Release Notes: Changes mostly involve HTTP messages bugfixes: an X.509 object signing fix and performance enhancements (reached 460+ signatures in software only configuration). This update is highly recommended.
Release Notes: Improvements over the last publicly available release (0.6.7) include fixing of various memory leaks in BIO handling and in OCSP responses signing, adding new errors for better logging of token issues, adding SOCK_DGRAM in PKI_NET_* interface, and a fixed OCSP interface for response building.
Release Notes: Improvements over the last publicly released version (0.6.5) include fixed generation of OCSP responses (an uninitialized field was causing OCSP responses to be invalid), support for DNS queries via the URL interface (dns://<domain>?<record_type>), and initial support for experimental Lightweight Internet Revokation Tokens (LIRTs).
Release Notes: This release has extended support for ECDSA (via profile/keyParams in profile configuration files). It fixes linker issues on Solaris, adds a pki-cert command line tool, and fixes the ocsp library code.
Release Notes: Support for IPv6 in network calls, fixes for URL parsing, and PKI_SSL_* interface enhancements.
Release Notes: This release adds support for different operating systems (initial support for Win port), PKI_SSL and support for easy SSL/TLS management, support for the Win LDAP API, support for 64-bit architectures, safe URL encoding for the HTTP GET protocol, and platform-independent thread management together with thread synchronization primitives (mutexes, condition variables, and r/w locks). There are LDAP interface fixes.
Release Notes: Support for PRQP from IETF (draft-ietf-pkix-prqp-04.txt) was increased. Support for PKCS#11 devices was extended. Simple OCSP request/responses managing functionalities were added. A new PKI_MSG interface for managing interactions between applications and CAs was introduced. The PKI_X509 interface for generalized X509 object management was added.
Release Notes: Support was added for Cross Certificate Pair (for bridge PKI support) via pki-xpair tool. The PRQP module was updated to the latest specs from IETF (draft-ietf-pkix-prqp-03.txt). Full support for PKCS#11 devices was added. A new command line tool (pki-tool) was added to manage tokens (software or hardware).
Release Notes: A new graphical installer for different distributions (Fedora, Ubuntu, Mac OS X/Darwin, etc.). The PRQP module has been updated to the latest specs from IETF (draft-ietf-pkix-prqp-02.txt). Support for multi-threaded applications (dynamic and static threads initialization for OpenSSL/ENGINE) has been fixed. Support for nChipher devices has been fixed. The PKCS11 driver has been updated (Slot Interface and Slot info retrieval functionality have been added).
Release Notes: Support was added for DSA-sha224 and DSA-sha256 algorithms and ECDSA with SHA2 suite (ECDSA-SHA224, ECDSA-SHA256, ECDSA-SHA384, ECDSA-SHA512). EC key generation (selected curves only by using bit sizes) was fixed. Named curves for 256, 384, and 512 bit sizes (EC) are now aligned with NIST specifications. Support for OpenSSL 0.9.9 version (current snapshots) was added. Support for static library linking (Linux) was fixed. Support for PKI_ALGOR and PKI_DIGEST_ALG managing was enhanced. Initial support for PKCS#7 object management was added.