OxCert

OxCert is a local desktop app for generating SAT Certifica-compatible artifacts without running the official Java application.

It is built on top of the published Rust engine:

• oxpki-core = "0.1.0-alpha.3"
• SAT acceptance has been confirmed for Rust-generated FIEL renewal .ren files and CSD .sdg files through oxpki-core.

OxCert is not an SAT product and does not automate SAT login or submission.

Flows

OxCert implements the desktop flows exposed by Certifica:

• Generate initial e.firma request: .req + encrypted .key
• Renew e.firma: .ren + encrypted .key
• Renew moral-person e.firma with legal representative
• Generate CSD requests: .sdg + one encrypted .key per branch/unit
• Open CertiSAT after a renewal file is generated

Security Model

All cryptographic artifact generation runs locally. OxCert does not upload private keys or passwords.

OxCert may remember the last successfully used signing e.firma paths to prefill renewal and CSD flows:

• .cer path
• .key path
• RFC, certificate serial, and fingerprint for validation

It does not store passwords, decrypted keys, or private-key bytes.

Development

Requirements:

• Node.js
• pnpm
• Rust stable

Install dependencies:

pnpm install

Run the desktop app:

pnpm tauri dev

Check the frontend:

pnpm build

Check the Rust backend:

cd src-tauri
cargo check

Current Status

This is an alpha desktop implementation. The core engine has real SAT acceptance proof for FIEL renewal and CSD generation. Initial e.firma request acceptance and moral-person representative renewal still need dedicated SAT proof before being treated as fully confirmed.

License

GPL-3.0-only.