DirXML Trace Viewer 1.1.0

What's new

Server certificates are checked, and you decide about untrusted ones

The "Trust any server certificate" option is gone. LDAPS certificates are now checked the normal way:

• Certificates issued by a certificate authority Java trusts, and matching the server name or address, connect without asking. Hostname checking is new; it was previously skipped.
• For anything else (self-signed, an eDirectory tree CA, expired, or issued for another name) the viewer shows why, with the subject, issuer, validity and SHA-256 fingerprint, and asks: Trust and Remember, Trust This Time, or Cancel.
• Remembered certificates are pinned per server. If a server later presents a different certificate, you are warned and shown both fingerprints.
• File → Accepted Certificates… lists remembered certificates and removes one or all.

The first time you connect to an eDirectory server with its tree CA certificate, expect one prompt per server.

Signed Mac app

The Mac DMG contains a signed, notarized app with its own Java runtime: no Java install or admin rights needed, and no security warnings.

Download

File	Use
DirXML-Trace-Viewer-1.1.0-arm64.dmg	Mac (Apple silicon). Drag the app to Applications, ~/Applications, or any folder.
dirxml-trace-viewer-1.1.0.zip	Any OS with Java 21+: the jar, launchers for macOS, Linux and Windows, README, LICENSE and third-party notices.
dirxml-trace-viewer.jar	The executable jar alone: java -jar dirxml-trace-viewer.jar
SHA256SUMS	Checksums for all three

See the README for details.