OpenXPKI 3.34: Manage your PKI conveniently and securely

With version 3.34, the OpenXPKI team is releasing a comprehensive update: greater ease of use, improved stability, and several key steps toward the upcoming major release, version 4.0.

Easier command line operation

The command-line tool for administration has been fundamentally redesigned. New commands and significantly clearer error handling make day-to-day work noticeably more pleasant.

New metadata management

Meta data management has received a complete overhaul: Certificates can now be more easily annotated with additional information - such as owner details or lifecycle information - and this metadata can be viewed directly in the front end.

Improved operational stability

Session management in the frontend has been redesigned, resolving a known issue that could cause connection errors under heavy load. Logging has also been revised and now provides more consistent, easier-to-analyze information. Numerous minor bug fixes related to ACME, SCEP, and EST round out this release.

Note: Not fully backward compatible

Version 3.34 removes outdated components in several areas - such as in the processing of certificate subjects, in certain API commands, and in older database drivers and configuration options. Anyone performing a production update should carefully review their own configuration and any integrations beforehand.

Outlook

OpenXPKI 3.34 brings many practical improvements for day-to-day use and, at the same time, makes the system a bit more future-proof. However, due to the breaking changes, we do not recommend an automatic update: Set aside some time for testing - it’s worth it.

Have questions or need update support? Contact us - we’d be happy to assist you with planning and implementing the update to OpenXPKI 3.34.