Visual EST

Visual EST is an EST client with graphical interface. It uses the EST library from Bouncy Castle and JavaFX.

Main Features

• Certificate enrollment and re-enrolment via Enrollment over Secure Transport protocol.
• Client authentication using certificate client and/or username & password (HTTP Basic and Digest).
• Support of TLS channel binding (Linking Identity and Proof-of-Possession information).
• Keypair generation using EC, RSA and DSA algorithms.
• Supported EST operations
  • Distribution of CA certificates (getcacerts)
  • CSR attributes (csrattrs)
  • Client certificate request for initial enrollment (simpleenroll)
  • Client certificate request for re-enrollment (simplereenroll)

Out of the scope

• Certificate-less TLS mutual authentication.
• EST operations
  • Full CMC (fullcmc)
  • Server-Side Key Generation (serverkeygen)

Note: Both applications (Windows and macOS) are not code-signed, so you will see warning about this.

Screenshots

Changelog

All notable changes to this project will be documented here.

Release 1.0.115 (2021-10-06)

Features

• Now Visual EST uses Bouncy Castle 1.69, Java 17, and JavaFX 14.

Bug Fixes

• Now on macOS Visual EST has the right icon.

Release 1.0.28 (2020-03-24)

Bug Fixes

• Fix an issue that prevents some private key formats to be used for CSR generation.

Release 1.0.27 (2020-03-09)

Bug Fixes

• Fix the eye icon on the password fields

Release 1.0.26 (2020-03-08)

Features

• Tabs are now detachable, so users are able to see General and Log tab at the same time.

Release 1.0.25 (2020-03-08)

Features

• The sections for Certificate and Username & Password authentication has been merged into one. In addition, the Additional Settings section has been moved as separate tab.

Release 1.0.24 (2020-03-05)

Features

• A new way to select client authentication certificate. Users can now drag & drop, paste, or browse certificate.

Release 1.0.23 (2020-03-03)

Features

• Double click on a log event will open it in a new dialog.

Release 1.0.22 (2020-03-02)

Bug Fixes

• Certificate details are now showing UnstructuredName and UnstructuredAddress
• Certificate details window displays KU and EKU
• The attributes of the summary panel of the enrollend are now selectable
• Certificate details now shows the Serial Number in HEX

Release 1.0.21 (2020-02-29)

Features

• Refactoring the validation logic of the client authentication certificate. How it includes expiration, chain, and revocation (CRL & OCSP) validations. ]

Bug Fixes

• The Serial Number of the issued certificate is wrong
• The Subject DN dialog does not set the correct Serial Number