oriolrius/pki-manager-web v3.14.1 on GitHub

Fixes

Generated, visible export passwords (#14, thanks @tilwegener) — CA truststore/keystore and
certificate PKCS#12/JKS exports now get a 32-character password generated with Web Crypto
(192 bits), shown in an editable field with Copy password and Generate new password.
The UI no longer falls back to changeit for truststores or asks you to type keystore
passwords by hand, and the password=*** placeholders are gone. JKS keystores always use the
displayed password, even after you turn off optional encryption for another format. After a
download, a Downloaded file password panel keeps the password that was used, until you
leave the page. Passwords stay in page memory only, so save them with the file.

On the CA page, the Storage & Download URLs panel and Copy Link include the export
password in the URL, and export passwords still travel in request query strings, so they can
reach access logs. The backend also still defaults to changeit when the API is called
without a password. These are tracked as TASK-237 and will be fixed in a later release.

Full Changelog: v3.14.0...v3.14.1