Skip to content

Releases: xipki/xipki

v5.3.4

06 Sep 07:43
@xipki xipki
v5.3.4
d1912f6
Compare
Choose a tag to compare
v5.3.4
  • OCSP
    • Fixed bug "OCSP server cannot answer anymore" (this bug is introduced in 5.3.3)
  • SHA256 Checksum
    • a2a4dd4bd79ac94a11e52900cf34cc1cb22c3c26515e22c74d9da8a0dd98473c ca-war-5.3.4.zip
    • b5ea94862d1f410598d480b1588affad11ae9b0726689ca02ac08f21748e17bd ocsp-war-5.3.4.zip
    • 801d70c66438937196f5386163af461f6e9f900d14a851bfbc949416e992f422 p11proxy-war-5.3.4.zip
    • 87b94e57f87b45840b54ea421d0ae83dd525ffaa541e73de14e5e675aa75b275 xipki-cli-5.3.4.tar.gz
Assets 6
Loading

v5.3.3

08 Aug 00:32
@xipki xipki
v5.3.3
a443bac
Compare
Choose a tag to compare
v5.3.3
  • CA
    • Add feature to log the the HTTP requests and responses
    • Remove the extension authorityInfoAccess from the mandatory list
  • OCSP
    • Add feature to log the the HTTP requests and responses
    • Add option to configure how to handle expired CRLs:
      • Default or ignoreExpiredCrls=false: consider the last imported CRLs as valid.
      • ignoreExpiredCrls=true: return OCSP response tryLater.
  • SHA256 Checksum
    • e172f91b5c2e0f6da9d93449cbf79c59b5557147df0afbaf039d8f98f658dca3 ca-war-5.3.2.zip
    • c7f8fb961c7118b9c569156262de5db01ee8d54a23e750870a48575113eb4b8d ocsp-war-5.3.2.zip
    • 84617690f2b434030e38124aa7224f02e23245e522a7926b02393d5968cdfa51 p11proxy-war-5.3.2.zip
    • 5a48511ea1740010ab954a15c3174f3e20df99f400f0b5a06dba2d52e87e9cd6 xipki-cli-5.3.2.tar.gz
Assets 6
Loading

v5.3.2

04 Jul 21:26
@xipki xipki
v5.3.2
a908144
Compare
Choose a tag to compare
v5.3.2
  • CA
    • Use EXPLICIT tag for the GMT 0015 IdentityCode
    • Reduce the table size to make it loadable if the database has charset utf8mb4 in MySQL/MariaDB.
  • OCSP
    • Added configuration of OCSP responder for the store types xipki-db, ejbca and crl.
  • ALL
    • Remove the leading zero of DSA's P, Q and G in CK_DSA_PARAMS.
    • EC: use Object Identifer of a curve instead name if possible
    • EdDSA: use curveId instead of curveName in PKCS#11 keypair generation.
  • SHA256 Checksum
    • 9e54ef61f8f9f62c80944a5a8b6c49953d32249494ce0d53bcf12a2c9f8d5c21 ca-war-5.3.2.zip
    • 77fbf4ac95a194c56425d2eca89e920d82083d38ccd1c9734872abd94f141919 ocsp-war-5.3.2.zip
    • d3f0b0262f0ffde331fb8df849bc5355bb352f655fd35d23b1d23f151398953e p11proxy-war-5.3.2.zip
    • 8967bd70534d2c47abbe371dc6a149bb6575f400256bded7e8235abf35411924 xipki-cli-5.3.2.tar.gz
Assets 6
Loading

v5.3.1

10 Jun 14:22
@xipki xipki
v5.3.1
f2e9588
Compare
Choose a tag to compare
v5.3.1
  • CA
    • Replace the logging backend logback by log4j2.
    • Reintroduced the support of databases H2 and HSQLDB.
  • OCSP
    • Use stream parser to parse the CRL to get small memory usage even for very large CRLs.
    • Extend the OCSP store type "crl" to support multiple CRLs, even for the same CA.
    • Replace the logging backend logback by log4j2.
    • Reintroduced the support of databases H2 and HSQLDB.
  • SHA256 Checksum
    • db9463d8d332a2f89de3fd40781073ea1be06fbb2bb0c2081911681405fc0413 ca-war-5.3.1.zip
    • d1fed18822a97997d1c7ab068bae5eb6214d1914190349c7d475a6c55de8c7f4 ocsp-war-5.3.1.zip
    • 5909a306958b4193fb540475e1bd909508c8c81b037d3195eb19ef4fd59b114e p11proxy-war-5.3.1.zip
    • c9bcc664b63e2c25646be07eae6fcff6bc346c5bad169d70b1a9711b898605fa xipki-cli-5.3.1.tar.gz
Assets 6
Loading

v5.3.0

12 May 16:01
@xipki xipki
v5.3.0
6ae9a8a
Compare
Choose a tag to compare
v5.3.0
  • CA
    • Add support of RFC8410 (Edwards and Montgomery Curves).
    • Add REST API to enroll certificate whose keypair is generated by the CA
  • OCSP
    • Add support of Ed25519 and Ed448 as signature algorithm.
  • CLI
    • Add support to generate keypair, generate CSR, and enrol certificates of edwards and montgomery curves.
  • SHA256 Checksum
    • 0ca76e74f860c27567f9c0fa9f2f0650d021dc85b88c3620873601ad90009377 ca-war-5.3.0.zip
    • 5952220f7b2ab10d201c35dfcbcc1da3c3b4897a7eb9d3cb4f2a8b5470e9bde6 ocsp-war-5.3.0.zip
    • 0afe8b0b157d75e86476c65550f4829bf8117fdd59a2775298907c7fffb042da p11proxy-war-5.3.0.zip
    • 857b497d2e6c38d01e257a7cb172530350c26242a6abad325ba8a666ac6854d1 xipki-cli-5.3.0.tar.gz
Assets 6
Loading

v5.2.0

27 Apr 16:25
@xipki xipki
v5.2.0
e769943
Compare
Choose a tag to compare
v5.2.0
  • CA
    • New feature to configure fixed value of subject RDN in the certificate profile
    • Make sure that the certificate serial number is randomly generated with at least 70 bit entropy and not weak by checking the NAF weight.
    • In the extension CertificatePolicies, the OID for User Notice is not correct. This has been fixed.
    • Add the management of the certificate of parenet CAs for given CA
    • Extension AuthorityKeyIdentifier embeds both KeyIdentifier and (authorityCertIssuer, authorityCertSerialNumber) in case of incorrect configuration. However exactly one of them is allowed. This has been fixed.
    • Add the native support of jurisdictionOfIncorporationCountryName, jurisdictionOfIncorporationLocalityName and jurisdictionOfIncorporationStateOrProvinceName
    • Add the native support of extensions IdentityCode, InsuranceNumber, ICRegistrationNumber, OrganizationCode and TaxationNumber defined in the chinese standard GM/T 0015
    • Add support of specification of extension admission in subject
    • Add CA/Browser certificate profiles.
    • Add support of Certificate Transparency (RFC 6962)
    • Increase the max. size of a certificate from 3000 to 4500 bytes.
  • OCSP
    • Add the configuration of OCSP response behaviour for unknown certificate
    • The OCSP cacher exhausts the database connections. This has been fixed.
  • CLI
    • Extend the command csr-p11 and csr-p12 to generate CSR with complex subject and extensions
    • Simplify and extend the configuration of custom extension
  • SHA256 Checksum

    • b520c038deb2e29c7b2571523081331a709bd2fd1dd8da9af8a3b7dba58fa4a8 ca-war-5.2.0.zip

    • 60570275085f1d5b6b616bac26387f6d19665d289c7a2529e2655f4cca2c1dcb ocsp-war-5.2.0.zip

    • cdde370abe5b1909bab83002f77824fcd7b127fe55476f07ad503f9686a551e7 p11proxy-war-5.2.0.zip

    • fb13fdf5681f1daab3fb20294fa0b5df0856d2826da294718a8b29dd66cc2fce xipki-cli-5.2.0.tar.gz

Assets 6
Loading

v5.1.0

17 Mar 22:13
@xipki xipki
v5.1.0
677aac0
Compare
Choose a tag to compare
v5.1.0
  • Fixed Bugs
    • If ca.war and ocsp.war are both in one tomcat instance, and one war cannot be started, the other too.
  • Enhancements
    • Relax the limitation of OCSP response in HTTP GET
    • New feature to add NextUpdate to OCSP Response, even if no NextUpdate is available. This is configurable.
    • Optimize the mechanism to generate CRL
    • Add example modules to demonstrate how to extend XiPKI OCSP server to use customized certificate status source.
    • Better mechanism to handle emailAddress in Subject / SubjectAltName
    • Add support of OCSP certificate status source published by EJBCA
    • Simplify the specification of customized extension in certificate profile.
    • Add support of certificate status source based on the database of XiPKI CA.
  • SHA256 Checksum
    • fd585f05ce1e8da62842447c47fe28c5c350a6e0757f8828cc824c4e11831318 ca-war-5.1.0.zip
    • 90e39c80dd8d25f188687ce5ad082c06b5f9aba593ebebbc65b2f8323ed64bab ocsp-war-5.1.0.zip
    • b97a4b7f5cf7f12a83ad9b6a663a4d40442f3ea09cc39d33372790f6fdb4f2c9 p11proxy-war-5.1.0.zip
    • 876a21a69577606afad5d0f911ea5a24d700f3de6972adcc88a460ac3f2edbe8 xipki-cli-5.1.0.tar.gz
Assets 6
Loading

v5.0.1

17 Feb 21:12
@xipki xipki
v5.0.1
25755a1
Compare
Choose a tag to compare
v5.0.1
  • Fixed Bugs
    • Validity other than {num}'y' will not be handled correctly. This has been fixed.
    • The flag 'crlUpdateInProcess' is not set correctly. This has been fixed.
    • OCSP-server DbCertStatusStore logic to detect issuer changes is wrong. This has been fixed.
  • Enhancements
    • Increase the iteration count of PBKDF2 from 1000 to 10,000.
  • SHA256 Checksum
    • 4d579056d94b14ee8650f25d5d2c5a8014c23a1898ba7c01b2600cb021c40ddf ca-war-5.0.1.zip
    • aae8eeac7eaaa8433f2a6ae5ca4d0ecd30e113eaf7053866897768affc6bb528 ocsp-war-5.0.1.zip
    • 1d6c28264c328fbd61b49eba8cabc2de76a7a5db5bb019d928f8e4f11e8ac866 p11proxy-war-5.0.1.zip
    • 0586409b0731af674c7f25bb04fadc9597fe8c2ff6863496daa830f43591420f xipki-cli-5.0.1.tar.gz
Assets 6
Loading

v5.0.0

28 Dec 21:38
@xipki xipki
v5.0.0
5274d59
Compare
Choose a tag to compare
v5.0.0
  • Optimized the file operations
  • Merged modules
  • Change the distributions
    • CA: from stand-alone karaf based appication to WAR package.
    • OCSP: from stand-alone karaf based appication to WAR package.
    • SDK: replaced by xipki-cli
    • CLI: Command Line Interface. Introduced in version 5.0.0.
  • Merged classes
  • Change the specification format of certificate profile from XML to JSON
  • Change the configuration format of CA, OCSP, PKCS#11 module, CMP client from XML to JSON
  • Add the remote management of CA via REST API
  • Add the remote management of OCSP via REST API
Assets 6
Loading

v4.0.0

15 Sep 21:14
@xipki xipki
v4.0.0
da5d3db
Compare
Choose a tag to compare
v4.0.0
  • Checksum
    • d68f0da2c96500245f58ce64231878e2610248ea88c486065272a6601878fed0 xipki-toolkit-4.0.0.tar.gz
    • cd3ad5d6a60084f0b43e99817f4920e5123cfc64ef591b8b526ba37db1c1ae13 xipki-pki-4.0.0.tar.gz
    • 87c84bad4776100b9b0524254f0cc3f5f97d780d178f327235a0eec61e453fd0 xipki-sdk-4.0.0.tar.gz
Assets 5
Loading