EJBCA 3.1.3 released

[Tomas Gustavsson]

We are proud to release this version, which has received quite some enterprise
testing.

This is a minor release with some new features and some bugfixes.
Read the changelog for details.

This is a plugin-upgrade from 3.1.2.
Simply keep/copy ejbca.properties from the earlier installation,
copy the directory 'p12' from the earlier installation and 'ant deploy'
(or deploywithjbossservice) this new one.

Note that to fix ECA-144, 148 and 75, new version of lib/bcmail*.jar and
lib/bcprov*.jar are used. Since they are binary files they are not
included in the patch from version 3.1.2 to 3.1.3. You can use the patch and
manually replace the jar-files from the full distribution.

The 3.1.3 release have support for RSASSA-PSS signatures to conform to the
Swedish standard for MRTD certificates (Electronic Passports).
The RSASSA-PSS parameters can be seen and edited in the file
src/java/se/anatom/ejbca/ca/caadmin/ExtendedX509Util.java.15

IMPORTANT, compliation using jdk1.5 is required for this algorithm.
Otherwise this algorithm option won't show up

Enhanced support for international characters in the adminweb gui (Add/Edit
pages).
Should work with most languages now.

It's now also possible to select a subset of a users SubjectDN and SubjectAltName
fields used in a particular kind of certificate. This is defined in the
certificate profiles.

Changes:
-------
Bug
* [ECA-75] - SCEP not working with Hard token CAs (HSMs)
* [ECA-107] - can't view logs using oracle due to column 'comment'
* [ECA-139] - It is not possible to use a HSM to sign a pkcs10 req to an
external root CA.
* [ECA-141] - Unstable default idle-timeout for datasource
* [ECA-144] - Scep not working with Cryptlib
* [ECA-145] - Bug in hard token profile pages, Nullpointer when changing profile
type or saving new pages
* [ECA-147] - Star (*) not working in subject alt names
* [ECA-148] - Scep not working with Cisco PIX
* [ECA-149] - unstructuredName/address in DN does not work
* [ECA-153] - cli not working on windows when java_home contains space char
* [ECA-154] - install does not work when JAVA_HOME contain space char
* [ECA-155] - OCSP using CA key does not work with HSMs
* [ECA-156] - binary chars in ejbca-mail-service.xml
* [ECA-160] - display of mail.smtp.host during ant deploy is wrong (cosmetic)
* [ECA-165] - Not possible to remove UnstructuredName from entity profile
* [ECA-167] - CN Postfix doesn't work if UID have the same value or DN is reversed
* [ECA-168] - Hard Token SN search doesn't work with primecard 1.3 >
* [ECA-169] - Hard Token Profiles cannot be cloned
* [ECA-170] - Malformed SVG Template craches the Hard Token Profile pages
* [ECA-171] - Typo in language file
* [ECA-176] - Method CertUtil.getEMailAddress(X509Certificate certificate) hangs
jboss
* [ECA-177] - SCEP not working with Netscreen/Juniper boxes
* [ECA-180] - Select, unselect javascript features doesn't work anymort

New Feature
* [ECA-109] - Support RSASSA-PSS signatures
* [ECA-140] - Add $UID as a variable to the SVG templates
* [ECA-181] - Javascript checks use unicode for internationlized chars
* [ECA-182] - Possible to select a subset of fields in DN and Subject AltNames
in the certificate profiles
* [ECA-186] - Possibility to specify the BasicConstraint path length

Task
* [ECA-127] - Add references of installations to EJBCA home page

Improvement
* [ECA-146] - Device schema for sun directory server missing X-ORIGIN
* [ECA-159] - Not possible to view historical data in CertReqHistory
* [ECA-161] - easy configuration of smtp auth
* [ECA-163] - Describe how to install com.mysql.jdbc.Driver in the documentation
* [ECA-178] - Better error messages when HSM provider not found
* [ECA-183] - Possible to configure for different JBoss targets
* [ECA-185] - new version of batik lib


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop