Download Latest Version
gnomint-1.3.0.tar.gz (758.0 kB)
Get an email when there's a new version of gnoMint
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| gnomint-1.6.5-1-x86_64.pkg.tar.zst | 2026-06-15 | 378.2 kB | |
| gnomint-1.6.5-1.fc44.x86_64.rpm | 2026-06-15 | 366.1 kB | |
| gnomint-1.6.5-macos-arm64.dmg | 2026-06-15 | 678.2 kB | |
| gnomint-1.6.5.msi | 2026-06-15 | 28.5 MB | |
| gnomint-1.6.5.tar.gz | 2026-06-15 | 1.3 MB | |
| gnomint-debug-1.6.5-1-x86_64.pkg.tar.zst | 2026-06-15 | 729.1 kB | |
| gnomint-debuginfo-1.6.5-1.fc44.x86_64.rpm | 2026-06-15 | 519.1 kB | |
| gnomint-debugsource-1.6.5-1.fc44.x86_64.rpm | 2026-06-15 | 136.3 kB | |
| gnomint_1.6.5-1_amd64.deb | 2026-06-15 | 308.0 kB | |
| gnoMint 1.6.5 _Tempered Anvil_ source code.tar.gz | 2026-06-15 | 1.2 MB | |
| gnoMint 1.6.5 _Tempered Anvil_ source code.zip | 2026-06-15 | 1.4 MB | |
| README.md | 2026-06-15 | 1.6 kB | |
| Totals: 12 Items | 35.6 MB | 0 | |
Security hardening and a working Windows installer.
Security
- Certificate serial numbers are now cryptographically random (128-bit CSPRNG, per CA/Browser Forum BR 7.1) instead of a sequential counter. Existing serials are unchanged; no migration needed.
- Private keys are encrypted at rest with PBES2 (PBKDF2-SHA256 + AES-256-CBC) instead of legacy PKCS#12 3DES. Backward compatible (GnuTLS auto-detects the scheme).
- Passwords are wiped from memory with a non-elidable routine.
- Parameterised the remaining
ca_policieslookups; replaced a fixed-sizesprintfwithsnprintf.
Windows (issue [#91])
- The
.msiinstaller now actually runs. Previous installers shipped libtool wrapper stubs instead of the real binaries, bundled none of the GTK/GnuTLS/SQLite/libgcrypt DLLs, and could not locate the GSettings schemas. The build now ships the real binaries with their full DLL dependency closure (plus GDK-Pixbuf loaders and GIO modules), and the app finds its schemas, data, and translations relative to the install directory. Verified by launching the bundled GUI in CI on every change.
Build
- Minimum GTK is now 4.12;
GDK_VERSION_MAX_ALLOWEDis capped at the floor so using newer GTK API is a compile error.
Database-compatible with 1.4.0 — no migration needed.
Binaries (RPM, .deb, Arch, macOS .dmg, Windows .msi) are attached automatically by CI once the release build completes.
