Skip navigation.
Home
Certification Authority management made easy

gnoMint

gnoMint is a x509 Certification Authority management tool for GTK/Gnome environments.

It's free software, under the GNU/GPL license.

News


gnoMint 0.4.0 released

I'm pleased to announce the 0.4.0 version of gnoMint: a graphical Certification Authority managing tool.

This version add some useful features to 0.3.2 version:

  • Private keys can be saved in external files, so they can be kept in external drives. This files are in PKCS#8 password-protected format.
  • All private keys in the database can be encrypted with a password, so nobody can extract private keys, or generate new certificates or CRLs, without knowing the password. This way, direct access to a password-protected database file using sqlite3 can only access to public information: all the private parts are cyphered with an AES-based algorithm.
  • Added a contextual menu for allowing easy operation with certificates and CSRs.

gnoMint 0.3.2 released

I'm pleased to announce the 0.3.2 version of gnoMint: a graphical Certification Authority managing tool.

This version fixes some nasty bugs:

  • The gnoMint databases created by versions prior to 0.3.1 are now correctly loaded and upgraded.

We must remark that these databases, due to a bug fixed in previous version 0.3.1, will contain wrong non-CA certificates, as they all share the same internal serial number 0. This is a problem, because if any of them is revoked, the generated CRL will invalidate all the certificates.

This way, we recommend to renew all the certificates, and to revoke the old ones. Sorry for the inconvenience.

gnoMint 0.3.1 released

I'm pleased to announce the 0.3.1 version of gnoMint: a graphical Certification Authority managing tool.

This version add some useful features to 0.1.5 version:

  • gnoMint can export PKCS#12 structures, so certificates created in the program can be easily imported by other programs as web browsers, or mail clients..
  • gnoMint is able to revoke certificates, and generate the corresponding Certificate Revocation Lists (CRLs).
  • The license has changed to GNU-GPLv3.

It also fixes some nasty bugs:

  • Now, it compiles perfectly in x86-64 architecture, after fixing thousands of type casting errors.
  • All the certificates were being created using 0 as serial number. Now, the internal serial number of each certificate is correctly established.

gnoMint 0.1.5 released

I'm pleased to announce the 0.1.5 version of gnoMint: a graphical Certification Authority managing tool.

This version add some useful features to 0.1.4 version:

  • gnoMint can import the public part of Certificate Signing Requests made by other applications as long as they are formatted in PEM or in DER formats. This way, gnoMint now is able to make certificates for remote people or systems that can create their CSRs with other instances of gnoMint or other software.
  • gnoMint DB format version 3. This version of database format ensures that there won't be two or more CSRs in the database with the same Distinguished Name (DN).

It also fixes some nasty bugs:

  • Now the private key of CSRs can be exported without errors.
  • A just created CA has a default policy so it will be able to create useful certificates without change its default properties.
  • Some UI bugs are corrected: some label alignments now look OK, and the progress bar again moves while creating certificates or CSRs.

It must be noted that all the databases created prior to 0.1.4 version must be converted to the new format (0.1.4 or higher). The conversion script gnomint-upgrade-db is included in the package.

gnoMint 0.1.4 released

I'm pleased to announce the 0.1.4 version of gnoMint: a graphical Certification Authority managing tool.

This version add some useful features to 0.1.3 version:

  • It allows defining policies for each Certification Authorities in the database, so as all the new certificates signed by the CA have common properties (uses, purposes and validity time).
  • It requires SQLite3, for proper UTF-8 support. Due to this change, all the pre 0.1.4 databases must be converted to a new format. A conversion script is included in the package.

gnoMint 0.1.3 released

I'm pleased to announce the 0.1.3 version of gnoMint: a graphical Certification Authority managing tool.

This version add some useful features to 0.1.2 version:

  • It allows exporting uncrypted private keys (useful for unattended SSL/TLS servers).
  • It requires a minimum length (8 characters) for private-key export passphrase (so OpenSSL can import this keys).

It also fixes some nasty bugs:

  • Now, gnoMint checks that passphrase and confirmation are the same in private-key export passphrase.
  • The focus is grabbed correctly when asking for passphrase, so no mouse action is needed.

gnoMint 0.1.2 released

I'm pleased to announce the 0.1.2 version of gnoMint: a graphical Certification Authority managing tool.

This is a bug-fix revision: version 0.1.1 couldn't save the certification authority database if the new file and /tmp were in different partitions.

gnoMint 0.1.1 released

I'm pleased to announce the 0.1.1 version of gnoMint: a Certification Authority managing tool for GTK/Gnome.

This is a bug-fix revision: version 0.1.0 couldn't be compiled on 64-bit architectures due to an type-conversion error.

gnoMint 0.1.0 released

I'm pleased to announce gnoMint 0.1.0: the first public release of the new Certification Authority managing tool for GTK/Gnome.

gnoMint is a tool for an easy creation and management of Certification Authorities. It allows a fancy visualization of all the pieces that conform a CA: x509 certificates, CSRs, CRLs...

Currently, this first v0.1.0 allows the creation of CAs, CSRs and Certificates. It can export both public and private parts of them into PEM formatted files.