[Botan-announce] Botan 1.1.9

[Jack L. <ll...@ac...>]

This release is fairly minor, the major change is there is now support for
reading X.509 CRLs (they cannot be produced yet, probably that will come in
the next release). There were also some fixes in the path validation
algorithm, and in the name comparison algorithm.

Note that the X.500 name comparsion algorithm only works on simple cases
(ie it won't work on T.61 strings or UTF-8 strings, though in both of these
cases Botan will outright reject the certificate so it's not an actual
probably yet). Also, gcc < 3.0 doesn't have a working <cctype> header; on
those systems a simple (non-compliant) name comparison method will be used.
This probably won't be a problem in practice, as most other software also
uses the simple method.

If you're using X.509 certificates with Botan, I would recommend you
upgrade to this release, as the bugs in the path validation algorithm have
potential security implications.

Other than that, there were some code cleanups which probably don't really
affect anything, and some documentations updates to reflect the new CRL
stuff (though CRLs are not fully documented yet). If you want to start
reading CRLs immediately and don't know where to start, the x509test
package shows how to read and process them.

-Jack