OpenXPKI 3.32 is here – what's new in this release?

With version 3.32, the White Rabbit Security team has added a few helpful new features to OpenXPKI. With an eye toward the major release 4.0, scheduled for 2026, the update also lays the groundwork for further development toward post-quantum cryptography.

ACME: DNS-Challenge added

In response to popular demand, the ACME module now supports the DNS challenge in addition to the classic HTTP challenge. This allows certificates to be issued without having to modify web servers—a clear advantage for automated, scalable environments.

Frontend: Improved usability when working with complex metadata

Manual certificate requests in complex enterprise environments can be challenging. However, endlessly scrolling through dropdown lists is now a thing of the past: A new combined list with a search field makes selecting extensive metadata (e.g., organizational units) much easier.

Frontend: Easy Realm Switching

Users can now switch realms more easily: after logging out, a list of available realms will appear. To use this feature, you must enable it in the settings as usual.

Looking Ahead: Mojolicious Replaces FCGI

The FCGI module previously used for the frontend is outdated and requires some compromises. With version 3.32, you can already switch to the new Mojolicious Application Server. Benefits:

Consistent YAML configuration

Use of connectors and overlays in frontend configuration as well

Web server now acts solely as a reverse proxy—perfect for container setups

This technological leap paves the way for OpenXPKI 4.0.

Prospect

For anyone who uses ACME extensively, version 3.32 of OpenXPKI Enterprise Edition is a “must-have.” With this update, you’ll also gain access to several practical features and prepare your system early for the upcoming major release 4.0. Set aside a little extra time for the update—it’s worth it!

Please note, however: Since these changes are not fully backward-compatible, we do not recommend an automatic update. Contact us—we’ve put together a guideline and would be happy to assist you personally with the transition!

Questions or need update support?
Contact the White Rabbit Security Team—we’ll bring your PKI up to date quickly and securely.