[Ejbca-news] =?iso-8859-1?q?EJBCA_3=2E4=2E0_=2C_a=2Ek=2Ea_=22Libe?= =?iso-8859-1?q?rt=E9=2C_Egalit=E9=2C_Fraternit=E9=22=2C_released?=

[Tomas G. <ejb...@pr...>]

After an intense period of development and thorough testing, EJBCA 3.4.0 
is now released.

This is a major release with many new interesting features and framework 
improvements.
This release really shows that EJBCA is the Open Source Enterprise PKI.
Please visit http://www.ejbca.org/.

Noticable new features include:
- CMP (RFC4210 and RFC4211)
- XKMSv2
- Monitoring services
- More approvals (dual authentication)
- ECDSA CAs and clients
- Custom certificate extensions
- Custom DN and altName OIDs
- Possibility to retrieve PKCS7 response in ExtRA API

This release has also been tested extensively on Weblogic and Oracle 
(apart from the normal platforms), so we do not expect any regressions 
in this area.

Read the changelog for details.

For upgrade instructions, please se UPGRADE.

Because there are binary files in EJBCA_HOME/lib and many massive 
changes there is no patch file for upgrading
EJBCA 3.3.x to 3.4.0. Use the full package from EJBCA 3.4.0 and follow 
the upgrade instructions.

Important changes:
In EJBCA 3.4.0 the default ASN.1 string encoding for DNs are now UTF8. 
In EJBCA 3.3.x and earlier, the default encoding was
PrintableString, unless the character set forced the usage of UTF8 
(international characters).
Now DN components are always encoded as UTF8 (except for components that 
does not allow UTF8 such as C and SerialNumber).
See UPGRADE for information regarding upgrading from an old CA, and how 
the behaviour can be configured.

If you used to deploy with 'deploywithjbossservices', this is now done 
using the regular 'deploy', but you have to set an option
in conf/ejbca.properties.

Changes:
New Feature
* [ECA-97] - Possibility to dynamically configure new OtherNames in 
subjectAltName.
* [ECA-99] - Suport for CMP (rfc 4210)
* [ECA-251] - Email for certificate expiration warning
* [ECA-296] - New access rule to delete generated
* [ECA-297] - Simple approval function for RA
* [ECA-332] - Inital EJBCA WebService interface
* [ECA-346] - Monitoring Services Framework, mail on certificate expire
* [ECA-349] - Support custom OID fields in subject alternative names
* [ECA-359] - Allow validity override from requests
* [ECA-362] - Support for ECDSA signature keys
* [ECA-371] - Support CRLIssuer in crl distribution point
* [ECA-381] - Make DN components configurable, support custom OIDs
* [ECA-393] - CSV export of log entries from admin-GUI
* [ECA-394] - XKMS v2 Service
* [ECA-400] - Custom Certificate Extension framework

Improvement
* [ECA-30] - Unify DN and AltName handling
* [ECA-304] - Mail notification of new passwords without re-setting status
* [ECA-330] - Add access rule to access system configuration
* [ECA-333] - Improve Batch Tool functionality
* [ECA-335] - Printing of new and edited userdata
* [ECA-337] - Make reverse dn ordering easy configurable
* [ECA-339] - Move ejbca.properties to conf subdirectory to be able to 
split up different part in different files
* [ECA-341] - Approval Email notification
* [ECA-342] - Internal log and exception localization
* [ECA-343] - Key recovery should be approvable
* [ECA-344] - Deploy CRL creation service by setting a simple property
* [ECA-345] - Cache CA objects to avoid loading keystores often
* [ECA-355] - implement the withlimit flag in useradminsession.query
* [ECA-368] - Configurable order of unknown DN oids
* [ECA-372] - Allow multiple policy oids in certificates
* [ECA-377] - possibility to store certs on the card with Mozilla braowser
* [ECA-379] - Add dnQualifier as a DN component
* [ECA-382] - possibility to set public exponent when generating RSA 
keys for nCipher.
* [ECA-388] - Possibility to retrieve PKCS7 response in ExtRA API
* [ECA-391] - Release zip-file should unpack in directory with version 
number
* [ECA-392] - Improve Weblogic support for Weblogic 9.x.
* [ECA-396] - Support multiple email altnames using CLI
* [ECA-399] - Calculate certtype automatically in publishCACertificate

Task
* [ECA-327] - Make UTF8 encoding default in DNs (for new CAs)
* [ECA-351] - Upgrade XDoclet jars
* [ECA-401] - Change default java version to 1.5 when building EJBCA

Bug
* [ECA-299] - Changing CPS in profile does not save always
* [ECA-336] - Using reversed DN makes DN wrong in some places
* [ECA-352] - Language files must be placed under /tmp in Weblogic
* [ECA-386] - Not possible to revoke external CAs
* [ECA-406] - Changing log configuration gives NullpointerException when 
using other languages