gnoMint is a tool for easily creating and managing
certification authorities. It provides fancy
visualization of all the pieces of information
that pertain to a CA, such as x509 certificates,
CSRs, and CRLs. gnoMint is currently capable of
managing a CA that emits certificates that are
able to authenticate people or machines in VPNs
(IPSec or other protocols), secure HTTP
communications with SSL/TLS, authenticate and
cipher HTTP communications through Web-client
certificates, and sign or crypt email messages.
License: GNU General Public License v3
Changes:
Private keys can be saved in external files, so they can be kept in external drives. These files are in PKCS#8 password-protected format. All private keys in the database can be encrypted with a password, so nobody can extract private keys, or generate new certificates or CRLs, without knowing the password. This way, direct access to a password-protected database file using sqlite3 can only access to public information: all the private parts are cyphered. A contextual menu for allowing easy operation with certificates and CSRs has been added.