XCA is a graphical user interface for creating RSA/DSA/ECC keys, certificates, signing requests and revokation lists.
With XCA certificate signing and managing becomes an easy task.
It supports keys on SmartCards via the PKCS#11 library interface. Usually the manufacturer of your card provides an appropriate PKCS#11 library. By default it uses the OpenSC library.

When opening a new database the first time, it needs a password to encrypt the private keys in the database. This is the default password. Every time this database is opened the application asks for the password.

Despite the fact that the input dialog may be canceled the database will still be opened successfully. However, the access to the keys is not possible without supplying the correct database password everytime a key is used.

The different cryptographic parts are divided over 5 Tabs: Keys, Requests, Certificates, Templates and Revocation lists.

All items can be manipulated either by a context menu available by right-clicking on the item, or by using the buttons at the right border. Every item is identified by an internal name which is unique in one tab-view and is always shown in the first column.


· Close bug [ 3372449 ] All numeric names cannot be used
· add search functionality for PKCS#11 libraries
· fix ASN.1 encoding of PKCS#10 request
· Close bug [ 3318203 ] Build failure with GNU gold linker
· Add x509v3 extensions to the list of selectable columns
· Close bug [ 3314262 ] Incorrect "Path length" template parameter handling
· Close bug [ 3314263 ] Unrevoking a certificate does not make it "Trusted"
· Feature Request [3286442] Make success/import messges optional
· improve Password entry
· Improve SPKAC import
· add french translation by Patrick Monnerat
· Export requests or certificates as openssl config file
· Support building with EC disabled
· Close bug [3091576] Private key export is always PKCS#8 encoded
· Feature Request [3058196] Autoload database
· Feature Request [3058195] Export directly to the clipboard
· Close bug [3062711] Additional OIDs
· Close bug [3062708] Invalid user configuration file path name
· Fix PKCS#11 library handling