The ICT-Hotlist. Information about:XCA the Certificate and Key management tool by Christian Hohnstädt [Johan van Soest]

ICT-Hotlist Topic

XCA the Certificate and Key management tool by Christian Hohnstädt

Features

Start your own PKI and create all kinds of certificates, requests or CRLs

Import and export them in any format like PEM, DER, PKCS#7, PKCS#12

Use them for your IPsec, OpenVPN, HTTPs or any other certificate based setup

Manage your Smart-Cards via PKCS#11 interface

Export certificates and requests to a OpenSSL config file

Create Subject- and/or Extension- templates to ease issuing similar certs

Convert existing certificates or requests to templates

Get the broad support of x509v3 extensions as flexible as OpenSSL but user friendlier

Adapt the Columns to have your important information at a glance

Standards

PKCS#1 unencrypted RSA key storage format.

PKCS#7 Collection of public certificates.

PKCS#8 Encrypted private key format for RSA DSA EC keys.

PKCS#10 Certificate signing request.

PKCS#11 Security token / Smart card / HSM access.

PKCS#12 Certificate, Private key and probably a CA chain.

File formats

DER Distinguished Encoding Rules - Binary format

PEM Privacy Enhanced Mail - Text format

SSH2 Public key

Usability

Templates for common subjects and extensions.

All subject entries, x509v3 extensions, and other properties can be displayed in separate columns.

Customizable subject entries

Drag & Drop support

Many certificate setting sanity checks

Easy association and transformation between keys, certificates and requests

Download

https://hohnstaedt.de/xca

You may vote your opinion about this article:

Topic created	:	28-04-2019
Topic last edited	:	16-02-2020

Scripts and programming examples disclaimer

Unless stated otherwise, the script sources and programming examples provided are copyrighted freeware. You may modify them, as long as a reference to the original code and hyperlink to the source page is included in the modified code and documentation. However, it is not allowed to publish (copies of) scripts and programming examples on your own site, blog, vlog, or distribute them on paper or any other medium, without prior written consent.
Many of the techniques used in these scripts, including but not limited to modifying the registry or system files and settings, impose a risk of rendering the Operating System inoperable and loss of data. Make sure you have verified full backups and the associated restore software available before running any script or programming example. Use these scripts and programming examples entirely at your own risk. All liability claims against the author in relation to material or non-material losses caused by the use, misuse or non-use of the information provided, or the use of incorrect or incomplete information, are excluded. All content is subject to change and provided without obligation.