps;
      %USERPROFILE%\Tools\CMake_64\bin;
      %USERPROFILE%\Tools\mingw_64\bin;
      %USERPROFILE%\5.15.2\mingw_64\bin;
      
    • Create CMAKE_PREFIX_PATH environment variable:
      %USERPROFILE%\6.6.0\mingw_64\lib\cmake
      
    • Install https://wixtoolset.org/releases/ if you want to create the MSI installer
  • Clone: git clone https://github.com/chris2511/xca.git

  • Configure: cmake -B build -G "MinGW Makefiles" xca

  • Make: cmake --build build -j5

  • Create the Portable App: cmake --build build -t install

  • Build the MSI installer (and the Portable App): cd build ; cpack

SQL Remote Database Drivers

MySQL plugins are not shipped with QT anymore because of license issues.

Linux

  • Debian: libqt6sql6-psql libqt6sql6-mysql or libqt6sql6-odbc.
  • RPM: libqt6-database-plugin-pgsql libqt6-database-plugin-mysql libqt6-database-plugin-odbc
    They should pull in all necessary dependencies.

Apple macos

  • PostgreSQL: Install the https://postgresapp.com/
  • ODBC: It requires the /usr/local/opt/libiodbc/lib/libiodbc.2.dylib.
    When installing unixodbc via brew the library must be symlinked from
    /opt/homebrew/Cellar/libiodbc/3.52.16/lib/libiodbc.2.dylib
  • MariaDB: Probably via ODBC ?

Windows

xca - XCA 2.4.0

Published by chris2511 over 3 years ago

XCA -- X Certificate and Key Management

Build Status

Release Notes

  • The latest release is 2.4.0
  • Most notable changes
    • Add support for Ed25519 keys
    • Add commandline support (e.g. generate CRL)
  • Fix a lot of bugs
  • Since version 2 of XCA the database format changed to SQL
    Don't try to open it with older versions of XCA (< 1.4.0).
    They will corrupt the database.
  • Please report issues on github https://github.com/chris2511/xca/issues

Changelog:

A detailled changelog can be found here:

http://hohnstaedt.de/xca/index.php/software/changelog

Documentation

This application is documented in the Help menu and here:

https://www.hohnstaedt.de/xca/index.php/documentation/manual

xca - XCA 2.3.0

Published by chris2511 over 4 years ago

XCA -- X Certificate and Key Management

Build Status

Release Notes

  • The latest release is 2.3.0
  • This is a minor release, fixing a couple of bugs and adding some
    minor features.
  • Since version 2 of XCA the database format changed to SQL
    Don't try to open it with older versions of XCA (< 1.4.0).
    They will corrupt the database.
  • Please report issues on github https://github.com/chris2511/xca/issues

Changelog:

A detailled changelog can be found here:

http://hohnstaedt.de/xca/index.php/software/changelog

Documentation

This application is documented in the Help menu and here:

https://www.hohnstaedt.de/xca/index.php/documentation/manual

xca - XCA 2.2.1

Published by chris2511 over 4 years ago

XCA -- X Certificate and Key Management

Release Notes

  • This is a patch release, fixing Issue #159: "Opening existing database"
    which prevented the current version opening databases of XCA 2.1.2
  • Since version 2 of XCA the database format changed to SQL
    Don't try to open it with older versions of XCA (< 1.4.0).
    They will corrupt the database.
  • Please report issues on github https://github.com/chris2511/xca/issues

Changelog:

A detailled changelog can be found here:

http://hohnstaedt.de/xca/index.php/software/changelog

xca - XCA 2.2.0

Published by chris2511 over 4 years ago

XCA -- X Certificate and Key Management

Release Notes

  • This is a minor release, addressing 21 bugs and feature requests
  • Most notable improvements:
    1. Support concurrent database access
    2. Support ODBC database driver and Microsoft SQL Server
    3. Switch to MSI installer on Windows
  • Since version 2 of XCA the database format changed to SQL
    Don't try to open it with older versions of XCA (< 1.4.0).
    They will corrupt the database.
  • Please report issues on github https://github.com/chris2511/xca/issues

Changelog:

A detailled changelog can be found here:

http://hohnstaedt.de/xca/index.php/software/changelog

xca - XCA 2.1.2

Published by chris2511 almost 6 years ago

XCA -- X Certificate and Key Management

Release Notes

  • This is a patch release fixing some minor bugs
  • Make a backup copy of your database!
  • Since version 2 of XCA the database format changed to SQL(ite)
  • Don't try to open it with older versions of XCA (< 1.4.0). They will corrupt the database.
  • Please report issues on github https://github.com/chris2511/xca/issues

Changelog:

http://hohnstaedt.de/xca/index.php/software/changelog

xca - XCA 2.1.1

Published by chris2511 about 6 years ago

XCA -- X Certificate and Key Management

Release Notes

  • This is a patch release fixing some minor bugs
  • Make a backup copy of your database!
  • Since version 2 of XCA the database format changed to SQL(ite)
  • Don't try to open it with older versions of XCA (< 1.4.0). They will corrupt the database.
  • Please report issues on github https://github.com/chris2511/xca/issues

Changelog:

http://hohnstaedt.de/xca/index.php/software/changelog

xca - XCA 2.1.0

Published by chris2511 about 6 years ago

XCA -- X Certificate and Key Management

Release Notes

  • Make a backup copy of your database!
  • Since version 2 of XCA the database format changed to SQL(ite)
  • Don't try to open it with older versions of XCA (< 1.4.0). They will corrupt the database.
  • The "Undelete" feature is currently not implemented. If an item gets deleted, it will be lost!
  • Please report issues on github https://github.com/chris2511/xca/issues

Changelog:

http://hohnstaedt.de/xca/index.php/software/changelog

xca - XCA 2.0.1

Published by chris2511 over 6 years ago

XCA -- X Certificate and Key Management

Release Notes

  • Make a backup copy of your database!
  • Since version 2 of XCA the database format changed to SQL(ite)
  • Don't try to open it with older versions of XCA (< 1.4.0). They will corrupt the database.
  • The "Undelete" feature is currently not implemented. If an item gets deleted, it will be lost!
  • Please report issues on github https://github.com/chris2511/xca/issues

Changelog:

http://hohnstaedt.de/xca/index.php/software/changelog

xca - XCA 2.0.0

Published by chris2511 over 6 years ago

XCA -- X Certificate and Key Management

Release Notes

  • Make a backup copy of your database!
  • This version completely changes the database format to SQL(ite)
  • Don't try to open it with older versions of XCA (< 1.4.0). They will corrupt the database.
  • The "Undelete" feature is currently not implemented. If an item gets deleted, it will be lost!
  • Please report issues on github https://github.com/chris2511/xca/issues

Changelog:

http://hohnstaedt.de/xca/index.php/software/changelog

xca - XCA 2.0.0-pre04

Published by chris2511 over 6 years ago

XCA -- X Certificate and Key Management

This is a pre-release. Please test it and report any issues here - Thanks!

Release Notes

  • Make a backup copy of your database!
  • This version completely changes the database format to SQL(ite)
  • Don't try to open it with older versions of XCA (< 1.4.0). They will corrupt the database.
  • The "Undelete" feature is currently not implemented. If an item gets deleted, it will be lost!
  • Please report issues on github https://github.com/chris2511/xca/issues

Changelog:

http://hohnstaedt.de/xca/index.php/software/changelog

xca - XCA 2.0.0-pre03

Published by chris2511 over 6 years ago

XCA -- X Certificate and Key Management

This is a pre-release. Please test it and report any issues here - Thanks!

Release Notes

  • Make a backup copy of your database!
  • This version completely changes the database format to SQL(ite)
  • Don't try to open it with older versions of XCA (< 1.4.0). They will corrupt the database.
  • The "Undelete" feature is currently not implemented. If an item gets deleted, it will be lost!
  • Please report issues on github https://github.com/chris2511/xca/issues

Changelog:

http://hohnstaedt.de/xca/index.php/software/changelog

xca - XCA 2.0.0-pre02

Published by chris2511 over 6 years ago

XCA -- X Certificate and Key Management

This is a pre-release. Please test it and report any issues here - Thanks!

Release Notes

  • IMPORTANT: After the windows installation, you need to move the "qsqlite.dll" into the subdirectory "sqldrivers" in C:\Program Files\xca, which you have to create.
  • Make a backup copy of your database!
  • This version completely changes the database format to SQL(ite)
  • Don't try to open it with older versions of XCA (< 1.4.0). They will corrupt the database.
  • The "Undelete" feature is currently not implemented. If an item gets deleted, it will be lost!
  • Send bugs to [email protected]

Changelog:

http://hohnstaedt.de/xca/index.php/software/changelog

xca - XCA 2.0.0-pre01

Published by chris2511 over 6 years ago

XCA -- X Certificate and Key Management

Release Notes

  • Make a backup copy of your database!
  • This version completely changes the database format to SQL(ite)
  • Don't try to open it with older versions of XCA (< 1.4.0). They will corrupt the database.
  • The "Undelete" feature is currently not implemented. If an item gets deleted, it will be lost!
  • Send bugs to [email protected]

Changelog:

xca 2.0.0-pre01

  • Close GitHub Bug #5: Exporting a private key results
    in too-permissive permissions
  • Close GitHub Bug #4: Workaround QT bug of editing in QDateTimeEdit
  • Fix display of dates in the Certificate details (local time displayed a GMT)
  • The internal name is not neccessarily unique anymore and can be edited
    in the details dialog as well as the comment.
  • CSR signing is now statically stored in the database and the comment
    of the issued certificate.
  • Private keys in the database are PKCS#8 encrypted and can be exported
    and decrypted without XCA.
  • No more incrementing serials. Only unique random serial numbers.
  • "xca_db_stat" application removed. Use the SQLite3 browser "sqlitebrowser".
  • "xca extract" functionality removed. SQL views may be used instead.
  • Each item may be commented. XCA itself comments important events in the item.
  • Each item knows its time and origin of appearance.
  • Change database format to SQL(ite) and support MySQL and PostgreSQL.
xca - XCA 1.4.1

Published by chris2511 over 6 years ago

XCA -- X Certificate and Key Management

Release Notes

Changelog:

xca 1.4.1

  • Replace links to XCA on Sourceforge in the software and
    documentation by links to my Site.

xca 1.4.1-pre02

  • SF Bug #122 isValid() tried to convert the serial to 64 bit
  • Beautify mandatory distinguished name entry errors
  • Support dragging certificates and other items as PEM text
  • Show User settings and installation path in the about dialog

xca 1.4.1-pre01

  • Remove SPKAC support. Netscape is not of this world anymore.
  • SF bug #124 Wrong assumptions about slots returned by PKCS11 library
  • Cleanup and improve the OID text files, remove senseless aia.txt
  • Update HTML documentation
  • Refine and document Entropy gathering
  • Indicate development and release version by git commit hash
  • Fix dumping private keys during "Dump database"
  • Fix Null pointer exception when importing PKCS#12 with OpenSSL 1.1.0
  • SF Bug #110 Exported private key from 4096 bit SSH key is wrong
  • SF Bug #109 Revoked.png isn't a valid image
  • SF Bug #121 CA serial number is ignored in hierarchical view
  • Improve speed of Bulk import.
  • Fix starting xca with a database as first arg

xca 1.4.0

  • Update OpenSSL version for MacOSX and W32 to 1.1.0g
  • Change default hash to SHA-256 and
    add a warning if the default hash algorithm is SHA1 or less
  • Switch to Qt5 for Windows build and installation
  • Do not apply the default template when creating a similar cert
  • Close SF #120 Crash when importing CA certificate
  • Close SF #116 db_x509.cpp:521: Mismatching allocation and deallocation
  • Add support for OpenSSL 1.1 (by Patrick Monnerat)
  • Support generating an OpenSSL "index.txt" (by Adam Dawidowski)
  • Thales nCipher key generation changes for EC and DSA keys
  • Add Slovak translation
xca - XCA 1.3.1

Published by chris2511 over 6 years ago

Release Notes

Changelog:

xca 1.3.1

  • Fix endless loop while searching for a signer of a CRL
xca - XCA 1.3.0

Published by chris2511 over 6 years ago

Release Notes

Changelog:

xca 1.3.0

  • Update to OpenSSL 1.0.2d for Windows and MAC
  • SF Bug #105 1.2.0 OS X Retina Display Support
  • Digitaly sign Windows and MAC binaries with a valid certificate
  • Refactor the context menu. Exporting many selected items the clipboard or a PEM file now works. Certificate renewal and revocation now be performed on a batch of certificates.
  • Feat. Reg. #83 Option to revoke old certificate when renewing
  • Refactor revocation handling. All revocation information is with the CA and may be modified. certificates may now be deleted from the database
  • Support nameConstraints, policyMappings, InhibitAnyPolicy, PolicyConstraint (OSCP)noCheck when transforming certificates to templates or OpenSSL configs
  • Fix SF Bug #104 Export to template introduces spaces
  • Add option for disabling legacy Netscape extensions
  • Support exporting SSH2 public key to the clipboard
  • SF Bug #102 Weak entropy source used for key generation: /dev/random, mouse/kbd entropy, token RNG
  • SF Feat. Req. #80 Create new certificate, on existing certificate, same for requests
  • Add Cert/Req Column for Signature Algorithm
  • SF Feat. Req. #81 Show key size in New Certificate dialog
  • Distinguish export from transform: Export writes to an external file, Transform generates another XCA item
xca - XCA 1.3.2

Published by chris2511 over 6 years ago

Release Notes

Changelog:

xca 1.3.2

  • Gentoo Bug #562288 linking fails
  • Add OID resolver, move some Menu items to "Extra"
  • SF. Bug. #81 Make xca qt5 compatible
  • SF. Bug. #107 error:0D0680A8:asn1 encoding
  • Don't validate notBefore and notAfter if they are disabled.