gnoMint
Submitted by DaveFX on Fri, 2006-09-15 16:52gnoMint is an X.509 Certification Authority management tool.
Currently, it has two different interfaces: one for GTK/Gnome environments, and another one for command-line.
It's free software, under the GNU/GPL license.
News
gnoMint 1.0.0, aka "Minted gnoMint", released
Submitted by DaveFX on Wed, 2009-06-03 21:57I'm pleased to announce the 1.0.0 version "Minted gnoMint" of gnoMint: a graphical X.509 Certification Authority management tool.
This version is the first stable release of gnoMint.
This version includes some bug fixes and improvements over the 0.9.9 release candidate version:
- Added a new full Russian translation, thanks to Aquanaut. Added Finnish translation.
- Other updated translations: Spanish, Slovak.
- Added forgotten crlgen function to gnomint-cli text-based interface.
- Fix compilation with GnuTLS 2.8.0.
- While creating a new certificate, the program now checks if new cert expiration date is after the CA expiration date. In that case, the program shows an info message and set the new cert expiration date to the CA expiration date.
You can get the tarball from sourceforge mirrors:
http://prdownloads.sourceforge.net/gnomint/gnomint-1.0.0.tar.gz?download
Enjoy it!
gnoMint 0.9.9 released
Submitted by DaveFX on Mon, 2009-03-23 18:35I'm pleased to announce the 0.9.9 version of gnoMint: an easy X.509 Certification Authority management tool.
This version includes a major code clean-up, and some interesting new features:
- Now, gnoMint is able to import CAs that have been generated with the managing scripts included in OpenSSL (as CA.pl and openssl ca). This support is added to the already existing support for importing CAs generated by TinyCA.
- Updated translations from launchpad.net: added new Brazilian Portuguese translation.
- A new, more secure, cyphering method (based on AES) has been included for protecting passwords and private keys. The program is fully compatible with old method. For forcing the protection of the whole database with the new-method, change the database password.
- New graphic and fully functional toolbar.
Some bugs have been fixed too:
- Fixed an architecture depending function that could give some problems in other architectures distinct to x86.
- Removed libgnomeui useless dependence.
- Fixed problem while importing certification authority if there were certificates in the database generated by the imported one.
- Fixed problem while exporting a CSR private key.
- Fixed problems while recovering from failures when opening, creating or saving databases.
- Ensuring GTK+-2.10 compatibility.
You can get the tarball from sourceforge mirrors: http://prdownloads.sourceforge.net/gnomint/gnomint-0.9.9.tar.gz?download
This version is the last expected beta release before final gnoMint 1.0 version. Please, test this 0.9.9 release more as it right now the 1.0.0 will be exactly identical to it (except version number). If 0.9.9 is not working as you would like the final 1.0.0 to work, now is the time to say so!
gnoMint 0.9.1 released
Submitted by DaveFX on Thu, 2008-12-18 07:25I'm pleased to announce the 0.9.1 version of gnoMint: a graphical X.509 Certification Authority management tool.
This version adds a minor patch, fixing a little bug that made gnomint-cli to not compile in some systems as OpenSuse v11.
You can get the tarball from sourceforge mirrors: http://prdownloads.sourceforge.net/gnomint/gnomint-0.9.1.tar.gz?download
gnomint 0.9.0 released
Submitted by DaveFX on Tue, 2008-12-16 07:24I'm pleased to announce the 0.9.0 version, aka "Command-line & Conquer-line", of gnoMint: a graphical X.509 Certification Authority management tool.
This version adds a full brand-new command-line interface: gnomint-cli. This interface allows any action over a gnoMint database, getting its orders through standard input. Now gnoMint is fully scriptable, so, for example, you will be able to enter a new cron task for creating your CRLs in scheduled time, or to create a bunch of new certificates from a list of employees.
You can get the tarball from sourceforge mirrors: http://prdownloads.sourceforge.net/gnomint/gnomint-0.9.0.tar.gz?download
gnoMint video tutorial
Submitted by DaveFX on Sun, 2008-11-30 07:41Jaroslav Imrich is currently working on an article about OpenVPN for one slovak linux website.
He used gnoMint as certificate authority and issued certificates for OpenVPN server and two clients. First he wanted to describe process with screenshots but then he came up with an idea of video tutorial.
You can watch the result at http://www.youtube.com/watch?
Also new "subtitle" feature of youtube is used. Subtitles are available in English and Slovak so you have to turn them on in the lower right corner of the video area.
Thank you, Jaroslav!
gnoMint 0.6.0 released
Submitted by DaveFX on Tue, 2008-11-18 18:46I'm pleased to announce the 0.6.0 version, aka "Import-a-matic", of gnoMint: a graphical X.509 Certification Authority management tool. This version adds some features:
- Import of whole OpenSSL-generated CA's.
- Import of PKCS#8 files.
- Import of PKCS#12 files.
- Added Italian and initial German translation, courtesy of Launchpad collaborators.
Many bugs has been fixed:
- CRL importing now works correctly.
- Multiple import of the same certificate now is disallowed.
- Fixed a portability problem: an architecture-dependant value was been saved in the database.
- Fixed problem with recent-file menu: now it works (again).
You can get the tarball from sourceforge mirrors: http://prdownloads.sourceforge.net/gnomint/gnomint-0.6.0.tar.gz?download
gnoMint in Fedora and Debian
Submitted by DaveFX on Mon, 2008-11-10 07:59I'm pleased to announce that gnoMint has been included as an official package in Fedora Core and Debian distributions. These widely deployed distributions join archLinux, that has been including gnoMint for a long while.
I'd like to thank Fedora developer Adam, from verdurin.com for having managed the inclusion in Fedora Core; and Debian developer Daniel Baumann, for promoting gnoMint as a Debian package.
There have been some other unofficial packages of gnoMint for other distributions, but I cannot find any of them currently. If you know any of them, please tell me so I can tell about them.
Enjoy these new packages!
gnoMint 0.5.4 released
Submitted by DaveFX on Wed, 2008-10-01 20:46Keeping the work in progress after the new 0.6.0 version, I'm pleased to announce the 0.5.4 version of gnoMint: a graphical X.509 Certification Authority management tool. This version adds adds some features:
- Now it is possible to generate CRLs for all the CAs in the hierarchy, not only the first root CA.
- Now, the dependences between certificate uses and certificate purposes are enforced.
- Now, the CA used for inheriting fields while creating a CSR is remembered, so it is the default selected CA while signing it.
- Just created files now in 0600 mode, so only owner car read them.
- gnoMint now can compile with much stricter compiler parameters (not enabled by default).
- A lot of autotools cleaning, thanks to Stanek Lubos <lubek@users.sourceforge.net>
- Now, certificates (CA and non-CA) can be imported from external files.
- Added Swedish translation, thanks to Launchpad.net collaborators.
There are also several fixes:
- Expired certificates appear only in the first CRL released after the expiration date, according to RFC 5280 (page 13).
- Subject and issuer key id are properly set, according to RFC 5280
- Fixing segmentation fault when the CSR or the CA certificates have NULL fields.
- Fixing problem: only the first certificate in database could sign CSRs in password-protected databases.
- Fixing problem: now expiration time is properly set (there was a problem related with the difference between UTC and localtime).
- Some other segmentation faults are fixed too.
You can get the tarball from sourceforge mirrors: http://prdownloads.sourceforge.net/gnomint/gnomint-0.5.4.tar.gz?download
gnoMint 0.5.3 released
Submitted by DaveFX on Mon, 2008-09-08 16:29I'm pleased to announce the 0.5.3 version of gnoMint: a graphical X.509 Certification Authority management tool.
This version adds adds some features:
- Initial Czech translation. Thanks to Staněk Luboš.
- Now, when exporting certificates, the full certification path is exported and saved, so it is easier to make several programs to validate gnoMint-generated certificates.
- Now, gnoMint is able to generate a PKCS#3 file with Diffie-Hellman parameters.
There are also several fixes:
- The lists are now well-ordered (again) when there are more than 10 certificates issued by the same CA.
- The problem while generating DSA CSRs is now fixed.
- Applying patches for fixing i18n, and autotools misconfigurations. Thanks to Staněk Luboš.

