#2 Master-Password and Debian Package

[Markus Schaber]

Hi,

I have three questions regarding XCA:

- Are there debian packages around?
- How can I change the master password of an .xdb database?
- Is there any possibility to have multiple passwords for a .xdb file, so each CA person can have its own password?

Thanks,
Markus Schaber

[Christian Hohnstaedt]

> Are there debian packages around?
http://www.mail-archive.com/debian-devel@lists.debian.org/msg269517.html

> How can I change the master password of an .xdb database?
Not yet.

> Is there any possibility to have multiple passwords for a .xdb file, so each CA person can have its own password?
> Right click on the key -> "Change Password"

[Markus Schaber]

This will give different Passwords for each key.

What I wanted to have is several "equal" Masterpasswords (we currently have 3 people with CA rights), so that we can revoke a single password when someone leaves the company.

[Markus Schaber]

For the two other points: I'm looking forward to the debian package, and I'll see whether I'll get a patch together for the master password changing, but don't hold your breath, I'm rather busy privately, and I don't get permisson to develop such things at work.

[Christian Hohnstaedt]

Changing the database password will be possible in the next version:
http://gitweb.hohnstaedt.de/?p=projects/xca.git;a=commit;h=42da9ac574366beea9e742ebc070ac921cf4cab3

> What I wanted to have is several "equal" Masterpasswords (we currently
> have 3 people with CA rights), so that we can revoke a single password when
> someone leaves the company.

This is technically hard to implement, because the password is directly used to encrypt the private key. You may use a common password known by all cA people and change it whenever one of the CA people leaves.

> Are there debian packages around?
Yes. In unstable (apt-get update; apt-get install xca): http://packages.debian.org/search?keywords=xca&searchon=names&suite=unstable&section=all