diff -ur security/p5-openxpki/Makefile security/p5-openxpki.new/Makefile
--- security/p5-openxpki/Makefile	2008-06-06 18:01:00.000000000 +0400
+++ security/p5-openxpki.new/Makefile	2008-06-27 21:29:53.000000000 +0400
@@ -6,7 +6,7 @@
 #
 
 PORTNAME=	openxpki
-PORTVERSION=	0.9.1084
+PORTVERSION=	0.9.1267
 PORTREVISION=	1
 CATEGORIES=	security perl5
 MASTER_SITES=	${MASTER_SITE_SOURCEFORGE}
@@ -38,7 +38,11 @@
 	${SITE_PERL}/${PERL_ARCH}/Proc/ProcessTable.pm:${PORTSDIR}/devel/p5-Proc-ProcessTable \
 	${SITE_PERL}/Sys/SigAction.pm:${PORTSDIR}/devel/p5-Sys-SigAction \
 	${SITE_PERL}/Data/Password.pm:${PORTSDIR}/security/p5-Data-Password \
-	${SITE_PERL}/RT/Client/REST.pm:${PORTSDIR}/www/p5-RT-Client-REST
+	${SITE_PERL}/RT/Client/REST.pm:${PORTSDIR}/www/p5-RT-Client-REST \
+	${SITE_PERL}/Data/Serializer.pm:${PORTSDIR}/devel/p5-Data-Serializer \
+	${SITE_PERL}/${PERL_ARCH}/IPC/ShareLite.pm:${PORTSDIR}/devel/p5-IPC-ShareLite \
+	${SITE_PERL}/DateTime/Format/DateParse.pm:${PORTSDIR}/devel/p5-DateTime-Format-DateParse \
+	${SITE_PERL}/IO/Prompt.pm:${PORTSDIR}/devel/p5-IO-Prompt
 RUN_DEPENDS=	${BUILD_DEPENDS}
 
 MAN3=	OpenXPKI.3 \
@@ -64,6 +68,7 @@
 	OpenXPKI::Crypto::Backend::OpenSSL::Command::create_pkcs12.3 \
 	OpenXPKI::Crypto::Backend::OpenSSL::Command::create_random.3 \
 	OpenXPKI::Crypto::Backend::OpenSSL::Command::get_pkcs8_keytype.3 \
+	OpenXPKI::Crypto::Backend::OpenSSL::Command::is_issuer.3 \
 	OpenXPKI::Crypto::Backend::OpenSSL::Command::is_prime.3 \
 	OpenXPKI::Crypto::Backend::OpenSSL::Command::issue_cert.3 \
 	OpenXPKI::Crypto::Backend::OpenSSL::Command::issue_crl.3 \
@@ -127,6 +132,7 @@
 	OpenXPKI::Exception.3 \
 	OpenXPKI::FileUtils.3 \
 	OpenXPKI::LdapUtils.3 \
+	OpenXPKI::Serialization::Fast.3 \
 	OpenXPKI::Serialization::JSON.3 \
 	OpenXPKI::Serialization::Simple.3 \
 	OpenXPKI::Server.3 \
@@ -140,6 +146,7 @@
 	OpenXPKI::Server::Authentication.3 \
 	OpenXPKI::Server::Authentication::Anonymous.3 \
 	OpenXPKI::Server::Authentication::ClientSSO.3 \
+	OpenXPKI::Server::Authentication::ClientX509.3 \
 	OpenXPKI::Server::Authentication::External.3 \
 	OpenXPKI::Server::Authentication::LDAP.3 \
 	OpenXPKI::Server::Authentication::Password.3 \
@@ -204,11 +211,11 @@
 	OpenXPKI::Server::Workflow::Activity::SmartCard::WriteCertificateToInstall.3 \
 	OpenXPKI::Server::Workflow::Activity::Tools::Approve.3 \
 	OpenXPKI::Server::Workflow::Activity::Tools::CancelApprovals.3 \
-	OpenXPKI::Server::Workflow::Activity::Tools::CreateWorkflowInstance.3 \
 	OpenXPKI::Server::Workflow::Activity::Tools::DetermineIssuingCA.3 \
 	OpenXPKI::Server::Workflow::Activity::Tools::Export.3 \
 	OpenXPKI::Server::Workflow::Activity::Tools::ForkWorkflowInstance.3 \
 	OpenXPKI::Server::Workflow::Activity::Tools::Notification.3 \
+	OpenXPKI::Server::Workflow::Activity::Tools::NotifyParentWorkflow.3 \
 	OpenXPKI::Server::Workflow::Activity::Tools::SetErrorCode.3 \
 	OpenXPKI::Server::Workflow::Activity::Tools::SetSource.3 \
 	OpenXPKI::Server::Workflow::Activity::Tools::Sleep.3 \
@@ -219,6 +226,7 @@
 	OpenXPKI::Server::Workflow::Condition::CRLSigningCAsLeft.3 \
 	OpenXPKI::Server::Workflow::Condition::CertificateNotYetRevoked.3 \
 	OpenXPKI::Server::Workflow::Condition::CheckCertTestResult.3 \
+	OpenXPKI::Server::Workflow::Condition::CheckForkedWorkflowChildren.3 \
 	OpenXPKI::Server::Workflow::Condition::CorrectNumberOfValidCerts.3 \
 	OpenXPKI::Server::Workflow::Condition::CorrectTiming.3 \
 	OpenXPKI::Server::Workflow::Condition::InitialEnrollmentOrRenewal.3 \
@@ -241,6 +249,7 @@
 	OpenXPKI::Server::Workflow::Persister::DBI.3 \
 	OpenXPKI::Server::Workflow::Persister::DBI::SequenceId.3 \
 	OpenXPKI::Server::Workflow::Validator::ApprovalSignature.3 \
+	OpenXPKI::Server::Workflow::Validator::Bulk.3 \
 	OpenXPKI::Server::Workflow::Validator::CertProfile.3 \
 	OpenXPKI::Server::Workflow::Validator::CertRole.3 \
 	OpenXPKI::Server::Workflow::Validator::CertSubject.3 \
@@ -249,6 +258,7 @@
 	OpenXPKI::Server::Workflow::Validator::CertSubjectParts.3 \
 	OpenXPKI::Server::Workflow::Validator::Creator.3 \
 	OpenXPKI::Server::Workflow::Validator::InvalidityTime.3 \
+	OpenXPKI::Server::Workflow::Validator::KeyLength.3 \
 	OpenXPKI::Server::Workflow::Validator::KeyReuse.3 \
 	OpenXPKI::Server::Workflow::Validator::PKCS10.3 \
 	OpenXPKI::Server::Workflow::Validator::PasswordQuality.3 \
@@ -275,8 +285,9 @@
 WITH_OPENSSL_BETA=	yes
 PERL_CONFIGURE=	5.8.6+
 
-OPTIONS=	DEVELOPER	"Install development tools for OpenXPKI?" off
-# These tools include docbook, Java and Xorg libraries.
+OPTIONS=	DEVELOPER	"Install development tools for OpenXPKI?" off \
+		GRAPHVIZ	"With graphical visualization of workflows?" off
+# If DEVELOPER is checked, then docbook, Java and Xorg libraries are installed.
 # They are needed only if you plan to fetch development svn snapshot,
 # then edit XML prototypes for collection of OpenXPKI guides, and then
 # compile the collection into HTML or PDF forms.
@@ -291,6 +302,9 @@
 		${LOCALBASE}/share/xsl/docbook/html/chunk.xsl:${PORTSDIR}/textproc/docbook-xsl \
 		${LOCALBASE}/share/java/jai/lib/libmlib_jai.so:${PORTSDIR}/java/jai
 .endif
+.if defined(WITH_GRAPHVIZ)
+RUN_DEPENDS+=	${LOCALBASE}/bin/dot:${PORTSDIR}/graphics/graphviz
+.endif
 
 post-install:
 	${SH} ${PKGINSTALL} ${PORTNAME} POST-INSTALL
diff -ur security/p5-openxpki/distinfo security/p5-openxpki.new/distinfo
--- security/p5-openxpki/distinfo	2007-10-10 02:36:58.000000000 +0400
+++ security/p5-openxpki.new/distinfo	2008-06-27 21:29:53.000000000 +0400
@@ -1,3 +1,3 @@
-MD5 (openxpki/OpenXPKI-0.9.1084.tar.gz) = 766b2cca84f1805f7b8b3973a82dd294
-SHA256 (openxpki/OpenXPKI-0.9.1084.tar.gz) = 9b93d98738d37a496edf284581189d045cbcd0782069a5d750a8a4005e5c14a1
-SIZE (openxpki/OpenXPKI-0.9.1084.tar.gz) = 483694
+MD5 (openxpki/OpenXPKI-0.9.1267.tar.gz) = f22b8b2ebc1ab153bcb8e1e485fa72e2
+SHA256 (openxpki/OpenXPKI-0.9.1267.tar.gz) = 6af16d9f94dd3c7cd853b3f15edd21ca5b2dcdc51bd5b7b56b13473b457fe234
+SIZE (openxpki/OpenXPKI-0.9.1267.tar.gz) = 495458
diff -ur security/p5-openxpki/pkg-plist security/p5-openxpki.new/pkg-plist
--- security/p5-openxpki/pkg-plist	2007-10-10 02:36:58.000000000 +0400
+++ security/p5-openxpki.new/pkg-plist	2008-06-27 21:29:53.000000000 +0400
@@ -22,6 +22,7 @@
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_pkcs12.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_random.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/get_pkcs8_keytype.pm
+%%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/is_issuer.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/is_prime.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/issue_cert.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/issue_crl.pm
@@ -89,6 +90,7 @@
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Exception.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/FileUtils.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/LdapUtils.pm
+%%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Serialization/Fast.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Serialization/JSON.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Serialization/Simple.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server.pm
@@ -102,6 +104,7 @@
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Authentication.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Authentication/Anonymous.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Authentication/ClientSSO.pm
+%%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Authentication/ClientX509.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Authentication/External.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Authentication/LDAP.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Authentication/Password.pm
@@ -166,11 +169,11 @@
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Activity/SmartCard/WriteCertificateToInstall.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/Approve.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/CancelApprovals.pm
-%%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/CreateWorkflowInstance.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/DetermineIssuingCA.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/Export.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/ForkWorkflowInstance.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/Notification.pm
+%%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/NotifyParentWorkflow.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/SetErrorCode.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/SetSource.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/Sleep.pm
@@ -181,6 +184,7 @@
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Condition/CRLSigningCAsLeft.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Condition/CertificateNotYetRevoked.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Condition/CheckCertTestResult.pm
+%%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Condition/CheckForkedWorkflowChildren.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Condition/CorrectNumberOfValidCerts.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Condition/CorrectTiming.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Condition/InitialEnrollmentOrRenewal.pm
@@ -204,6 +208,7 @@
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Persister/DBI.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Persister/DBI/SequenceId.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Validator/ApprovalSignature.pm
+%%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Validator/Bulk.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Validator/CertProfile.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Validator/CertRole.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Validator/CertSubject.pm
@@ -212,6 +217,7 @@
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Validator/CertSubjectParts.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Validator/Creator.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Validator/InvalidityTime.pm
+%%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Validator/KeyLength.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Validator/KeyReuse.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Validator/PKCS10.pm
 %%SITE_PERL%%/%%PERL_ARCH%%/OpenXPKI/Server/Workflow/Validator/PasswordQuality.pm