OpenCA

An #include error in OpenCA.xs that prevented
ECDSA from being correctly enabled was fixed. A
missing keyword in the ca.conf.template
configuration file that caused the RA Operator
Certificate request to fail was added. Wrong
permissions in binary distributions that prevented
the correct import of data among different PKI
components were fixed.

This release has support for the Elliptic Curves (ECDSA) algorithm, improved DSA support, an improved dynamic menu system, new online engines (to automatically issue certificates and CRLs), new automatic email message handling for newly issued certificates and expiration warnings, enhanced compatibility with different Unix systems (e.g. Fedora, CentOS, FreeBSD, OpenSolaris, etc.), and a new and simple graphical installer (binary packages).

The new package build and installation dir mode of
the PREFIX/etc directory was fixed. openca-sv and
openca-scep were packaged outside the base package
(no more C-related modules inside the base
package). ocspd is now completely independent from
the openca base package. Building of binary
packages and installation of packages were fixed.

Improved UTF-8 support, LDAP authentication support, SCEP Certificate template request, and authenticated requests support.

Dynamic engine support, a Russian translation for messages, UTF8 support, and bugfixes for timeouts with OpenSSL calls. Policy management on SCEP servers was improved. Other minor bugfixes and documentation updates were made.