gnoMint Files

After a decade-long hiatus since 1.3.0, gnoMint returns. This release accumulates ten years of patches from the Debian downstream community, modernizes the build for current toolchains, and adds a test suite to keep regressions out of the next release.

Highlights

Features

• Subject Alternative Name (SAN) support throughout the workflow: a SAN editor when creating a CA or CSR, SAN display in certificate and CSR property dialogs, and proper parsing of SANs from existing certificates.
• Year 2038 (Y2K38) safe certificate dates. The build now forces 64-bit time_t even on 32-bit systems, so certificates with validity periods decades past 2038 work correctly.
• XDG Base Directory Specification compliance. The default database lives under $XDG_DATA_HOME/gnomint/ instead of ~/.gnomint/. Existing databases at the old location are migrated automatically on first run.
• AppData file for software-center integration, and improved gnomint.desktop entry (Exec=gnomint %f so .gnomint files open from file managers).
• New make check test suite including a static .ui consistency checker (catches GtkBuilder layout files that fail to load, GtkGrid cell collisions, and orphan signal handlers) plus a runtime workflow regression test that exercises GUI callbacks under a headless Wayland compositor.
• Devcontainer configuration for VS Code Dev Containers with all build dependencies pre-installed, plus a GitHub Actions workflow for build verification.

Fixes

• Crash when exporting a certificate's private key on 64-bit systems (gint→guint64 stack corruption).
• Segmentation fault when right-clicking a CA certificate in the tree view.
• Latent layout collision in the certificate properties dialog (Validity header overlapping the issuer's OU row).
• CSR field inheritance now respects CA policy using an integer check rather than a string comparison.
• Memory leak in ca_file_insert_cert_in_db.
• Various uninitialized-variable warnings.
• User-facing spelling errors ("Emmited" → "Emitted", "appropiate" → "appropriate", and others).
• Build system now respects external CFLAGS instead of hardcoding -Wall; configure.ac no longer references a non-existent m4/Makefile that caused autoreconf failures.
• All GtkBuilder .ui files ported to the GTK 3 widget set (GtkVBox/HBox/Table/Alignment/HButtonBox → GtkBox/Grid/ButtonBox). Forward-port from the Debian community gtk3-port.patch.

Translations

• New Italian translation.
• POT template regenerated (456 → 617 msgids); all 12 existing translation files updated.

Backfilled NEWS

NEWS had been silent between 0.3.2 (2007) and 1.3.0 (2016). This release backfills concise entries for every intermediate version: 0.5.4, 0.6.0, 0.9.0, 0.9.1, 0.9.9, 1.0.0, 1.1.0, 1.2.0, 1.2.1, 1.3.0. See the in-tree NEWS file.

Build & install

./autogen.sh
./configure
make
sudo make install

Build dependencies are listed in .github/workflows/copilot-setup-steps.yml and pre-installed in the project's devcontainer.

Verification

This release was produced by make distcheck end-to-end (tarball builds from extracted dist into a clean directory, runs make check, installs and uninstalls cleanly).