Ir al contenido

gnoMint. Visual Certification Authority manager

My final degree project, alive again — a decade later.

gnoMint. Visual Certification Authority manager
Version1.6.8
Updated2026-06-20
Stars17
LicenseGPL-3.0

Historical project page at gnomint.sourceforge.net.

gnoMint

Overview

gnoMint is a visual X.509 Certification Authority (CA) manager for GNU/Linux. I started it in 2004 as my final degree project; it reached its last stable release in 2016 (1.3.0 “Sha Sha dance”) and then went on hiatus. In May 2026 I published 1.4.0 “Lazarus”, which integrates a decade of community patches from the Debian downstream, modernises the build, adds an automated test suite, supports Y2K38, and brings several new features.

Technology

C + GTK 3 + GnuTLS + libgcrypt + SQLite 3, built with autotools. The test suite includes a static GtkBuilder .ui consistency checker and a runtime GUI-workflow regression test running under a headless Wayland compositor. Devcontainer and GitHub Actions are configured for reproducible builds.

Two interfaces, one codebase

gnoMint shares most of its code between two frontends: a GTK 3 graphical interface (gnomint) and an interactive readline command line (gnomint-cli). Storage is one SQLite database per CA (.gnomint files), compliant with the XDG Base Directory Specification, so both interfaces operate on the same stores. It signs with SHA-512 by default (SHA-256 available) and the application is internationalised into 13 languages via gettext.

01

Certification Authorities

Create and manage root or intermediate CAs, with per-CA configurable policies.

02

CSRs and issuance

Generate Certificate Signing Requests, sign them and issue the resulting certificates.

03

Import and export

PEM, PKCS#12 and PKCS#8 formats, with optional encryption of private keys.

04

Subject Alternative Names

SANs across the workflow: editor when creating a CA or CSR, display in property dialogs and parsing of existing certificates.

05

Revocation lists

Generate and export CRLs, and revoke individual certificates or whole CAs.

06

SQLite storage

One database per CA (.gnomint files), compliant with the XDG Base Directory Specification.

07

Two interfaces, one codebase

GTK 3 GUI (gnomint) and interactive readline CLI (gnomint-cli) sharing most of the source.

08

Modern cryptography

SHA-512 by default (SHA-256 available) and Y2K38 safety, forcing time_t to 64-bit even on 32-bit systems.

09

Internationalised

Translated into 13 languages via gettext.