gnoMint is a tool for easily creating and managing certification authorities. It provides fancy visualization of all the pieces of information that pertain to a CA, such as x509 certificates, CSRs, and CRLs. gnoMint is currently capable of managing a CA that emits certificates that are able to authenticate people or machines in VPNs (IPSec or other protocols), secure HTTP communications with SSL/TLS, authenticate and cipher HTTP communications through Web-client certificates, and sign or crypt email messages.
| Tags | Security Cryptography Systems Administration |
|---|---|
| Licenses | GPLv3 |
| Operating Systems | OS Independent |
| Implementation | C |
| Translations | Spanish French German Brazilian Portuguese Swedish Italian |
Recent releases


Changes: This is the first stable release, and includes some bugfixes and improvements. It has a new full Russian translation. It has a forgotten crlgen function to the gnomint-cli text-based interface. It fixes compilation with GnuTLS 2.8.0. The program now checks if the expiring date of a new cert is after the CA expiration date, setting the new cert expiration date to the CA expiration date in that case.


Changes: This version includes a major code clean-up and some interesting new features: OpenSSL-generated CA import, updated translations from launchpad.net including a new Brazilian Portuguese translation, a new, more secure cyphering method (based on AES) for protecting passwords and private keys (the program is fully compatible with the old method), and a new graphic and fully functional toolbar. Some bugs have been fixed, including an architecture-dependent function that could give some problems architectures other than x86.


Changes: This version adds a minor patch, fixing a little bug that made gnomint-cli not compile on some systems such as OpenSuse v11.


Changes: This version adds a full brand-new command-line interface: gnomint-cli. This interface allows any action over a gnoMint database, getting its orders through standard input. gnoMint is now fully scriptable. For example, you could create a cron task for generating CRLs at scheduled times, or create a bunch of new certificates from a list of employees.


Changes: This version can import whole OpenSSL-generated CAs, PKCS#8 files, and PKCS#12 files. It adds an Italian and an initial German translation. Some bugs have been fixed.