ejbca-news

[Tomas G. <to...@pr...>]

Hi,

We are pleased to announce the release of EJBCA Community
version 6.0.4.

This is a maintenance release with new features, improvements and bug fixes.
In all 53 issues have been fixed, including all issues reported by the 
community for EJBCA 6.0.3.

One of the fixes is a security fix. The security issue is rated as low, 
and can lead to excessive CPU usage, if exposed to untrusted networks.
This issue was due to a bug in an Apache library we are using.

* Noteworthy changes:

- Support for Certificate Transparency, RFC6962 (EJBCA Enterprise only).
- Support for JBoss EAP 6.2 that changed default behaviour when creating 
datasources.
- SCEP GetCACaps command now works from iOS.
- Ensure that OCSP RFC5019 responses with nonces are not cached.
- Minor Command Line improvement.
- Fixed most issues reported from installations of EJBCA 6.0.3.

You can find the complete changelog in our issue tracker:
https://jira.primekey.se/secure/ReleaseNote.jspa?projectId=10000&version=10647

*  Known issues:
- One test failure on DB2: https://jira.primekey.se/browse/ECA-3298
- OCSP request signer verification does an additional database lookup: 
https://jira.primekey.se/browse/ECA-3299
- Deployment on Windows does not work due to jboss-cli.bat arguments 
differing from jboss-cli.sh (half fixed, some remaining)

Regards,
PrimeKey EJBCA Team