TinyCA (Fork)

TinyCA is a simple graphical userinterface written in Perl/Gtk to manage a small CA (Certification Authority).
TinyCA works as a frontend for openssl.

This is a fork, because the original (tinyca.sm-zone.net) disappeared :-(

There are some improvements in the GUI, the Debian patches are applied. Also support for SHA2 is implemented. SHA256 is set as the default.
When renewing certificates with SHA1 a switch to SHA256 is automatically applied.

Features:

Currently TinyCA supports the following features:

• Unlimited CAs possible
• Support for creating and managing SubCAs
• Creation and Revocation of x509 - S/MIME certificates
• PKCS#10 Requests can be imported and signed
• RSA and DSA keys can be generated and used
• ServerCertificates
  • Certificates can be exported as: PEM, DER, TXT and PKCS#12
  • Certificates may be used with e.g. Apache, Postfix, OpenLDAP, Cyrus, FreeS/WAN, OpenVPN, OpenSWAN, FreeRadius
• ClientCertificates
  • Certificates can be exported as: PEM, DER, TXT and PKCS#12
  • Certificates may be used with e.g. Netscape, Konqueror, Opera, Internet Explorer, Outlook (Express) and FreeS/WAN
• Certificate Revocation List
  • CRLs can be exported as: PEM, DER and TXT
• Language Support:
  • English
  • German
  • Czech (Thanks to Robert Wolf <gentoo at slave dot umbr dot cas dot cz>)
  • Swedish (Thanks to Daniel Nylander <yeager at lidkoping dot net>)
  • Spanish (Thanks to Ramon Pons Vivanco <rpons at rinu dot org>)
  • French (Thanks to Thibault Le Meur <Thibault dot Lemeur at supelec dot fr>)

Requirements:

TinyCA is known to work with the following software backends:

• OpenSSL Version 1.0.1t (support for older or newer version should be given too)
• perl-Gtk2 Version >= 1.072
  • To have support for all used widgets, you will need gtk2 2.6.x
• Config::Tiny

Known limitations:

• With a lot of certificates the system gets slower. Loading needs some time
• Some user interface improvements are neccessary

Screenshots:

A screenshot of the GUI listing some certificates.

A screenshot of TinyCA2 with some information windows.

Download:

• Github: https://github.com/thooge/tinyca
• CHANGES
• Tarball: tinyca2-0.7.5.tar.gz (Original)
• Debian package: http://packages.debian.org/unstable/utils/tinyca (Thanks to scholler at fnb dot tu-darmstadt dot de)
• RPM for SuSE Linux 9.3 : tinyca2-0.7.5-0.noarch.rpm (Should work with the most current distributions)
• Source RPM: tinyca2-0.7.5-0.src.rpm
• CVS (actual snapshot, not always stable):
  cvs -z5 -d:pserver:anoncvs@tinyca.dyndns.org:/cvs login
  (password is anoncvs)
  cvs -z5 -d:pserver:anoncvs@tinyca.dyndns.org:/cvs co TinyCA2
• CVS - Webfrontend http://tinyca.dyndns.org/cvs-bin/viewcvs.cgi?cvsroot=TinyCA2
• Gentoo package: http://packages.gentoo.org/packages/?category=app-crypt;name=tinyca (Thanks to dragonheart at gentoo dot org)

TinyCA

Here you find the informations about the original TinyCA based on Gnome/Gtk.

Screenshots:

A screenshot of the GUI listing some certificates.

A screenshot of TinyCA with some information windows.

Requirements:

TinyCA is known to work with the following software backends:

• OpenSSL Version 0.9.7d
• Gtk-Perl 0.7.49

Related projects: roCA (discontinued?)

roCa is a complete CA solution, running TinyCA from a read only linux system based on knoppix.
The sensitive data is stored on an encrypted partition written on an USB stick.

http://www.intrusion-lab.net/roca/

Development State:

The current state is unmaintained/in review.