Changelog — xca 2.9.0 documentation

# Changelog

## xca 2.9.0 Fri Mar 28 2025

> - Add PostgreSQL driver to Mac OSX

> - Update libraies: OpenSSL 3.4.1, QT 6.8.3

> - Close #603: xca.exe(portable) without signature

> - Close #643: secp521r1 ssh fingerprints incorrect

> - Close #641: Keep serial number & revoke old certificate

> - Close #642: macOS MariaDB plugin requires SSL

> - Close #640: Fix mysql on Mac OSX

> - Close #602: Linux/Flatpak: default template TLS_server is missing

## xca 2.8.0 Sun Oct 13 2024

> - Add SHA3 algorithms to the select box

> - Close #593: App freezes/crashes when trying to export certain keys

> - Close #306 #537: Allow Database-driver options in config file

> - Close #537: macos: Compile mariadb-connector and qsqlmysql

> - Close #152: How can we specify the Cryptographic Service Provider

> - Close #590: MacOS OpenSSL legacy provider not loaded

> - Close #199: Templates and Key Identifiers

> - Close #239: Check existing Name Constraints

> - Add OpenSSL PURPOSE and validation results

> - Close #587: Incomplete refactoring of adapt_explicit_subj

> - Combine #90 and #315 and support UPN in name constraints

> - Close #90, #361: Name Constraints (RFC5280 section 4.2.1.10)

> - Close #296: Proper plurals

> - Close #88: Export to multiple files with common or individual password

> - Close #313: Support JWK export format of certificates

> - Close #359: Symlink to PKCS#11 lib resolved

> - Close #552: issues with icons in gnome dock

> - Close #315 Support UPN type for EAP/802.1X certificate

> - Add korean translation

> - Close #287: template don’t save/restore correctly

> - Close #351: a1int::getLong() doesn’t handle all error cases

> - Close #401: Write PEM data to a file especially for crlgen

> - Close #548: export certificate: error using child folder

> - Close #391: hide expired and revoked certificates

## xca 2.7.0 Tue Aug 27 2024

> - Close #311: Install QT translation files again

> - Close #304: oids.txt not found etc if prefix non-standard

> - Add cmdline option to disable native dialogs

> - Close #364: Export ED25519 private key with password

> - Switch encryption in “Cert+PKCS#8” and “Database dump mode from DES3-EDE to AES-256

> - Drop support of encrypted PVK files.

> - Windows/Mac build: switch to QT 6.6.3

> - Close #554: Missing option to disable file association in Windows setup

> - Close #395: Flexible Clipboard Export

> - Close #550: Fix compiling tests issue by providing -pthread link flag.

> - Fix calendar export for CAs

> - Support importing existing OpenVPN TLS Auth keys

> - Fix “Copy extensions from request” function

> - Fix login via PinPad on e.g ReinerSCT

> - Extend #383: tag insecure PFX/PKCS#12 algorithms

> - Close #536: macos include OpenSSL legacy provider

> - Close #532: XCA not in English on macos

> - Close #89: ta.key for OpenVPN tls-auth

> - Close #496: PKCS11 access to AWS CloudHSM failed

> - Yubikey improvements

## xca 2.6.0 Mon Feb 26 2024

> - Update documentation of certificate export and remote databases

> - Close #520: Fix permanent processor load

> - Close #518: Export certificates for ovpn file

> - Close #512 #474 #481 #506 #509: SHA1 based MAC for PKCS12

> - Close #458 #511 #503 #500 #494 #484 #482 #475: Support legacy keys and automatically transform them if possible.

> - Close #493: Renew Certificate freeze XCA

> - Close #477: paste an encrypted private key results in a crash

> - Fix crash when deleting CA certificates

> - Close #480: add flatpak build information and github action

> - Close #402: Subject Alternative Name not filled by all CN

> - Improve import: Finish multi import when empty

> - Add File extensions in Info.plist supported by XCA

> - Close #384: Quick view of certificates without trying to open XCA

> - Close #459: pass private key password

> - Close #465: Export PEM + Key in one File

> - Close #460: Impossible to import PKCS#12 (RC40_CBC)

> - Make XCA AppStore compliant with -DAPPSTORE_COMPLIANT=ON

## xca 2.5.0 Sun Sep 24 2023

> - Close #423: parameter –name is not respected when running with CLI

> - Close #457: Support Qt5 < 5.12 / python3-sphinxcontrib.qthelp

> - Close #440: yellow background makes date text hard to read in dark themes

> - Close #437: loading CRL at startup generates an error

> - Close #444 cannot update template internal name

> - Close #442: asan checks failed

> - Close #446: show more information in Recent Databases

> - Improve/Fix database loading

> - Document vCalendar/ics feature #456

> - Fix possible segfault caused by wrong free()

> - Add Bulgarian translation

> - Close #368: error while creating CRL with CA using EC key (ed25519)

> - Treat CKA_ID as byte array, not Bignum

> - Fix #321 - decryptKey shows OpenSSL error

> - Merge #325 Update entitlement.plist

> - Close #366: Not Responding after upgrade

> - Add Persian translation .ts file to XCA.

> - Close #327: “Dump database” dumps everything to everywhere

> - Close #317: “Please insert card: …” message

> - Add Indonesian translation

> - Close #283 Nitrokey HSM2 can’t create EC keys on 2.4.0

> - Switch from autotools/qmake to cmake

> - Close #278: Miss components to connect remote database

> - Commandline: Add “–list-items” to print a list of database items

> - Close #67: possibility to ignore password prompt from CLI

> - Close #259: Follow the XDG base directory specification

> - Add support for Qt6 and OpenSSL 3.x

> - Drop support for Qt4

> - Drop support for old XCA < 2.0.0 databases

> - Drop support for OpenSSL < 1.1.0

## xca 2.4.0 Fri May 07 2021

> - Unify XCA icon (certificate) on all platforms

> - Close #247: Apple silicon (M1) configure fixes

> - Add Microsoft BitLocker extended key usage

> - Disregard OpenSSL 0.9.8 compatibility

> - Add bash completion script

> - Add context sensitive help

> - Convert documentation from linuxdoc/SGML to sphinxdoc

> - Close #258: xca aborts on exit and on access to own templates

> - Close #142: Support Ed25519 Import / Export private SSH2 key

> - Close #142: Support Ed25519: Key-generation, import, export

> - Close #251: AuthorityKeyIdentifier: use issuer:always

> - Change language maintainer of brazilian portuguese

> - Close #230: Change PKCS12 export extension from .p12 to .pfx

> - Close #208: XCA hung when importing EC keys. For example prime256v1

> - Close #210: Make dialog to edit SAN less strict

> - Close #224: Store original path/filename on import

> - Close #213: configure.ac: add description to AC_DEFINE_UNQUOTED

> - Close #172 #46: Multiple OCSP Responders

> - Store default database and recently opened file as UTF8

> - Close #157 Generate and export CRLs from commandline

> - Add command line support for creating CRLs, keys and analyzing items

## xca 2.3.0 Wed Apr 29 2020

> - Close #191 OID LN differs warning popups at startup

> - Close #189 Database compaction #189

> - Improve PKCS11 library loading for portable app

> - Refactor native separators / and on windows.

> - Support TLS encrypted MariaDB and PostgreSQL connection

> - Close #182: UI not using Windows native theme in 2.2.1 portable

> - Close #70: cant open ics file in ical on macos mojave

> - Close #72: Add checkbox for OCSP staple feature

> - Use DESTDIR instead of destdir when installing. Follows autotools convention.

> - Close #172 #46: Multiple OCSP Responders

> - Close #170 xca-portable-2.2.1 cannot change language

> - Fix certificate assignment when importing a CA certificate

> - Close #163: Show key type/size on column of Certificates tab

## xca 2.2.1 Thu Jan 30 2020

> - Close #159 Opening existing database

## xca 2.2.0 Wed Jan 29 2020

> - Switch to MSI installer

> - Close #129 Unattended Installation

> - Rename HTTPS templates to TLS and support KU/EKU extensions needed by OpenVPN

> - Close #93 Default output folder / Improve Portable App usability

> - Improve EC Curve selection for key generation.

> - Close #21 Support for ODBC (MSSQL)

> - Close #136 Provide 64bit version of xca

> - Close #156 secp256k1, secp256r1 and NIST-P256

> - Transfer Key Usage and Extended Key Usage critical flags

> - Improve item loading. Inspired by #153

> - Add japanese translation

> - Close #138: Portable Version does not remember paths

> - Close #83: Token selection should not insist on name or serial of the token

> - Close #95: Copy mysql and psql windows dll files into portable app

> - Close #144: Database export has issues with wildcards in internal names

> - Close #143: Hotkey for import

> - Close #140: Certificate renewal with option to preserved serial number

> - Fix possible XCA crash

> - Add Dutch translation

> - Add Chinese translation

> - Add Italian language

> - CLose #120: Mark signed a request doesn’t work

> - Close #119: Rename “PostgreSQL 6 and 7” to just “PostgreSQL”

> - Close #116: Duplicate extensions erroneously shown

> - Close #114: SAN - IPv6 address input not working

> - Close #68 Generating large DH params freezes UI

> - Support concurrent database access.

> - Close #91: Change order of “PKCS#11 provider”

> - Extend PEM files by human readable information about the item

> - Support ecdsa SSH public keys

> - Close #98 Add comment at import/export RSA keys from/to SSH public key

> - Close #101: Finish Rename with Enter shows Property Dialog

> - Close #104: Also show sha256 digests of public keys

> - Close #82: Renew CA ROOT Cert

> - Verify imported keys thoroughly

## xca 2.1.2 Wed Nov 07 2018

> - Close #40 macOS: Crash after xca v2.0.1 quit

> - Close #37: XCA 2: EVP_DecryptFinal_ex:bad decrypt

> - Close #74: Exiting XCA 2.1.1 corrupts database

> - Make PKCS11 libs, working dir and main-window size host-dependent

> - Support for XCA as portable App

> - Close #69 Library not loaded: @rpath/ contains local directory

> - Close #60: Fix MacOSX 2.1.1 binary

> - Add new maintained languages: Polish, Spanish, Portuguese

## xca 2.1.1 Thu Sep 13 2018

> - Allow manual override of the CSR signed flag

> - Close #56: Duplicate Serials after Upgrade 2.1.0

> - Close #57: SAN IP not working in 2.1.0

> - Close #55: Calculate “CSR signed” information from legacy database

> - Close #55: Add Certificate counter column for CSR

> - Fix slovak translation

> - Close #50: Hang while importing 1.4.1 database into 2.1.0

## xca 2.1.0 Tue Jul 24 2018

> - Close #48: The SKI tickbox isn’t generating an SKI extension for CSRs

> - Fix translation of dates

> - Add private key icon to the key name

> - Inspired by #42: display dates relative (seconds ago, yesterday, …) while column ordering is still strict by age. The ToolTip shows date and time.

> - Related to #39: Dynamically adjust explicit DN entries

> - Close #39: Subject entries shuffled

> - Close #36: Support adding CN to X509v3 SAN automatically

> - Close #35: Configurable size of serial number.

> - Close #34: Improve Mac OSX installation

> - Close #27: Configurable certificate expiry warning threshold

> - Generate calender (.ics) files for certificate and CRL expiries

## xca 2.0.1 Tue May 08 2018

> - Close #32: Version field contains “Created by Qt/QMake” on MacOSX

> - Review and update russian ltranslation

> - Close #31: Closing certificate details window toggles tree folding

> - Close #25: Certificates are no longer coloured

> - Close #24: Add LibreSSL support. Tested with LibreSSL 2.7.2

> - Close #23: Improve limiting to pattern in certificate tree view

> - Close #20: Unable to chose remote database type (dropdown empty)

> - Close #19: Replace 3DES encryption by AES-256 during key export

## xca 2.0.0 Tue Apr 10 2018

> - Open database before starting a transaction

> - Fix default hash during startup

> - Fix Importing PKCS#12 and PKCS#7 files

> - Improve automatic setting of the certificate internal name

> - Don’t use remote DB descriptor as local database filename proposal

> - Usability: Preset remote database input values with previous ones

> - Add another missing windows postgres library

## xca 2.0.0-pre04 Thu Mar 22 2018

> - Accept drivers that don’t support transactions

> - Install MySQL and PostgreSQL drivers on windows

> - Closes #10: Warn if certificate without any extension is created

> - Add table prefix to be prepended to each table for remote SQL DB

> - Update translations

## xca 2.0.0-pre03 Thu Mar 15 2018

> - Fix installation of sql plugins in the Windows installer

> - Fix opening, importing and dropping databases

## xca 2.0.0-pre02 Tue Mar 13 2018

> - Fix crash during PKCS#12 export

> - Update HTTPS_server template and add example SAN

> - Acceppt empty password for private key decryption

> - Fix legacy database-without-password import

## xca 2.0.0-pre01 Sun Mar 11 2018

> - Close GitHub Bug #5: Exporting a private key results in too-permissive permissions

> - Close GitHub Bug #4: Workaround QT bug of editing in QDateTimeEdit

> - Fix display of dates in the Certificate details (local time displayed a GMT)

> - The internal name is not neccessarily unique anymore and can be edited in the details dialog as well as the comment.

> - CSR signing is now statically stored in the database and the comment of the issued certificate.

> - Private keys in the database are PKCS#8 encrypted and can be exported and decrypted without XCA.

> - No more incrementing serials. Only unique random serial numbers.

> - “xca_db_stat” application removed. Use the SQLite3 browser “sqlitebrowser”.

> - “xca extract” functionality removed. SQL views may be used instead.

> - Each item may be commented. XCA itself comments important events in the item.

> - Each item knows its time and origin of appearance.

> - Change database format to SQL(ite) and support MySQL and PostgreSQL.

## xca 1.4.1 Sat Mar 3 2018

> - Replace links to XCA on Sourceforge in the software and documentation by links to my Site.

## xca 1.4.1-pre02 Thu Mar 1 2018

> - SF Bug #122 isValid() tried to convert the serial to 64 bit

> - Beautify mandatory distinguished name entry errors

> - Support dragging certificates and other items as PEM text

> - Show User settings and installation path in the about dialog

## xca 1.4.1-pre01 Sun Feb 18 2018

> - Remove SPKAC support. Netscape is not of this world anymore.

> - SF bug #124 Wrong assumptions about slots returned by PKCS11 library

> - Cleanup and improve the OID text files, remove senseless aia.txt

> - Update HTML documentation

> - Refine and document Entropy gathering

> - Indicate development and release version by git commit hash

> - Fix dumping private keys during “Dump database”

> - Fix Null pointer exception when importing PKCS#12 with OpenSSL 1.1.0

> - SF Bug #110 Exported private key from 4096 bit SSH key is wrong

> - SF Bug #109 Revoked.png isn’t a valid image

> - SF Bug #121 CA serial number is ignored in hierarchical view

> - Improve speed of Bulk import.

> - Fix starting xca with a database as first arg

## xca 1.4.0 Thu Jan 4 2018

> - Update OpenSSL version for MacOSX and W32 to 1.1.0g

> - Change default hash to SHA-256 and add a warning if the default hash algorithm is SHA1 or less

> - Switch to Qt5 for Windows build and installation

> - Do not apply the default template when creating a similar cert

> - Close SF #120 Crash when importing CA certificate

> - Close SF #116 db_x509.cpp:521: Mismatching allocation and deallocation

> - Add support for OpenSSL 1.1 (by Patrick Monnerat)

> - Support generating an OpenSSL “index.txt” (by Adam Dawidowski)

> - Thales nCipher key generation changes for EC and DSA keys

> - Add Slovak translation

## xca 1.3.2 Sat Oct 10 2015

> - Gentoo Bug #562288 linking fails

> - Add OID resolver, move some Menu items to “Extra”

> - SF. Bug. #81 Make xca qt5 compatible

> - SF. Bug. #107 error:0D0680A8:asn1 encoding

> - Don’t validate notBefore and notAfter if they are disabled.

## xca 1.3.1 Fri Aug 21 2015

> - Fix endless loop while searching for a signer of a CRL

## xca 1.3.0 Thu Aug 11 2015

> - Update to OpenSSL 1.0.2d for Windows and MAC

> - SF Bug #105 1.2.0 OS X Retina Display Support

> - Digitaly sign Windows and MAC binaries with a valid certificate

> - Refactor the context menu. Exporting many selected items to the clipboard or a PEM file now works. Certificate renewal and revocation may now be performed on a batch of certificates.

> - Feat. Reg. #83 Option to revoke old certificate when renewing

> - Refactor revocation handling. All revocation information is stored with the CA and may be modified. Revoked certificates may now be deleted from the database

> - Support nameConstraints, policyMappings, InhibitAnyPolicy, PolicyConstraint and (OSCP)noCheck when transforming certificates to templates or OpenSSL configs

> - Fix SF Bug #104 Export to template introduces spaces

> - Add option for disabling legacy Netscape extensions

> - Support exporting SSH2 public key to the clipboard

> - SF Bug #102 Weak entropy source used for key generation: Use /dev/random, mouse/kbd entropy, token RNG

> - SF Feat. Req. #80 Create new certificate, based on existing certificate, same for requests

> - Add Cert/Req Column for Signature Algorithm

> - SF Feat. Req. #81 Show key size in New Certificate dialog

> - Distinguish export from transform: - Export writes to an external file, - Transform generates another XCA item

## xca 1.2.0 Sat Mar 21 2015

> - Update to OpenSSL 1.0.2a for Windows and MAC drop brainpool extra builds

> - Use CTRL +/- to change the font size in the view

> - Add Row numbering for easy item counting

> - Support SSH2 public key format for import and export

> - Add support for SHA-224

> - add “xca extract” to export items from the database on the commandline

## xca 1.1.0 Sat Nov 22 2014

> - SF Bug #79 Template export from WinXP cannot be imported in Linux and Mac OS X

> - Support for Brainpool windows and MacOSX binaries

> - SF Feat. Req. #70 ability to search certificates

> - SF Feat. Req. #75 show SHA-256 digest

> - RedHat Bug #1164340 - segfault when viewing a RHEL entitlement certificate

> - Database hardening - Delete invalid items (on demand) - Be more tolerant against database errors - Gracefully handle and repair corrupt databases - Add “xca_db_stat(.exe)” binary to all installations

> - Translation updates

> - Optionally allow hash algos not supported by the token

> - Select whether to translate established x509 terms

> - Finish Token EC and DSA support - generate, import, export, sign

> - SF Feat. Req. #57 More options for Distinguished Name

> - Switch to autoconf for the configure script

> - SF Feature Req. #76 Export private keys to clipboard

> - EC Keys: show Curve name in table

> - Support EC key generation on PKCS#11 token

> - PKCS#11: Make EC and RSA signatures work

> - PKCS#11: Fix reading EC keys from card

> - SF Bug #82 Certificate Creation out of Spec

> - SF Bug #95 XCA 1.0 only runs in French on a UK English Mac

## xca 1.0.0 Wed Oct 22 2014

> - SF Bug #89 Validating CRL distribution point results in error

> - SF Feature Req. #69 Create “Recent databases…” file menu item

> - SF Bug #75 authorityInfoAccess set error

> - SF Bug #88 Minor spelling error

> - SF Bug #87 Unable to set default key length The Key generation dialog now allows to remember the current settings

> - Do not interpret HTML tags in message boxes

> - Overwite extensions from the PKCS#10 request by local extensions This avoids duplication errors and allows to overwrite some extensions from the request

> - SF Bug #78 replace path separators in export filenames

> - SF Feature Req. #71 Add KDC Authentication OIDs to default files

> - SF Bug #82 Certificate Creation out of Spec

> - Add Croatian translation

> - SF Bug #83 Inappropriate gcc argument order in configure script

## xca 0.9.3 Sat May 12 2012

> - Fix double free in a1time resulting in random crashes

## xca 0.9.2 Sun May 6 2012

> - Support for Local timezone dates. Differentiate between invalid and undefined dates.

> - Fix Bug #3461403 Error when create certificate with CRL distribution point User error -> Improve user-friendlyness

> - Fix Bug #3485139 Exception when creating certificates in passwordless db

> - Avoid very long names resulting in duplicate names in the database.

> - Add warning colors for expired dates.

## xca 0.9.1 Fri Oct 21 2011

> - Close bug [ 3372449 ] All numeric names cannot be used

> - add search functionality for PKCS#11 libraries

> - fix ASN.1 encoding of PKCS#10 request

> - Close bug [ 3318203 ] Build failure with GNU gold linker

> - Add x509v3 extensions to the list of selectable columns

> - Close bug [ 3314262 ] Incorrect “Path length” template parameter handling

> - Close bug [ 3314263 ] Unrevoking a certificate does not make it “Trusted”

> - Feature Request [3286442] Make success/import messges optional

> - improve Password entry

> - Improve SPKAC import

> - add french translation by Patrick Monnerat

> - Export requests or certificates as openssl config file

> - Support building with EC disabled

> - Close bug [3091576] Private key export is always PKCS#8 encoded

> - Feature Request [3058196] Autoload database

> - Feature Request [3058195] Export directly to the clipboard

> - Close bug [3062711] Additional OIDs

> - Close bug [3062708] Invalid user configuration file path name

> - Fix PKCS#11 library handling

## xca 0.9.0 Sun Aug 29 2010

> - support loading more than one PKCS#11 library

> - remove the need for engine_pkcs11 now more than one PKCS#11 library can be loaded and used in parallel

> - Add de/selection of columns and add a lot of new possible columns All Subject entries, the subject hash and whole name, Certificate fingerprints, dates, CA info, CRL number, corresponding key of certs and requests

> - Improve CRL generation [3035294] CRLNumber, CRLReason

> - improve creating templates from cert - enhance parsing of CRL-DP, SAN, IAN and AuthInfoAcc - add support for CertificatePolicies - unknown extension are written as generic DER

> - improve date handling. “notBefore” is not reset to now anymore when applying a time range

> - Support dropping files onto the application

> - russian translation by Pavel Belly

> - support loading DER formatted PKCS#8 keys

> - ease commandline use

> - add DH param generation menu entry

> - improve token handling and PIN changing dialogs

> - improve key-value table input for “additional DN entries”

> - PIN and PUK changing implemented

> - apply partial template-contents - applying the subject only or the extensions only is possible now

> - add informational messageboxes - whenever an item was successfully created or imported

> - add support for random serial numbers

> - improve messages, usability and german translation

> - improve token support - token initializing - creating keys on a token - store existing keys on a token - delete keys and certs from a token

## xca 0.8.1 Tue Jan 5 2010

> - fix string conversion from QString to ASN1

## xca 0.8.0 Thu Dec 10 2009

> - improve documentation

> - improve file-dialog handling

> - Generate Template from certificate or PKCS#10 request -> Feature request [2213094] and [1108304]

> - add hash algos “ripemd160” and “SHA384”

> - add the “no well-defined date” from RFC 5280 as checkbox

> - Feature request [1996192] Include “OCSPSigning” in misc/eku.txt

> - Support for EC keys

> - Update Step-by-step documentation Thanks Devin Reade

> - Support for Smart Cards

> - set proper file-extension .xdb on opening databases

## xca 0.7.0 Fri Sep 11 2009

> - support modifying the CSR subject during signing

> - update key images

> - fix date settings in Certificate renewal dialog

> - fix certificate request verification

> - check for duplicate x509 v3 extensions Bug [ 1881482 ] and [ 1998815 ]

> - make sha1 the default hash to avoid problems with other software Bug [ 1751397 ]

> - add validation button to see all extensions before creating the cert

> - change the hashing for the default password. this makes it incompatible to older versions

> - Major changes for MAC OS X

> - extend template format for nconf settings

> - add nconf input field for arbitrary OpenSSL extensions and a “validate” button to check the settings before applying

> - fix xca.desktop Bug [ 1837956 ]

> - fix item-export error handling

> - add PEM paste import feature

> - extend PEM import to import all items from a PEM file

## xca 0.6.4 Mon Aug 13 2007

> - Bug “tree view loose track” fixed

> - check for certificate errors and display them instead of crashing

> - move used-keys-button form options to NewX509 dialog

> - Set string options in options dialog

> - remove extension and attribute tab in details dialog if no extensions or attributes available

> - documentation updated

> - X509 request attributes (like challange password) can be set and viewed.

## xca 0.6.3 Thu May 17 2007

> - show CRL signature algorithm information

> - Add options dialog to set the default hash algo, mandatory distinguished name entries and allow duplicate key use as requested by some users

> - make cert, crl and key details copy&paste able

> - fix background color of clicklabels Bug [ 1704699 ]

> - remove missleading tooltips Bug [ 1704700 ]

> - fix segfault

> - switch string handling to UTF8

## xca 0.6.2 Mon Apr 9 2007

> - break endless loop in chain building Bug [ 1696878 ]

## xca 0.6.1 Thu Apr 5 2007

> - minor documentation updates

> - Fix openssl-cross patch

> - recognize certificates with circular references [ xca-Bugs-1693027 ]

> - be compatibile to QT-4.1 (thanks Tamas TEVESZ)

> - remove all usages of QT3 backward lib [ xca-Feature Requests-1692800 ]

## xca 0.6.0 Fri Mar 16 2007

> - set initial sorting to ascending order

> - add RFC2253 representation of subject and issuer to copy & paste

> - fix dialog sizes for long DNs

> - move hash algo into signer box [ 1656260 ]

> - make QA serial a compile time option

> - fix date generation and warn if generalized time is used

> - autodetect and load any type of PEM files

> - fix version number in exported .xca template

> - fix import of older XCA templates

> - add support for predefined templates as there was in 0.5.1

> - fix cmdline import of crypto items

> - add undelete feature for deleted items

> - fix database shrinking of curent db during opening of new db

## xca 0.6.0-beta02 Fri Feb 2 2007

> - correct and fixate the order of x509name entries

> - Add CRL properties dialog to select the dates and the signing algo

> - Add SHA256 and SHA512

> - Certificate export for apache and OpenSSH+X509

> - Default templates for client, server, CA removed

> - template duplication added

> - sort serial numbers numerically and not lexicographically Bug [1166075]

> - add build support for cygwin and mingw-cross

> - delete rpm/ and debian/ subdirs

> - Port to QT4 and openssl 0.9.8 remove the need of Berkeley DB importing of old database dump possible

> - finish support for Mac OS X

> - add X509 V3 extensions to PKCS#10 requests

> - add “validation” function for editable extensions below

> - add “edit” buttons for subject/issuer alt. name, crl dist. point and cert. auth. info access

> - add DB-dump function into subdirs

> - Support for DSA keys

> - Fix error in template changing

> - change storage-format of keys: store the public unencrypted and the private additionally encrypted.

> - Allow different passwords for keys

## xca 0.5.1 Tue Jul 13 2004

> - support for different languages on WIN platform (Thanks Ilya)

> - better installation and deinstallation on WIN platform

> - documentation updated

## xca 0.5.0 Sun Jun 13 2004

> - orthographical changes

> - more translations

> - segfault in CRL import removed

> - manpage and documentation updated

> - store “midnight” in template

## xca 0.4.7-RC2 Fri Apr 16 2004

> - open db if explicit mentioned, otherwise do not.

> - Errormessage on a wrong pkcs12 password more comprehensive

> - postinst and postrm do update-menu

> - search more intensive for the CRL signer

> - add /etc/xca/nid.txt to OID search path

> - debian build enhanced, lintian satisfied, manpage added.

> - AuthorityInfoAccess enhanced “aia.txt” as oid list added

> - allow empty passwords on PKCS#12 import

## xca 0.4.7-RC1 Thu Feb 5 2004

> - debian menu-entry added

> - Open and closing of different databases

> - Menu added

> - German translation

> - CRLs will revoke existing certs

> - memory leaks removed

> - support for other compiled in basedir on unix

> - Authority info access added

>     Certificate policies still pending :-(

> - additional (private) oids can be registered in oids.txt

> - OIDs for extended key usage and Distinguished name are now read from eku.txt and dn.txt respectively.

> - About dialog and help window added.

> - Requestdetail is now tabdialog

## xca 0.4.6 Tue Nov 25 2003

> - Country is State or Province

> - xca.dsp: WIN32 changes from Ilya

> - New configure added, Makefile.in’s purged and one configuration: “Local.mak” for flags and compilers. supports parallel builds (make -j)

> - SmartCard Logon OID added

> - Fixed bugs:

> - [ 846052 ] Tab order in Certificate Netscape extensions is wrong

> - [ 845800 ] CRL Generation problem for Netscape

> - [ 836967 ] Unable to specify alternate database

> - [ 843725 ] xca dies when opened with a pem key as argument

> - [ 789374 ] Bad encoding in misc/xca.desktop

> - by Wolfgang Glas <wolfgang.glas@ev-i.at>: - Support for UTF8 in x509name - Netscape SPKAC support added

## xca 0.4.5 Wed Aug 13 2003

> - more german translations

> - [ 737036 ] make error texts copiable from pop-up-windows to clipboard by adding a button doing this

> - [ 767603 ] Key sizes Implemented by making the Key-size ComboBox editable to enter arbitrary key sizes.

> - [ 765774 ] change password for database

## xca 0.4.4 Wed Aug 6 2003

> - [ 783853 ] renewal uses ‘notBefore’ as ‘notAfter’ date

> - [ 783830 ] GeneralizedTime-format breaks browsers

## xca 0.4.3 Tue Aug 5 2003

> - remove Certificate creation bug (AuthKeyId)

> - always take the right cert for signing

> - critical flag in key usage and extended key usage works now

> - Import of Multiple items is done and works [ 739726 ] extend description of -p option [ 775529 ] Import of PKCS#7 item not shown

> - made the details dialogs internal name read only

> - some segmentation faults removed

> - VPN OIDs added to Ext. Keyusage

## xca 0.4.2 Sun Jul 20 2003

> - Memory leak removed

> - Template import and export added

> - fix bug [ 773056 ] Duplicate ‘All files (.)’ selection on import menus

> - import of PKCS#12 keys repaired

> - crl icon added to W32 installation

> - /usr/local/include removed from CPP flags

> - Buttons “Export Cert” and “Change Template” reconnected.

> - Authority Key identifier repaired

## xca 0.4.1 Tue Jul 15 2003

> - some compiling issues removed

> - Import via commandline repaired,

> - signing of requests without key fixed

> - Changes for WIN32 version from Ilya added

> - solved bug: [ 770120 ] Attempting to export private key results in no file exported

> - implemented feature request: [ 755599 ] add PFX import button to Keytab

## xca 0.4.0 Tue Jul 8 2003

> - Solved bugs:

> - [ 752111 ] Cannot handle dates past 32-bit boundary (2038)

> - [ 744227 ] Bug in handling of 3rd. party CRLs

> - The following Feature requests were implemented:

> - [ 743152 ] Attributes in subject name

> - [ 755853 ] select the hash algorithm for signing.

> - The code was completely rewritten to remove many unpretty codefragements and get a more stable codebase

> - The names of certs and keys in the detailsview of Certs, CRLs and Requests are clickable.

> - xca desktopfile added and will be installed in applications, key.xpm will be installed as xca.xpm in pixmaps ([ 763954 ] xca.desktop file) Thanks to Enrico Scholz

## xca 0.3.2 Thu May 15 2003

> - Optimizations, icon for WIN32 platform

> - MS Registry and %USERPROFILE% support

> - Support for PKCS#7 certs (im/export)

> - small UI changes

## xca 0.3.1 Thu Apr 24 2003

> - Tool Tips added

> - CRL handling (import, export, details) added

## xca 0.3.0 Fri Apr 25 2003

> - several bugfixes and memoryleaks removed

> - export to TinyCA and “openssl ca” added

> - switch between tree/plain view in certificate list

> - notAfter dates in certificate view can be sorted reasonably

> - libdb-4.1.24 and higher is supported

> - The certificate details dialog was redesigned to be a smaller tab-dialog

> - Mainwindow dialog shrinked

> - Item viewing and import via the commandline is possible

> - documentation littlebit updated

> - changes in configure

> - The wizard invokes the key generation process only if really needed

## xca 0.2.12 Mon Jan 6 2003

> - PKCS#7 encryption and signing of files added

> - First attempt of documentation added

> - Several export targets added

> - Certificate renewal repaired

## xca 0.2.11 Wed Dec 4 2002

> - Certificate export enhanced, increase signer-serial on certimport.

> - interpretation of serial as hex and not as dezimal.

> - configure continues even if qt lib is absent.

> - $HOME/xca is created if it does not exist.

## xca 0.2.10 Tue Oct 29 2002

> - shows not After time and serial in listview

> - some segfaults removed

> - Certificate renewal implemented

> - extension-bug removed

> - request-kontextmenu contains signing

> - create request from certificate

> - FreeBSD paths and libs recognized by configure

## xca 0.2.9 Mon Oct 21 2002

> - several segfaults eliminated

> - key-use counter corrected

> - initial truststate fixed

> - remembers Im/Export directories

> - import of mutiple certs/keys/requests/pkcs12

> - database transactions activated

> - exception-handling completed

## xca 0.2.8 Sun Oct 13 2002

> - consistency checks for Iss-alt-name and Sub-alt-name

> - Check for certificate dates to not exceed those of the signer

> - defines for libdb >4.1.x

> - default templates added

> - package-builder do build without printf-debugging

> - key-use counter works now well

## xca 0.2.7 Tue Oct 8 2002

> - segfaults removed

> - minor wizard changes

## xca 0.2.6 Mon Sep 30 2002

> - show common name in request list and certificate list

> - CRL generation added

> - Key-export fixed

> - signing-template, CRL date and CRL time interval adjustable

> - Fix for windows filenames

## xca 0.2.5 Tue Sep 24 2002

> - Certificate and Template Wizard completed

> - CA-serial can be changed and is stored with the cert

> - Passwordboxes set focus right (Andrey Brindeew <abr@abr.pp.ru>)

> - configure enhanced with error and success messages

> - x509 v3 extensions completed inc. Netscape extensions

> - Templates implemented

> - Files for MS Visual C++ added (yes, it compiles on MS Windows)

> - Windows Installer added (Nullsoft)

## xca 0.2.4 Tue Sep 10 2002

> - PKCS#12 import added

> - bugfixes fileview, requestgeneration

## xca 0.2.3 Wed Sep 4 2002

> - icons changed

> - context menu on right mousebutton

> - trust state settings added

> - dialogboxes are resizeable

> - extended keyusage added to v3 extensions when creating new cert

> - all dialogs translated to english

> - no more images in .ui files

## xca 0.2.2 Thu Jul 18 2002

> - basic constraints, key usage and subject/authority key identifier

> - signing wizard…

> - Signatures can be done with requests and from scratch

> - Certificate for signing can be self or foreign,

> - password is saved as md5sum

## xca 0.1.12 Thu Jul 11 2002

> - icons added

> - treeview for Certificates

> - private keys are triple DES encrypted in db

> - program asks for initial password on startup

> - some segfaulting bugs removed

## xca 0.1.11 Wed Jul 3 2002

> - RSA Keys are generated and stored to or loaded from a file in either DER or PEM format.

> - They get stored in a local Berkeley DB.

> - Changing their description and viewing their contents, as well as deleting them from local DB is possible.