The fifth beta of NewPKI 2.0 is now available. Beware, it's not possible to uprade from beta3, you will have to destroy your previously created PKI. Next version will be able to upgrade from beta4.
The full ChangeLog is available on NewPKI's site. The main changes are: - Added support for DN access in extensions. ex. subjectAltName=email:emailAddress:move. The supported actions are move and copy. - Improved the entities' links verification algorithm. (Wolf) - When creating a PKI User certificate, if the private key is of software kind, it's now generated on server side, and a PKCS#12 is sent back to the user. - Improved the inter-repositories configuration synchronization algorithm, the number of connections used to be n*(n-1) where n is the number of repositories, now it is much less. - Fixed a few memory leaks in the repositories. - Improved the synchronization algorithm for a firewalled repository. - Now using SSL sessions cache, to improve performances. - When inserting a profile and the owner is a group, validating that the group exists. - Added the possibility to change a profile's LDAP UID. - Added the possibility to change a profile's Owner. - Added the possibility to change a profile's DN. - Added the possibility to delete a profile and all its associated certificates. - Upgraded to openssl 0.9.7d. - Encapsulated all the ASN1 structures used by NewPKI into classes, this will greatly improve the security of NewPKI, and help the code maintenance. - When an entity fails to load it's now displayed into the Server GUI, which will allow it to be removed if necessary. - Removed a deadlock in ReadersWriter. - Rewrote the full synchronization algorithm for repositories, the old one wasn't adapted to a large number of data. - Added the possibility to view from the RA the end-user certificate as a PKCS#7. - Added the possibility to view the CA certificate as a PKCS#7. - Added automatic database reconnection (Erik Anderson). Regards, -- Fr�d�ric Giudicelli http://www.newpki.org _____________________________________________________________________ NewPKI http://www.newpki.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
