Graphical certification authority
Graphical certification authority is an interface for managing RSA and DSA keys, certificates, certificate signing requests, revocation lists and templates. It uses the OpenSSL and Qt4 libraries. Certificates and requests can be created and signed and many x509v3 extensions can be added. XCA supports multiple root and intermediate Certificate authorities. The CAs can be used to create CRLs and extend certificates. The following file-formats are supported: PEM, DER, PKCS#7, PKCS#8, PKCS#10, PKCS#12, SPKAC.
| Tags | Security Cryptography |
|---|---|
| Licenses | BSD Revised |
| Operating Systems | POSIX BSD FreeBSD Mac OS X Linux Windows Windows Windows Windows |
| Implementation | C++ |
Recent releases
- 16 Aug 2007 02:44
Changes: This version fixes an issue where some CA signed certificates were not sorted correctly below that CA. Malformed certificates no longer cause a crash. The string encoding rules for the distinguished name can now be set in the options dialog and PKCS#10 attributes can be set and inspected.
- 22 May 2007 04:40
Changes: This release adds an options dialog, where the default hash, mandatory distinguished name entries, and multiple key use may be adjusted. The representation of the internal names has changed to UTF-8.
- 09 Apr 2007 09:38
Changes: This release has undelete functionality and autodetection of imported PEM files. The date settings during certificate generation were fixed, and long distinguished names are displayed completely now. Circular signed certificates are recognized and handled properly.
- 02 Feb 2007 02:17
Changes: The application was ported to the new API of Qt4 and the database format was changed. CRL settings can be changed, and the x509v3 extension input dialog is more user-friendly. PKCS#10 requests may also contain v3 extensions that can be inherited when signing them. The public-keys were extended by DSA keys and they may be encrypted with different passwords in the DB. There is now an export function to dump the whole database into a directory tree for backup purposes or usage by OpenSSL on the command line.
- 16 Jul 2004 11:08
Changes: This release supports multiple databases. PKCS#12 importation has been improved. The documentation is now part of the application and is available via the new menu bar.
- All comments
Recent commentsGood job!
First tool I've found that helps me with this job!
Excellent program
This program has a ton potential. The interface needs a bit of refining and some ease of use issues but other than that its excellent.