X Certificate and Key Management

XCA 2.4.0 on Windows 10

Developer(s)| Christian Hohnstädt (github/chris2511) [1]
Initial release| July 3, 2002; 23 years ago (2002-07-03)
Stable release|

2.4.0 / May 7, 2021; 4 years ago (2021-05-07)

Written in| C++
Operating system|

* Windows
* Mac OS
* Linux

Platform| x86-64
Type| Public Key Infrastructure
Website| hohnstaedt.de/xca/

X Certificate and Key management (XCA) is a free and open-source multi-platform GUI application intended for creating and/or managing X.509 certificates, certificate signing requests, private/public keys (RSA, DSA, and EC), smart cards (via PKCS #11), and certificate revocation lists (CRLs).[2][3]

## Contents

* 1 Functionality
* 2 Implementation
* 3 Usage
* 4 References
* 5 External links

## Functionality

XCA has the following major features:[4]

* Generate and manage asymmetric private/public keys (RSA, DSA, and EC)
* Generate and manage X.509 certificates (including root and intermediate CA certificates) hierarchically
* Generate and process X.509 certificate signing requests (CSRs)
* Revoke previously issued certificates and generate certificate revocation lists (CRLs)
* Read, write, and delete certificates and keys from/to hardware tokens (e.g. smart cards or HSMs) using a PKCS #11 dynamically linked library provided by a third party.
* Sets of certificate hierarchies and keys are stored as a workspace in a database. Keys in the database are protected with password-based encryption.
* Can be controlled entirely via a graphical user interface that is generally considered easier to use than equivalent functionality provided by command-line applications such as OpenSSL.[5]
* Some operations are accessible over a command-line interface

## Implementation

XCA is written mostly in C++. It relies on OpenSSL to handle cryptographic operations and data structures, and its user interface is implemented using the Qt framework.[6]

## Usage

XCA has been endorsed (among others) by SUSE Linux,[3] Synopsys,[5] and Barracuda Networks.[7]

## References

1. ↑ "chris2511 (Christian Hohnstädt)". https://github.com/chris2511.
2. ↑ "X Certificate and Key Management". Official website. https://hohnstaedt.de/xca/.
3. ↑ 3.0 3.1 "Managing a PKI with XCA, X certificate and key manager". SUSE Linux. https://documentation.suse.com/sled/15-SP4/html/SLED-all/cha-security-xca.html.
4. ↑ "Manual". Official website. https://hohnstaedt.de/xca/index.php/documentation/manual.
5. ↑ 5.0 5.1 "Stop Paying For SSL Certificates You Don’t Need". Synopsys. https://www.synopsys.com/blogs/software-security/stop-paying-for-ssl-certificates/.
6. ↑ "chris2511/xca: X Certificate and Key management". GitHub. https://github.com/chris2511/xca.
7. ↑ "How to Create Certificates with XCA". Barracuda Networks. https://campus.barracuda.com/product/campus/doc/28475773/how-to-create-certificates-with-xca/.

## External links

* Official website
* XCA on GitHub

* v
* t
* e

Cryptographic software

Email clients|

* Apple Mail
* Autocrypt
* Claws Mail
* Enigmail
* GPG (Gpg4win)
* Kontact
* Outlook
* p≡p
* PGP
* Sylpheed
* Thunderbird

Secure
communication|

| OTR|

* Adium
* BitlBee
* Centericq
* ChatSecure
* climm
* Jitsi
* Kopete
* MCabber
* Profanity

|

SSH|

* Dropbear
* lsh
* OpenSSH
* PuTTY
* SecureCRT
* WinSCP
* wolfSSH

TLS & SSL|

* Bouncy Castle
* BoringSSL
* Botan
* cryptlib
* GnuTLS
* JSSE
* LibreSSL
* MatrixSSL
* NSS
* OpenSSL
* mbed TLS
* RSA BSAFE
* SChannel
* SSLeay
* stunnel
* wolfSSL

VPN|

* Check Point VPN-1
* Hamachi
* Openswan
* OpenVPN
* SoftEther VPN
* strongSwan
* Tinc
* WireGuard

ZRTP|

* CSipSimple
* Jitsi
* Linphone
* Jami
* Zfone

P2P|

* Bitmessage
* RetroShare
* Tox

DRA|

* Matrix
* OMEMO
* Conversations
* Cryptocat
* ChatSecure
* Proteus
* Signal Protocol
* Google Allo
* Facebook Messenger
* Signal
* TextSecure
* WhatsApp

Disk encryption
(Comparison)|

* BestCrypt
* BitLocker
* CrossCrypt
* Cryptoloop
* DiskCryptor
* dm-crypt
* DriveSentry
* E4M
* eCryptfs
* FileVault
* FreeOTFE
* GBDE
* geli
* LUKS
* PGPDisk
* Private Disk
* Scramdisk
* Sentry 2020
* TrueCrypt
* History
* VeraCrypt

Anonymity|

* GNUnet
* I2P
* Java Anon Proxy
* Tor
* Vidalia
* RetroShare
* Ricochet
* Wickr

File systems (List)|

* EncFS
* EFS
* eCryptfs
* LUKS
* PEFS
* Rubberhose
* StegFS
* Tahoe-LAFS

Service providers|

* Freenet
* Tresorit
* Wuala

Educational|

* CrypTool

Related topics|

* Outline of cryptography
* Timeline of cryptography
* Hash functions
* Cryptographic hash function
* List of hash functions
* S/MIME

* Category
* Commons

* v
* t
* e

TLS and SSL

Protocols and technologies|

* Transport Layer Security / Secure Sockets Layer (TLS/SSL)
* Datagram Transport Layer Security (DTLS)
* Server Name Indication (SNI)
* Application-Layer Protocol Negotiation (ALPN)
* DNS-based Authentication of Named Entities (DANE)
* DNS Certification Authority Authorization (CAA)
* HTTPS
* HTTP Strict Transport Security (HSTS)
* HTTP Public Key Pinning (HPKP)
* OCSP stapling
* Perfect forward secrecy
* STARTTLS

Public-key infrastructure|

* Automated Certificate Management Environment (ACME)
* Certificate authority (CA)
* CA/Browser Forum
* Certificate policy
* Certificate revocation list (CRL)
* Domain-validated certificate (DV)
* Extended Validation Certificate (EV)
* Online Certificate Status Protocol (OCSP)
* Public key certificate
* Public-key cryptography
* Public key infrastructure (PKI)
* Root certificate
* Self-signed certificate

See also|

* Domain Name System Security Extensions (DNSSEC)
* Internet Protocol Security (IPsec)
* Secure Shell (SSH)

History|

* Export of cryptography from the United States
* Server-Gated Cryptography

Implementations|

* Bouncy Castle
* BoringSSL
* Botan
* cryptlib
* GnuTLS
* JSSE
* LibreSSL
* MatrixSSL
* mbed TLS
* NSS
* OpenSSL
* RSA BSAFE
* S2n
* SChannel
* SSLeay
* stunnel
* wolfSSL

Notaries|

* Certificate Transparency
* Convergence
* HTTPS Everywhere
* Perspectives Project

Vulnerabilities|

| Theory|

* Man-in-the-middle attack
* Padding oracle attack

|

Cipher|

* Bar mitzvah attack

Protocol|

* BEAST
* BREACH
* CRIME
* DROWN
* Logjam
* POODLE (in regards to SSL 3.0)

Implementation|

* Certificate authority compromise
* Random number generator attacks
* FREAK
* goto fail
* Heartbleed
* Lucky Thirteen attack
* POODLE (in regards to TLS 1.0)
* Kazakhstan MITM attack

0.00

(0 votes)

|

Retrieved from "https://handwiki.org/wiki/index.php?title=Software:X_Certificate_and_Key_management&oldid=3898020"
*[v]: View this template
*[t]: Discuss this template
*[e]: Edit this template