ICT-Hotlist Topic

Back to the ICT-Hotlist...

Don't miss latest updates Follow

@WebHalla

XCA the Certificate and Key management tool by Christian Hohnstädt

By Johan van Soest.

Published : 2019-05-03.

Last updated : 2020-02-16.

This application is intended for creating and managing X.509 certificates, certificate requests, RSA, DSA and EC private keys, Smartcards and CRLs. Everything that is needed for a CA is implemented. All CAs can sign sub-CAs recursively. These certificate chains are shown clearly.
For an easy company-wide use there are customiseable templates that can be used for certificate or request generation.
All cryptographic data is stored in a SQL database. SQLite, MySQL (MariaDB) and PostgreSQL databases are supported.

Features

Start your own PKI and create all kinds of certificates, requests or CRLs
Import and export them in any format like PEM, DER, PKCS#7, PKCS#12
Use them for your IPsec, OpenVPN, HTTPs or any other certificate based setup
Manage your Smart-Cards via PKCS#11 interface
Export certificates and requests to a OpenSSL config file
Create Subject- and/or Extension- templates to ease issuing similar certs
Convert existing certificates or requests to templates
Get the broad support of x509v3 extensions as flexible as OpenSSL but user friendlier
Adapt the Columns to have your important information at a glance

Standards

PKCS#1 unencrypted RSA key storage format.
PKCS#7 Collection of public certificates.
PKCS#8 Encrypted private key format for RSA DSA EC keys.
PKCS#10 Certificate signing request.
PKCS#11 Security token / Smart card / HSM access.
PKCS#12 Certificate, Private key and probably a CA chain.

File formats

DER Distinguished Encoding Rules - Binary format
PEM Privacy Enhanced Mail - Text format
SSH2 Public key

Usability

Templates for common subjects and extensions.
All subject entries, x509v3 extensions, and other properties can be displayed in separate columns.
Customizable subject entries
Drag & Drop support
Many certificate setting sanity checks
Easy association and transformation between keys, certificates and requests

Download

https://hohnstaedt.de/xca

You may vote your opinion about this article:

Scripts and programming examples disclaimer

Unless stated otherwise, the script sources and programming examples provided are copyrighted freeware. You may modify them, as long as a reference to the original code and hyperlink to the source page is included in the modified code and documentation. However, it is not allowed to publish (copies of) scripts and programming examples on your own site, blog, vlog, or distribute them on paper or any other medium, without prior written consent.
Many of the techniques used in these scripts, including but not limited to modifying the registry or system files and settings, impose a risk of rendering the Operating System inoperable and loss of data. Make sure you have verified full backups and the associated restore software available before running any script or programming example. Use these scripts and programming examples entirely at your own risk. All liability claims against the author in relation to material or non-material losses caused by the use, misuse or non-use of the information provided, or the use of incorrect or incomplete information, are excluded. All content is subject to change and provided without obligation.