XCA -- X Certificate and Key Management

Release Notes

• Make a backup copy of your database!
• This version completely changes the database format to SQL(ite)
• Don't try to open it with older versions of XCA (< 1.4.0). They will corrupt the database.
• The "Undelete" feature is currently not implemented. If an item gets deleted, it will be lost!
• Please report issues on github https://github.com/chris2511/xca/issues

Changelog:

http://hohnstaedt.de/xca/index.php/software/changelog

XCA -- X Certificate and Key Management

This is a pre-release. Please test it and report any issues here - Thanks!

Release Notes

• Make a backup copy of your database!
• This version completely changes the database format to SQL(ite)
• Don't try to open it with older versions of XCA (< 1.4.0). They will corrupt the database.
• The "Undelete" feature is currently not implemented. If an item gets deleted, it will be lost!
• Please report issues on github https://github.com/chris2511/xca/issues

Changelog:

http://hohnstaedt.de/xca/index.php/software/changelog

XCA -- X Certificate and Key Management

This is a pre-release. Please test it and report any issues here - Thanks!

Release Notes

• Make a backup copy of your database!
• This version completely changes the database format to SQL(ite)
• Don't try to open it with older versions of XCA (< 1.4.0). They will corrupt the database.
• The "Undelete" feature is currently not implemented. If an item gets deleted, it will be lost!
• Please report issues on github https://github.com/chris2511/xca/issues

Changelog:

http://hohnstaedt.de/xca/index.php/software/changelog

XCA -- X Certificate and Key Management

This is a pre-release. Please test it and report any issues here - Thanks!

Release Notes

• IMPORTANT: After the windows installation, you need to move the "qsqlite.dll" into the subdirectory "sqldrivers" in C:\Program Files\xca, which you have to create.
• Make a backup copy of your database!
• This version completely changes the database format to SQL(ite)
• Don't try to open it with older versions of XCA (< 1.4.0). They will corrupt the database.
• The "Undelete" feature is currently not implemented. If an item gets deleted, it will be lost!
• Send bugs to [email protected]

Changelog:

http://hohnstaedt.de/xca/index.php/software/changelog

XCA -- X Certificate and Key Management

Release Notes

• Make a backup copy of your database!
• This version completely changes the database format to SQL(ite)
• Don't try to open it with older versions of XCA (< 1.4.0). They will corrupt the database.
• The "Undelete" feature is currently not implemented. If an item gets deleted, it will be lost!
• Send bugs to [email protected]

Changelog:

xca 2.0.0-pre01

• Close GitHub Bug #5: Exporting a private key results in too-permissive permissions
• Close GitHub Bug #4: Workaround QT bug of editing in QDateTimeEdit
• Fix display of dates in the Certificate details (local time displayed a GMT)
• The internal name is not neccessarily unique anymore and can be edited in the details dialog as well as the comment.
• CSR signing is now statically stored in the database and the comment of the issued certificate.
• Private keys in the database are PKCS#8 encrypted and can be exported and decrypted without XCA.
• No more incrementing serials. Only unique random serial numbers.
• "xca_db_stat" application removed. Use the SQLite3 browser "sqlitebrowser".
• "xca extract" functionality removed. SQL views may be used instead.
• Each item may be commented. XCA itself comments important events in the item.
• Each item knows its time and origin of appearance.
• Change database format to SQL(ite) and support MySQL and PostgreSQL.

XCA -- X Certificate and Key Management

Release Notes

• Make a backup copy of your database!
• Send bugs to [email protected]

Changelog:

xca 1.4.1

• Replace links to XCA on Sourceforge in the software and documentation by links to my Site.

xca 1.4.1-pre02

• SF Bug #122 isValid() tried to convert the serial to 64 bit
• Beautify mandatory distinguished name entry errors
• Support dragging certificates and other items as PEM text
• Show User settings and installation path in the about dialog

xca 1.4.1-pre01

• Remove SPKAC support. Netscape is not of this world anymore.
• SF bug #124 Wrong assumptions about slots returned by PKCS11 library
• Cleanup and improve the OID text files, remove senseless aia.txt
• Update HTML documentation
• Refine and document Entropy gathering
• Indicate development and release version by git commit hash
• Fix dumping private keys during "Dump database"
• Fix Null pointer exception when importing PKCS#12 with OpenSSL 1.1.0
• SF Bug #110 Exported private key from 4096 bit SSH key is wrong
• SF Bug #109 Revoked.png isn't a valid image
• SF Bug #121 CA serial number is ignored in hierarchical view
• Improve speed of Bulk import.
• Fix starting xca with a database as first arg

xca 1.4.0

• Update OpenSSL version for MacOSX and W32 to 1.1.0g
• Change default hash to SHA-256 and add a warning if the default hash algorithm is SHA1 or less
• Switch to Qt5 for Windows build and installation
• Do not apply the default template when creating a similar cert
• Close SF #120 Crash when importing CA certificate
• Close SF #116 db_x509.cpp:521: Mismatching allocation and deallocation
• Add support for OpenSSL 1.1 (by Patrick Monnerat)
• Support generating an OpenSSL "index.txt" (by Adam Dawidowski)
• Thales nCipher key generation changes for EC and DSA keys
• Add Slovak translation

Release Notes

• Make a backup copy of your database!
• Send bugs to [email protected]

Changelog:

xca 1.3.1

• Fix endless loop while searching for a signer of a CRL

Release Notes

• Make a backup copy of your database!
• Send bugs to [email protected]

Changelog:

xca 1.3.0

• Update to OpenSSL 1.0.2d for Windows and MAC
• SF Bug #105 1.2.0 OS X Retina Display Support
• Digitaly sign Windows and MAC binaries with a valid certificate
• Refactor the context menu. Exporting many selected items the clipboard or a PEM file now works. Certificate renewal and revocation now be performed on a batch of certificates.
• Feat. Reg. #83 Option to revoke old certificate when renewing
• Refactor revocation handling. All revocation information is with the CA and may be modified. certificates may now be deleted from the database
• Support nameConstraints, policyMappings, InhibitAnyPolicy, PolicyConstraint (OSCP)noCheck when transforming certificates to templates or OpenSSL configs
• Fix SF Bug #104 Export to template introduces spaces
• Add option for disabling legacy Netscape extensions
• Support exporting SSH2 public key to the clipboard
• SF Bug #102 Weak entropy source used for key generation: /dev/random, mouse/kbd entropy, token RNG
• SF Feat. Req. #80 Create new certificate, on existing certificate, same for requests
• Add Cert/Req Column for Signature Algorithm
• SF Feat. Req. #81 Show key size in New Certificate dialog
• Distinguish export from transform: Export writes to an external file, Transform generates another XCA item

Release Notes

• Make a backup copy of your database!
• Send bugs to [email protected]

Changelog:

xca 1.3.2

• Gentoo Bug #562288 linking fails
• Add OID resolver, move some Menu items to "Extra"
• SF. Bug. #81 Make xca qt5 compatible
• SF. Bug. #107 error:0D0680A8:asn1 encoding
• Don't validate notBefore and notAfter if they are disabled.

Release Notes

• Make a backup copy of your database!
• Send bugs to [email protected]

Changelog:

xca 1.4.0

• Update OpenSSL version for MacOSX and W32 to 1.1.0g
• Change default hash to SHA-256 and add a warning if the default hash algorithm is SHA1 or less
• Switch to Qt5 for Windows build and installation
• Do not apply the default template when creating a similar cert
• Close SF #120 Crash when importing CA certificate
• Close SF #116 db_x509.cpp:521: Mismatching allocation and deallocation
• Add support for OpenSSL 1.1 (by Patrick Monnerat)
• Support generating an OpenSSL "index.txt" (by Adam Dawidowski)
• Thales nCipher key generation changes for EC and DSA keys
• Add Slovak translation