patrickpr/yaog

Yet Another Openssl GUI : Qt based openssl GUI to create CSR, certificates, keys (RSA / DSA / EC)

YAOG

Yet Another Openssl GUI : Qt base openssl GUI to create CSR, certificates, keys (RSA / DSA / EC), P12 etc...

Current version : 1.1.2 using openSSL 1.1.1g

If you have a problem, open an issue. If you have a question go to discussion

This project aims to allow creating certificates / keys in a quick and easy way.

Features :

• Single executable with no dependencies (openssl & Qt lib are included)
• Create auto sign certificates or CSR with immediate PEM display to copy/paste
• Certificate signing
• Stack to handle multiple certificates
• Conversion from certificate (private key) to csr
• Allow RSA, DSA and elliptic curve keys
• Encrypt/decrypt keys, check certificate / key match
• Set X509v3 extensions
• Import/export to PKCS#12
• Should work on any platform supported by Qt

Platforms for release binaries :

• Windows release
• Will compile on Linux someday
• I don't have any Mac for OSX release.

Binary includes openssl library version 1.1.1g compiled for 64 bits Windows platform.

Source code for openssl can be found at : https://www.openssl.org/source/

Licence : GPL V3

Installation / doc :

Main (and only !) window :

yaog's Issues

Feature Request: Save x509 extensions in loadable file

Hello.

First of all a big thank you for your work. I just tried using it and generally like the way it works but there is one thing missing for me and it would be awesome if you were to add it or explain to me how I can achieve the wanted behaviour.

You already implemented a way to save your settings but that way you can only save one set of x509 extensions between sessions. If this was instead exporting the settings as a config file which you can import in your next session you could make it much more useful as you need different extensions for different certificate types and can use this to create presets. You could even have a drop down menu where you can choose from all your preset files that are detected in a specific folder.

But obviously the settings are already saved somewhere so as a workaround you could theoretically switch out the file in which you save the extensions between sessions and keep the different files sorted somewhere else. Not the prettiest workaround but it would probably do the job. The question being ofc where do you save the extensions?

Best,
Gabgobie

generating a P12 file containing a Pem

at the FreeTAKServer project we are trying to find a confortable way to generate certs. Below is the target structure.

We could use YAOG for all the steps, but it failed when we tried to import the Pem

the pem file is imported in the main window and it's valid.

thank you for your software and support

x509 extensions are not included in CSR

CSR's generated by YAOG don't seem to include the x509 extensions in the CSR. This is fine if you're only using YAOG end-to-end as they get added during signing - but this can be an issue if you want to sign the CSR using an external CA.

cannot load certificate in binary format

got this to simplify handling of the numerous key formats that arrive on my desk.
but the binary DER cannot be loaded.
what a pity

KeySpec AT_KEYEXCHANGE

Hi,
Is there any way to define the KeySpec AT_KEYEXCHANGE.?

Thanks.

document how to fix the windows 10 fonts DPI issue

add to the ReadMe that it has issue with fonts
when running on windows 10 on multiple 4k screens
looks like this

to fix
do the following
Right Click on the executable select properties

then it looks ok Like this

Error when using email to generate cert

I get a string error when using a email similar to [email protected]

Error:
"Lib : asn1 encoding routines, doing : ASN1_mbstring_ncopy, reason : string too long (13/122/151)"

I can generate without the email which is fine, but frustrating.

Impossible generate certs

Whatever configuration I select I get an error similar to:
Lib : asn1 encoding routines, doing : ASN1_mbstring_ncopy, reason : string too long (13/122/151)

interface not printing well

Hi,

I'm using 3840x2160 resolution with 200% windows scale and the interface looks like this

Feature Request Combine Private Key and CRT file to make Self Signed Cert in PFX format

Hey Patrick is their anyway to add this feature in? When i have the private key and cert.crt file then open openssl command line to combine them making the PFX file for self signing exes it always generates a output with a password not matching. Is there anyway you could update your UI to make this new feature addition in? Ill tip you via paypal if so.

Can't find the exe

Hi Patrick, I am looking at the YAGO project.

Looking at the instructions it has: Just unzip and run the exe. All dependencies (SSL & Qt) are packaged inside the zip file.

But, I may be not seeing it, where do I download the exe file from?

3072 bit RSA keys

This is a great tool. I'm wondering if you ever plan to add support for 3072 bit RSA keys. Thanks.

Update OpenSSL to version 1.1.1

Hello,

The latest version of OpenSSL is now 1.1.1. Can you please update the version in your repo?
Or maybe there's an option to use custom locations for OpenSSL include and lib directories (to use the version installed on the build host)?