[ldap-sdk-announce] UnboundID LDAP SDK for Java 6.0.8

[Neil W. <nei...@pi...>]

We have just released version 6.0.8 of the UnboundID LDAP SDK for Java
<https://github.com/pingidentity/ldapsdk>. It is available for download
from GitHub <https://github.com/pingidentity/ldapsdk/releases> and
SourceForge <https://sourceforge.net/projects/ldap-sdk/files/>, and it is
available in the Maven Central Repository
<https://central.sonatype.com/artifact/com.unboundid/unboundid-ldapsdk/6.0.8>
.

Note that this is the last release for which the LDAP SDK source code will
be maintained in both the GitHub and SourceForge repositories. The LDAP SDK
was originally hosted in a subversion repository at SourceForge, but we
switched to GitHub as the primary repository a few years ago. We have been
relying on GitHub’s support for accessing git repositories via subversion
to synchronize changes to the legacy SourceForge repository, but that
support is being discontinued. The SourceForge project will continue to
remain available for the discussion forum
<https://sourceforge.net/p/ldap-sdk/discussion/1001257/>, mailing lists
<https://sourceforge.net/p/ldap-sdk/mailman/>, and release downloads
<https://sourceforge.net/projects/ldap-sdk/files/>, but up-to-date source
code will only be available on GitHub.

You can find the release notes for the 6.0.8 release (and all previous
versions) at https://docs.ldap.com/ldap-sdk/docs/release-notes.html, but
here’s a summary of the changes:


   -

   We added a DN.getDNRelativeToBaseDN method that can be used to retrieve
   the portion of DN that is relative to a given base DN (that is, the portion
   of a DN with the base DN stripped off). For example, if you provide it with
   a DN of “uid=test.user,ou=People,dc=example,dc=com” and a base DN of “
   dc=example,dc=com”, then the method will return “uid=test.user,ou=People
   ”.



   -

   We added LDAPConnectionPool.getServerSet and
   LDAPThreadLocalConnectionPool.getServerSet methods that can be used to
   retrieve the server set that the connection pool uses to establish new
   connections for the pool.



   -

   We updated the Filter class to alternative methods with shorter names
   for constructing search filters from their individual components. For
   example, as an alternative to calling the Filter.createANDFilter method
   for constructing an AND search filter, you can now use Filter.and, and
   as an alternative to calling Filter.createEqualityFilter, you can now
   use Filter.equals. The older versions with longer method names will
   remain available for backward compatibility.



   -

   We added support for encrypted PKCS #8 private keys, which require a
   password to access the private key. The PKCS8PrivateKey class now
   provides methods for creating the encrypted PEM representation of the key,
   and the PKCS8PEMFileReader class now has the ability to read encrypted
   PEM files. We also updated the manage-certificates tool so that the
   export-private-key and import-certificate subcommands now support
   encrypted private keys.



   -

   We updated PassphraseEncryptedOutputStream to use a higher key factory
   iteration count by default. When using the strongest available 256-bit AES
   encryption, it now follows the latest OWASP recommendation of 600,000
   PBKDF2 iterations. You can still programmatically explicitly specify the
   iteration count when creating a new output stream if desired, and we have
   also added system properties that can override the default iteration count
   without any code change.



   -

   We added a PassphraseEncryptedOutputStream constructor that allows you
   to provide a PassphraseEncryptedStreamHeader when creating a new
   instance of the output stream. This will reuse the secret key that was
   already derived for the provided stream header (although with newly
   generated initialization vector), which can be significantly faster than
   deriving a new secret key from the same passphrase.



   -

   We added a new ObjectTrio utility class that can be useful in cases
   where you need to reference three typed objects as a single object (for
   example, if you want a method to be able to return three objects without
   needing to define a new class that encapsulates those objects). This
   complements the existing ObjectPair class that supports two typed
   objects.



   -

   We updated the documentation to include RFC 9371
   <https://docs.ldap.com/specs/rfc9371.txt> in the set of LDAP-related
   specifications. This RFC formalizes the process for requesting a private
   enterprise number (PEN) to use as the base object identifier (OID) for your
   own definitions (e.g., for use in defining custom attribute types or object
   classes). The OID-related documentation has also been updated to provide a
   link to the IANA site
   <https://www.iana.org/assignments/enterprise-numbers/> that you can use
   to request an official base OID for yourself or your organization.



   -

   We updated the documentation to include the latest revisions of
   draft-howard-gssapi-aead
   <https://docs.ldap.com/specs/draft-howard-gssapi-aead-01.txt>,
   draft-ietf-kitten-scram-2fa
   <https://docs.ldap.com/specs/draft-ietf-kitten-scram-2fa-02.txt>,
   draft-melnikov-scram-bis
   <https://docs.ldap.com/specs/draft-melnikov-scram-bis-02.txt>, and
   draft-reitzenstein-kitten-opaque
   <https://docs.ldap.com/specs/draft-reitzenstein-kitten-opaque-02.txt> in
   the set of LDAP-related specifications.

-- 
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged 
material for the sole use of the intended recipient(s). Any review, use, 
distribution or disclosure by others is strictly prohibited.  If you have 
received this communication in error, please notify the sender immediately 
by e-mail and delete the message and any file attachments from your 
computer. Thank you._