From owner-freebsd-questions@FreeBSD.ORG Fri Jul 22 00:43:36 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5371216A464 for ; Fri, 22 Jul 2005 00:43:33 +0000 (GMT) (envelope-from freebsd-questions@m.gmane.org) Received: from ciao.gmane.org (main.gmane.org [80.91.229.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id AE44843D62 for ; Fri, 22 Jul 2005 00:42:54 +0000 (GMT) (envelope-from freebsd-questions@m.gmane.org) Received: from list by ciao.gmane.org with local (Exim 4.43) id 1Dvlcd-0006U6-Hy for freebsd-questions@freebsd.org; Fri, 22 Jul 2005 02:42:39 +0200 Received: from 86.red-213-97-212.pooles.rima-tde.net ([213.97.212.86]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 22 Jul 2005 02:42:39 +0200 Received: from pica-news by 86.red-213-97-212.pooles.rima-tde.net with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 22 Jul 2005 02:42:39 +0200 X-Injected-Via-Gmane: http://gmane.org/ To: freebsd-questions@freebsd.org From: Joan Picanyol i Puig Date: Fri, 22 Jul 2005 02:44:24 +0200 Lines: 23 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Complaints-To: usenet@sea.gmane.org X-Gmane-NNTP-Posting-Host: 86.red-213-97-212.pooles.rima-tde.net User-Agent: Mozilla Thunderbird 1.0.5 (X11/20050715) X-Accept-Language: en-us, en In-Reply-To: Sender: news Subject: Re: frontend for openssl? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jul 2005 00:43:36 -0000 Mipam wrote: > Hi All, > > Openssl is very cool, but not always very easy to use. > Does there exist a frontend for openssl that can create and sign > certificates bit one that also can create and sign pkcs7 certs? > Maybe something exists to help you create your own certificate authority? 501,p2,0$ cat /usr/ports/security/xca/pkg-descr Graphical certification authority is an interface for managing RSA keys and certificates, and the creation and signing of PKCS#10 requests. It uses the OpenSSL library and a Berkeley DB for key and certificate storage. It supports importing and exporting keys and PEM DER PKCS8 certificates, signing and revoking of PEM DER PKCS12, and selection of x509v3 extensions. A tree view of certificates is presented. Author: Christian Hohnstaedt WWW: http://www.hohnstaedt.de/xca.html qvb -- pica