This allows it to be set when creating a new CA, so it doesn't have to
be edited in later.
Also show the next serial/random status in the CA info block
Hide trust store line from non-CA entries since it's not relevant to
certificates, only CAs.
While here, add the interface name to the button text.
Net effect is a confirmation box to ensure the user wants to take that
action, which could be disruptive.
Make the certificate date calculation more general and also try multiple ways
to determine the date (both timestamp and unix timestamp).
Catch cases where one or the other date fails to calculate to avoid errors.
While here, also account for the fact that DateTime::diff result is always
positive, when we need to know if it's negative.
* Make central functions to check and test ECDSA compatibility. Issue #9843
* Filter incompatible certificates from being offered for the GUI or Captive Portal. Implements #9897
* Do the same for IPsec, which implements #4991
* Add a check for key type when generating ipsec.secrets to allow ECDSA certs to work in IPsec for issue #4991
Note that as of this moment, the following curves are known to be compatible:
HTTPS (GUI, Captive Portal): prime256v1, secp384r1
IPsec: prime256v1, secp384r1, secp521r1
Results may vary in other areas which are not yet well-tested, and in packages.
* Allows editing the name/descr. Implements #7861
* Adds a (not stored) password field and buttons for exporting encrypted private
keys and PKCS#12 archives. Implements #1192
* More code optimization
* Actions are now by refid rather than array index, which is more
accurate and not as prone to being affected by parallel changes.
* Improved save & config write messages
* Correct a PHP error in non-edit CRL actions. Fixes#9879
* Correct display of revoke by serial options when the CRL CA contains no certificates. Issue #9869
* Wording/text changes
* Allow revoking by serial number or cert. Implements #9869
* Allow revoking multiple entries at a time. Implements #3258
* Declutter the main CRL list screen
* Move the create control to the bottom under the list
* Various other efficiency/style improvements
* Change default GUI cert lifetime to 825 days
* Add notes on CA/Cert pages about using potentially insecure parameter
chocies
* Add visible warnings on CA/Cert pages if paramers are insecure/not
recommended.
* Adds the total lifetime and lifetime remaining before expiration to
the info block
* Adds a visual indication to the infoblock and end date when the
certificate will be expiring soon, or if it has already expired.
