Skip navigation.
Home
Certification Authority management made easy

gnoMint

gnoMint is an X.509 Certification Authority management tool.

Currently, it has two different interfaces: one for GTK/Gnome environments, and another one for command-line.

It's free software, under the GNU/GPL license.

News


 

gnoMint 1.1.0, aka "Against the tide of bit-rot", released

I'm pleased to announce the version 1.1.0, also known as "Against the tide of bit-rot", of gnoMint: a graphical X.509 Certification Authority management tool. This version includes some bug fixes and improvements over the 1.0.0 version:

  • gnoMint interface generation now uses GtkBuilder instead of Libglade (so it requires GTK+ 2.12 or newer).
  • Correcting bug affecting Slackware systems.
  • Correcting compile bug affecting RedHat and CentOS 5 systems.
  • Correcting Debian bug #554669: gnoMint now should compile perfectly using binutils-gold.
  • Correcting bug that affected showpolicy command in gnomint-cli
  • Fixed some problems that affected databases with different certificates with the same DN.
  • Added Catalan translation. Updating all translations from Launchpad.  

You can get the tarball from sourceforge mirrors:   http://prdownloads.sourceforge.net/gnomint/gnomint-1.1.0.tar.gz?download  

gnoMint 1.0.0, aka "Minted gnoMint", released

I'm pleased to announce the 1.0.0 version "Minted gnoMint" of gnoMint: a graphical X.509 Certification Authority management tool.

This version is the first stable release of gnoMint.

This version includes some bug fixes and improvements over the 0.9.9 release candidate version:

  • Added a new full Russian translation, thanks to Aquanaut. Added Finnish translation.
  • Other updated translations: Spanish, Slovak.
  • Added forgotten crlgen function to gnomint-cli text-based interface.
  • Fix compilation with GnuTLS 2.8.0.
  • While creating a new certificate, the program now checks if new cert expiration date is after the CA expiration date. In that case, the program shows an info message and set the new cert expiration date to the CA expiration date.

You can get the tarball from sourceforge mirrors:
http://prdownloads.sourceforge.net/gnomint/gnomint-1.0.0.tar.gz?download
 
Enjoy it!

gnoMint 0.9.9 released

I'm pleased to announce the 0.9.9 version of gnoMint: an easy X.509 Certification Authority management tool.
This version includes a major code clean-up, and some interesting new features:

  • Now, gnoMint is able to import CAs that have been generated with the managing scripts included in OpenSSL (as CA.pl and openssl ca). This support is added to the already existing support for importing CAs generated by TinyCA.
  • Updated translations from launchpad.net: added new Brazilian Portuguese translation.
  • A new, more secure, cyphering method (based on AES) has been included for protecting passwords and private keys. The program is fully compatible with old method. For forcing the protection of the whole database with the new-method, change the database password.
  • New graphic and fully functional toolbar.

Some bugs have been fixed too:

  • Fixed an architecture depending function that could give some problems in other architectures distinct to x86.
  • Removed libgnomeui useless dependence.
  • Fixed problem while importing certification authority if there were certificates in the database generated by the imported one.
  • Fixed problem while exporting a CSR private key.
  • Fixed problems while recovering from failures when opening, creating or saving databases.
  • Ensuring GTK+-2.10 compatibility.

You can get the tarball from sourceforge mirrors: http://prdownloads.sourceforge.net/gnomint/gnomint-0.9.9.tar.gz?download
This version is the last expected beta release before final gnoMint 1.0 version. Please, test this 0.9.9 release more as it right now the 1.0.0 will be exactly identical to it (except version number). If 0.9.9 is not working as you would like the final 1.0.0 to work, now is the time to say so!

gnoMint 0.9.1 released

I'm pleased to announce the 0.9.1 version of gnoMint: a graphical X.509 Certification Authority management tool.

This version adds a minor patch, fixing a little bug that made gnomint-cli to not compile in some systems as OpenSuse v11.

You can get the tarball from sourceforge mirrors: http://prdownloads.sourceforge.net/gnomint/gnomint-0.9.1.tar.gz?download

gnomint 0.9.0 released

I'm pleased to announce the 0.9.0 version, aka "Command-line & Conquer-line", of gnoMint: a graphical X.509 Certification Authority management tool.

This version adds a full brand-new command-line interface: gnomint-cli. This interface allows any action over a gnoMint database, getting its orders through standard input. Now gnoMint is fully scriptable, so, for example, you will be able to enter a new cron task for creating your CRLs in scheduled time, or to create a bunch of new certificates from a list of employees.

You can get the tarball from sourceforge mirrors: http://prdownloads.sourceforge.net/gnomint/gnomint-0.9.0.tar.gz?download

gnoMint video tutorial

Jaroslav Imrich is currently working on an article about OpenVPN for one slovak linux website.

He used gnoMint as certificate authority and issued certificates for OpenVPN server and two clients. First he wanted to describe process with screenshots but then he came up with an idea of video tutorial.

You can watch the result at http://www.youtube.com/watch?v=KbInXaFbC8g&fmt=18

Also new "subtitle" feature of youtube is used. Subtitles are available in English and Slovak so you have to turn them on in the lower right corner of the video area.

Thank you, Jaroslav!

gnoMint 0.6.0 released

I'm pleased to announce the 0.6.0 version, aka "Import-a-matic", of gnoMint: a graphical X.509 Certification Authority management tool. This version adds some features:

  • Import of whole OpenSSL-generated CA's.
  • Import of PKCS#8 files.
  • Import of PKCS#12 files.
  • Added Italian and initial German translation, courtesy of Launchpad collaborators.

  Many bugs has been fixed:

  • CRL importing now works correctly.
  • Multiple import of the same certificate now is disallowed.
  • Fixed a portability problem: an architecture-dependant value was been saved in the database.
  • Fixed problem with recent-file menu: now it works (again).

 You can get the tarball from sourceforge mirrors: http://prdownloads.sourceforge.net/gnomint/gnomint-0.6.0.tar.gz?download

gnoMint in Fedora and Debian

I'm pleased to announce that gnoMint has been included as an official package in Fedora Core and Debian distributions. These widely deployed distributions join archLinux, that has been including gnoMint for a long while.

I'd like to thank Fedora developer Adam, from verdurin.com for having managed the inclusion in Fedora Core; and Debian developer Daniel Baumann, for promoting gnoMint as a Debian package.

There have been some other unofficial packages of gnoMint for other distributions, but I cannot find any of them currently. If you know any of them, please tell me so I can tell about them.

Enjoy these new packages!

gnoMint 0.5.4 released

Keeping the work in progress after the new 0.6.0 version, I'm pleased to announce the 0.5.4 version of gnoMint: a graphical X.509 Certification Authority management tool. This version adds adds some features:

  • Now it is possible to generate CRLs for all the CAs in the hierarchy, not only the first root CA.
  • Now, the dependences between certificate uses and certificate purposes are enforced.
  • Now, the CA used for inheriting fields while creating a CSR is remembered, so it is the default selected CA while signing it.
  • Just created files now in 0600 mode, so only owner car read them.
  • gnoMint now can compile with much stricter compiler parameters (not enabled by default).
  • A lot of autotools cleaning, thanks to Stanek Lubos <lubek@users.sourceforge.net>
  • Now, certificates (CA and non-CA) can be imported from external files.
  • Added Swedish translation, thanks to Launchpad.net collaborators.

There are also several fixes:

  • Expired certificates appear only in the first CRL released after the expiration date, according to RFC 5280 (page 13).
  • Subject and issuer key id are properly set, according to RFC 5280
  • Fixing segmentation fault when the CSR or the CA certificates have NULL fields.
  • Fixing problem: only the first certificate in database could sign CSRs in password-protected databases.
  • Fixing problem: now expiration time is properly set (there was a problem related with the difference between UTC and localtime).
  • Some other segmentation faults are fixed too.

You can get the tarball from sourceforge mirrors: http://prdownloads.sourceforge.net/gnomint/gnomint-0.5.4.tar.gz?download

Syndicate content