changelog

一个跨平台的CA系统 实现了数字证书的制作、SSL安全通讯、加解密操作等功能

xca (0.5.1-1) unstable; urgency=low

  * support for different languages on WIN platform (Thanks Ilya)
  * better installation and deinstallation on WIN platform
  * documentation updated

 -- Christian Hohnstaedt <[e-mail]>  Tue, 13 Jul 2004 20:52:08 +0200

xca (0.5.0-1) unstable; urgency=low

  * orthographical changes
  * more translations
  * segfault in CRL import removed
  * manpage and documentation updated
  * store "midnight" in template

 -- Christian Hohnstaedt <[e-mail]>  Wed, 26 May 2004 23:07:23 +0200

xca (0.4.7-RC2-1) unstable; urgency=low

  * open db if explicit mentioned, otherwise do not.
  * Errormessage on a wrong pkcs12 password more comprehensive
  * postinst and  postrm do update-menu
  * search more intensive for the CRL signer
  * add /etc/xca/nid.txt to OID search path
  * debian build enhanced, lintian satisfied, manpage added.
  * AuthorityInfoAccess enhanced "aia.txt" as oid list added
  * allow empty passwords on PKCS#12 import

 -- Christian Hohnstaedt <[e-mail]>  Sat, 17 Apr 2004 00:08:31 +0200

xca (0.4.7-RC1-1) unstable; urgency=low

  * debian menu-entry added
  * Open and closing of different databases
  * Menu added
  * German translation
  * CRLs will revoke existing certs
  * memory leaks removed
  * support for other compiled in basedir on unix
  * Authority info access added
     Certificate policies still pending :-(
  * additional (private) oids can be registered in oids.txt
  * OIDs for extended key usage and Distinguished name are
    now read from eku.txt and dn.txt respectively.
  * About dialog and help window added.
  * Requestdetail is now tabdialog

 -- Christian Hohnstaedt <[e-mail]>  Fri, 16 Apr 2004 23:51:56 +0200

xca (0.4.6) unstable; urgency=low

  * Country is State or Province
  * xca.dsp: WIN32 changes from Ilya
  * New configure added, Makefile.in's purged and one configuration:
    "Local.mak" for flags and compilers.
    supports parallel builds (make -j)
  * SmartCard Logon OID added
  * Fixed bugs:
  * [ 846052 ] Tab order in Certificate Netscape extensions is wrong
  * [ 845800 ] CRL Generation problem for Netscape
  * [ 836967 ] Unable to specify alternate database
  * [ 843725 ] xca dies when opened with a pem key as argument
  * [ 789374 ] Bad encoding in misc/xca.desktop
  * by Wolfgang Glas <[e-mail]>:
    - Support for UTF8 in x509name
    - Netscape SPKAC support added

 -- Christian Hohnst鋎t <[e-mail]>  Tue, 25 Nov 2003 18:28:02 +0100

xca (0.4.5) unstable; urgency=low

  * more german translations
  * [ 737036 ] make error texts copiable from pop-up-windows to clipboard
    by adding a button doing this
  * [ 767603 ] Key sizes
    Implemented by making the Key-size ComboBox
    editable to enter arbitrary key sizes.
  * [ 765774 ] change password for database

 -- Christian Hohnst鋎t <[e-mail]>  Wed, 13 Aug 2003 22:10:43 +0200

xca (0.4.4) unstable; urgency=low

  * [ 783853 ] renewal uses 'notBefore' as 'notAfter' date
  * [ 783830 ] GeneralizedTime-format breaks browsers

 -- Christian Hohnst鋎t <[e-mail]>  Wed,  6 Aug 2003 18:42:58 +0200

xca (0.4.3) unstable; urgency=low

  * remove Certificate creation bug (AuthKeyId)
  * always take the right cert for signing
  * critical flag in key usage and extended key usage works now
  * Import of Multiple items is done and works
    [ 739726 ] extend description of -p option
    [ 775529 ] Import of PKCS#7 item not shown
  * made the details dialogs internal name read only
  * some segmentation faults removed 
  * VPN OIDs added to Ext. Keyusage

 -- Christian Hohnst鋎t <[e-mail]>  Tue,  5 Aug 2003 21:51:20 +0200

xca (0.4.2) unstable; urgency=low

  * Memory leak removed
  * Template import and export added
  * fix bug [ 773056 ] Duplicate 'All files (*.*)'
    selection on import menus
  * import of PKCS#12 keys repaired
  * crl icon added to W32 installation
  * /usr/local/include removed from CPP flags
  * Buttons "Export Cert" and "Change Template"
    reconnected.
  * Authority Key identifier repaired

 -- Christian Hohnst鋎t <[e-mail]>  Sun, 20 Jul 2003 23:38:38 +0200

xca (0.4.1) unstable; urgency=low

  * some compiling issues removed
  * Import via commandline repaired,
  * signing of requests without key fixed
  * Changes for WIN32 version from Ilya added
  * solved bug:
    [ 770120 ] Attempting to export private key results in no file exported
  * implemented feature request:
    [ 755599 ] add PFX import button to Keytab
  
 -- Christian Hohnstaedt <[e-mail]>  Tue, 15 Jul 2003 15:18:17 +0200

xca (0.4.0) unstable; urgency=low

  * Solved bugs:
  * [ 752111 ] Cannot handle dates past 32-bit boundary (2038)
  * [ 744227 ] Bug in handling of 3rd. party CRLs
  * The following Feature requests were implemented:
  * [ 743152 ] Attributes in subject name
  * [ 755853 ] select the hash algorithm for signing.
  * The code was completely rewritten to remove
    many unpretty codefragements and get a more stable codebase
  * The names of certs and keys in the detailsview of Certs, CRLs
    and Requests are clickable.
  * xca desktopfile added and will be installed in applications,
    key.xpm will be installed as xca.xpm in pixmaps
    ([ 763954 ] xca.desktop file) Thanks to Enrico Scholz

 -- Christian Hohnst鋎t <[e-mail]>  Tue,  8 Jul 2003 23:31:37 +0200

xca (0.3.2) unstable; urgency=low

  * Optimizations, icon for WIN32 platform
  * MS Registry and %USERPROFILE% support
  * Support for PKCS#7 certs (im/export)
  * small UI changes

 -- Christian Hohnst鋎t <[e-mail]>  Thu, 15 May 2003 00:46:07 +0200

xca (0.3.1) unstable; urgency=low

  * Tool Tips added
  * CRL handling (import, export, details) added

 -- Christian Hohnst鋎t <[e-mail]>  Thu, 24 Apr 2003 19:29:36 +0200

xca (0.3.0) unstable; urgency=low

  * several bugfixes and memoryleaks removed
  * export to TinyCA and "openssl ca" added
  * switch between tree/plain view in certificate list
  * notAfter dates in certificate view can be sorted reasonably
  * libdb-4.1.24 and higher is supported
  * The certificate details dialog was redesigned to be a smaller tab-dialog
  * Mainwindow dialog shrinked
  * Item viewing and import via the commandline is possible
  * documentation littlebit updated
  * changes in configure
  * The wizard invokes the key generation process only if really needed

 -- Christian Hohnst鋎t <[e-mail]>  Wed,  5 Mar 2003 23:56:56 +0100

xca (0.2.12) unstable; urgency=low

  * PKCS#7 encryption and signing of files added
  * First attempt of documentation added
  * Several export targets added
  * Certificate renewal repaired 

 -- Christian Hohnst鋎t <[e-mail]>  Mon,  6 Jan 2003 21:40:28 +0100

xca (0.2.11) unstable; urgency=low

  * Certificate export enhanced, increase signer-serial on certimport.
  * interpretation of serial as hex and not as dezimal.
  * configure continues even if qt lib is absent.
  * $HOME/xca is created if it does not exist.

 -- Christian Hohnst鋎t <[e-mail]>  Wed,  4 Dec 2002 21:38:28 +0100

xca (0.2.10) unstable; urgency=low

  * shows not After time and serial in listview
  * some segfaults removed
  * Certificate renewal implemented
  * extension-bug removed
  * request-kontextmenu contains signing
  * create request from certificate
  * FreeBSD paths and libs  recognized by configure

 -- Christian Hohnst鋎t <[e-mail]>  Wed,  4 Dec 2002 21:34:41 +0100

xca (0.2.9) unstable; urgency=low

  * several segfaults eliminated
  * key-use counter corrected
  * initial truststate fixed
  * remembers Im/Export directories
  * import of mutiple certs/keys/requests/pkcs12
  * database transactions activated
  * exception-handling completed

 -- Christian Hohnst鋎t <[e-mail]>  Mon, 21 Oct 2002 21:05:59 +0200

xca (0.2.8) unstable; urgency=low

  * consistency checks for Iss-alt-name and Sub-alt-name
  * Check for certificate dates to not exceed those of the signer
  * defines for libdb >4.1.x
  * default templates added
  * package-builder do build without printf-debugging
  * key-use counter works now well

 -- Christian Hohnst鋎t <[e-mail]>  Sun, 13 Oct 2002 23:28:29 +0200

xca (0.2.7) unstable; urgency=low

  * segfaults removed
  * minor wizard changes

 -- Christian Hohnst鋎t <[e-mail]>  Mon,  7 Oct 2002 23:32:19 +0200

xca (0.2.6) unstable; urgency=low

  * show common name in request list and certificate list
  * CRL generation added
  * Key-export fixed
  * signing-template, CRL date and CRL time interval adjustable
  * Fix for windows filenames

 -- Christian Hohnst鋎t <[e-mail]>  Mon, 30 Sep 2002 22:02:01 +0200

xca (0.2.5) unstable; urgency=low

  *  Certificate and Template Wizard completed
  *  CA-serial can be changed and is stored with the cert 
  *  Passwordboxes set focus right (Andrey Brindeew <[e-mail]>)
  *  configure enhanced with  error and success messages
  *  x509 v3 extensions completed inc. Netscape extensions
  *  Templates implemented
  *  Files for MS Visual C++ added (yes, it compiles on MS Windows)
  *  Windows Installer added (Nullsoft)

 -- Christian Hohnst鋎t <[e-mail]>  Tue, 24 Sep 2002 02:18:51 +0200

xca (0.2.4) unstable; urgency=low

  * PKCS#12 import added
  * bugfixes fileview, requestgeneration
 
 -- Christian Hohnstaedt <[e-mail]>  Mon,  8 Sep 2002 23:35:42 +0200

xca (0.2.3) unstable; urgency=low

  * icons changed
  * context menu on right mousebutton
  * trust state settings added
  * dialogboxes are resizeable
  * extended keyusage added to v3 extensions when creating new cert
  * all dialogs translated to english
  * no more images in *.ui files

 -- Christian Hohnstaedt <[e-mail]>  Mon,  5 Aug 2002 08:35:42 +0200

xca (0.2.2) unstable; urgency=low

  * basic constraints, key usage and subject/authority key identifier
  * signing wizard...
  * Signatures can be done with requests and from scratch
  * Certificate for signing can be self or foreign,
  * password is saved as md5sum

 -- Christian Hohnstaedt <[e-mail]>  Fri, 19 Jul 2002 08:50:27 +0200
   
xca (0.1.12) unstable; urgency=low

  * icons added 
  * treeview for Certificates 
  * private keys are triple DES encrypted in db
  * program asks for initial password on startup
  * some segfaulting bugs removed

 -- Christian Hohnstaedt <[e-mail]>  Fri, 12 Jul 2002 11:49:05 +0200

xca (0.1.11) unstable; urgency=low

  * initial debian Package
  * RSA Keys are generated and stored to or loaded from a file
    in either DER or PEM format.
  * They get stored in a local Bercley DB.
  * Changing their description and viewing their contents, as well
    as deleting them from local DB is possible.

 -- Christian Hohnstaedt <[e-mail]>  Thu,  4 Jul 2002 09:12:57 +0200