visual-est / visual-est-public

Visual EST is an EST (RFC 7030) client with graphical interface.

Visual EST

Visual EST is an EST client with graphical interface. It uses the EST library from Bouncy Castle and JavaFX.

Main Features

• Certificate enrollment and re-enrolment via Enrollment over Secure Transport protocol.
• Client authentication using certificate client and/or username & password (HTTP Basic and Digest).
• Support of TLS channel binding (Linking Identity and Proof-of-Possession information).
• Keypair generation using EC, RSA and DSA algorithms.
• Supported EST operations
  • Distribution of CA certificates (getcacerts)
  • CSR attributes (csrattrs)
  • Client certificate request for initial enrollment (simpleenroll)
  • Client certificate request for re-enrollment (simplereenroll)

Out of the scope

• Certificate-less TLS mutual authentication.
• EST operations
  • Full CMC (fullcmc)
  • Server-Side Key Generation (serverkeygen)

Note: Both applications (Windows and macOS) are not code-signed, so you will see warning about this.

Screenshots

Changelog

All notable changes to this project will be documented here.

Release 1.0.115 (2021-10-06)

Features

• Now Visual EST uses Bouncy Castle 1.69, Java 17, and JavaFX 14.

Bug Fixes

• Now on macOS Visual EST has the right icon.

Release 1.0.28 (2020-03-24)

Bug Fixes

• Fix an issue that prevents some private key formats to be used for CSR generation.

Release 1.0.27 (2020-03-09)

Bug Fixes

• Fix the eye icon on the password fields

Release 1.0.26 (2020-03-08)

Features

• Tabs are now detachable, so users are able to see General and Log tab at the same time.

Release 1.0.25 (2020-03-08)

Features

• The sections for Certificate and Username & Password authentication has been merged into one. In addition, the Additional Settings section has been moved as separate tab.

Release 1.0.24 (2020-03-05)

Features

• A new way to select client authentication certificate. Users can now drag & drop, paste, or browse certificate.

Release 1.0.23 (2020-03-03)

Features

• Double click on a log event will open it in a new dialog.

Release 1.0.22 (2020-03-02)

Bug Fixes

• Certificate details are now showing UnstructuredName and UnstructuredAddress
• Certificate details window displays KU and EKU
• The attributes of the summary panel of the enrollend are now selectable
• Certificate details now shows the Serial Number in HEX

Release 1.0.21 (2020-02-29)

Features

• Refactoring the validation logic of the client authentication certificate. How it includes expiration, chain, and revocation (CRL & OCSP) validations. ]

Bug Fixes

• The Serial Number of the issued certificate is wrong
• The Subject DN dialog does not set the correct Serial Number