| 1 | NEWS for OpenSC -- History of user visible changes |
|---|
| 2 | |
|---|
| 3 | Please also see doc/WhatsNew.html or |
|---|
| 4 | http://www.opensc-project.org/opensc/wiki/WhatsNew |
|---|
| 5 | |
|---|
| 6 | Also see the svn changelog using svn command |
|---|
| 7 | or doc/nonpersistent/ChangeLog. |
|---|
| 8 | |
|---|
| 9 | New in 0.11.5; 2008-07-31; Andreas Jellinghaus |
|---|
| 10 | * Apply security fix for cardos driver and extend pkcs15-tool to |
|---|
| 11 | test cards for the security vulnerability and update them. |
|---|
| 12 | * Build system rewritten (NOTICE: configure options was modified). |
|---|
| 13 | The build system can produce outputs for *NIX, cygwin and native |
|---|
| 14 | windows (using mingw). |
|---|
| 15 | * ruToken now supported. |
|---|
| 16 | * Allow specifying application name for data objects. |
|---|
| 17 | * Basic reader hotplug support. |
|---|
| 18 | * PC/SC library is dynamic linked no longer compile time dependency. |
|---|
| 19 | * PKCS#11 provider is now installed at LIBDIR/pkcs11 |
|---|
| 20 | * PKCS#11 - Number of virtual slots moved into configuration. |
|---|
| 21 | * PKCS#11 - Fix fork() compliance. |
|---|
| 22 | * make sign_with_decrypt hack configureable for siemens cards. |
|---|
| 23 | |
|---|
| 24 | New in 0.11.4; 2007-09-10; Andreas Jellinghaus |
|---|
| 25 | * Drop AC_LIB_LINKFLAGS for libltdl and aclocal/lib* files. |
|---|
| 26 | * New configure option to disable building nsplugin. |
|---|
| 27 | * Support Siemens CardOS initialized cards (signing with decryption) |
|---|
| 28 | * Add Siemens CardOS M4.2B support (experimental, don't have such a card) |
|---|
| 29 | * Support for AKIS cards added (partial so far) by GÃŒrer Ãzen. |
|---|
| 30 | * add aclocal/libassuan.m4 back so developers don't need assuan installed. |
|---|
| 31 | |
|---|
| 32 | New in 0.11.3; 2007-07-11; Andreas Jellinghaus |
|---|
| 33 | * added regression test for raw rsa (crypt0007). |
|---|
| 34 | * regression suite can now use installed binaries with --installed. |
|---|
| 35 | * update wiki export script (add images, fix links). |
|---|
| 36 | * look for ncurses and termcap in configure (in combination with readline). |
|---|
| 37 | * make lots of internal functions and variables static. |
|---|
| 38 | * fix 0 vs NULL in many places. fix ansi c style (void). |
|---|
| 39 | * avoid variable names used also as glibc function (random etc.). |
|---|
| 40 | * new code for deleting objects. |
|---|
| 41 | * special hack for firefox. |
|---|
| 42 | * suport for Athena APCOS cards added. |
|---|
| 43 | * piv driver now supports bigger rsa keys too. |
|---|
| 44 | |
|---|
| 45 | New in 0.11.2; 2007-05-04; Andreas Jellinghaus |
|---|
| 46 | * enabled pin caching by default (needed by regression suite and other apps). |
|---|
| 47 | disable this for highest security (but that breaks some applications). |
|---|
| 48 | * use max_send_size 255 / max_recv_size 256 bytes by default. |
|---|
| 49 | reduce this for some readers (e.g. scm) with t=0 cards. |
|---|
| 50 | * increase pin buffer size to allow longer pin codes. |
|---|
| 51 | * Windows Make.rules.mak improved to work with and w/o openssl and zlib |
|---|
| 52 | * Added --read-ssk-key option to pkcs15-tool (prints public key in ssh format) |
|---|
| 53 | * use pkg-config for finding openct, add --enable/disable-openct option |
|---|
| 54 | * use strlcpy function |
|---|
| 55 | * use new pkcs11.h from scute with an open source license |
|---|
| 56 | * add support for sha2 to pkcs15-crypt |
|---|
| 57 | * add piv-tool for managing piv cards |
|---|
| 58 | * add muscle driver (still work in progress) |
|---|
| 59 | * improved oberthur driver |
|---|
| 60 | * add support for pcsc v2 part10 (reader drivers with pinpad support) |
|---|
| 61 | * convert source files to utf-8 |
|---|
| 62 | |
|---|
| 63 | New in 0.11.1; 2006-05-30; Andreas Jellinghaus |
|---|
| 64 | * Fix version variable in win32 build files |
|---|
| 65 | * Update for piv pkcs#15 emulation |
|---|
| 66 | * Improved TCOS driver for Uni Giesen Card |
|---|
| 67 | * Handle size_t printf with "%lu" and (unsigned long) cast |
|---|
| 68 | * Add support for d-trust cards / improve micardo 2.1 driver |
|---|
| 69 | |
|---|
| 70 | New in 0.11.0; 2006-05-01; Andreas Jellinghaus |
|---|
| 71 | * compile fixes/improvements for windows |
|---|
| 72 | * document pkcs15-tool --unblock-pin option |
|---|
| 73 | * remove old and outdated documentation |
|---|
| 74 | * use "%lu" format for printf of size_t |
|---|
| 75 | * add piv driver and tool by Douglas E. Engert |
|---|
| 76 | * new threadding code in pkcs11 module |
|---|
| 77 | * renamed "etoken" driver to "cardos", as it really is a generic |
|---|
| 78 | driver for Siemens CardOS M4, including but not limited to Aladdin eTokens. |
|---|
| 79 | * add code to maange unused space |
|---|
| 80 | * support for swedish nidel cards |
|---|
| 81 | |
|---|
| 82 | New in 0.10.1; 2006-01-08; Andreas Jellinghaus |
|---|
| 83 | * use sc_print_path everywhere. |
|---|
| 84 | * silence many warnings. |
|---|
| 85 | * add incrypto34 driver by ST Incard, Giuseppe Amato |
|---|
| 86 | * improved TCOS driver by Peter Koch |
|---|
| 87 | * better PINPAD handling |
|---|
| 88 | * updated infocamere driver |
|---|
| 89 | * updated opensc.conf with new default values |
|---|
| 90 | * fix firefox problems (no real fix, only ugly workaround) |
|---|
| 91 | * add cardos M4.2 support |
|---|
| 92 | |
|---|
| 93 | New in 0.10.0; 2005-10-31; Andreas Jellinghaus |
|---|
| 94 | * released rc2 without changes. |
|---|
| 95 | * Add more documentation, fix man page installtion. |
|---|
| 96 | * New generic ATR/card matching code with |
|---|
| 97 | atrmask support, used by all card drivers. |
|---|
| 98 | * Much improved and unified ATR handling in |
|---|
| 99 | the configuration file. |
|---|
| 100 | * Support for the next generation FinEID cards |
|---|
| 101 | with ISO/IEC 7816-15 data layout. |
|---|
| 102 | * Preliminary code merge with the Belgian |
|---|
| 103 | Belpic EID project. |
|---|
| 104 | * Experimental multi-slot support for CT-API |
|---|
| 105 | and dynamic loading support for win32. |
|---|
| 106 | Thanks to Bernhard Froehlich <ted@convey.de> |
|---|
| 107 | * Experimental Class 2 pinpad reader support |
|---|
| 108 | via TeleTrust compatible PC/SC interface. |
|---|
| 109 | * Fixed OpenSSL behaviour in the configure |
|---|
| 110 | script. |
|---|
| 111 | * PKCS#15 emulation layer improvements and |
|---|
| 112 | a new driver for the Italian postecert |
|---|
| 113 | card. |
|---|
| 114 | * New API documentation and generic documentation |
|---|
| 115 | structure renovation to base future work on. |
|---|
| 116 | Many thanks to Bert Vermeulen <bert@biot.com> |
|---|
| 117 | * Spanish manual translation from opensc-ceres |
|---|
| 118 | project merged. |
|---|
| 119 | * Several memory leaks and other bugs fixed. |
|---|
| 120 | |
|---|
| 121 | New in 0.9.6; 2005-04-25; Andreas Jellinghaus: |
|---|
| 122 | * undo user_content changes to retain compatibility with 0.9.4. |
|---|
| 123 | * add solaris/ files for easier installation on solaris. |
|---|
| 124 | * Makefile.am: require automake 1.5 |
|---|
| 125 | * free() fixes in some card drivers. |
|---|
| 126 | * fix autoconf configure code. |
|---|
| 127 | |
|---|
| 128 | New in 0.9.5; 2005-01-11; Andreas Jellinghaus: |
|---|
| 129 | * Big rewrite of the autoconf code for openssl. This fixes bugs on Mac OS X |
|---|
| 130 | and we hope it doesn't break any other system. Feedback is very welcome. |
|---|
| 131 | * The flags object attribute changed to a bitfield. |
|---|
| 132 | * Many small bugfixes, including memory leaks. |
|---|
| 133 | * Changes to the etoken and gpk profiles to eleminate overlapping file ids. |
|---|
| 134 | * pinpad code by Martin Paljak |
|---|
| 135 | * add user_consent parameter to pkcs15emu add object/add prkey functions. |
|---|
| 136 | * estid provide user_consent parameter. |
|---|
| 137 | * add fflush to pkcs11-spy.c |
|---|
| 138 | * set version in configure.in, src/pkcs11/pkcs11-global.c, |
|---|
| 139 | win32/version.rc and src/include/winconfig.h |
|---|
| 140 | |
|---|
| 141 | New in 0.9.4; 2004-10-31; Andreas Jellinghaus: |
|---|
| 142 | * Library version was broken in 0.9.3. |
|---|
| 143 | * Update library version to 1:0:0, as we are no longer |
|---|
| 144 | compatible with the 0:*:* line, I fear. |
|---|
| 145 | |
|---|
| 146 | New in 0.9.3; 2004-10-31; Andreas Jellinghaus: |
|---|
| 147 | * Fix some LDFLAGS/LDADD issues for parallel build. |
|---|
| 148 | |
|---|
| 149 | New in 0.9.2; 2004-07-24; Andreas Jellinghaus: |
|---|
| 150 | * This is an beta test version. Please be careful. |
|---|
| 151 | Do not use in production environments. |
|---|
| 152 | * Fix sslengine, link those dynamically with libcrypto |
|---|
| 153 | for openssl 0.9.7d and later. |
|---|
| 154 | * Fixed small bug in pkcs11-tool |
|---|
| 155 | * Link pkcs11-tool and pkcs15-crypt with -lcrypto |
|---|
| 156 | * New driver for estonian ID card. |
|---|
| 157 | * Bumped version number to opensc 0.9.2 |
|---|
| 158 | * New card supported: Oberthur AuthentIC v5 |
|---|
| 159 | * Pam_opensc's eid module now checks permissions, |
|---|
| 160 | and supports several certificates in |
|---|
| 161 | ~/.eid/authorized_certificates |
|---|
| 162 | Thanks to Fritz Elfert <fritz.elfert@millenux.com> |
|---|
| 163 | * Upgrade library version to 0.9, since incompatible changes |
|---|
| 164 | are very likely somewhere. |
|---|
| 165 | * Merged several pkcs15 profiles into one with different |
|---|
| 166 | options. |
|---|
| 167 | |
|---|
| 168 | New in 0.8.1; 2003-09-30; Olaf Kirch: |
|---|
| 169 | * Upgrade libopensc versioning, hasn't been |
|---|
| 170 | accidently upgraded since 0.6.0 release |
|---|
| 171 | * MacOS X specific changes: |
|---|
| 172 | - Allow to compile without PC/SC support |
|---|
| 173 | - Bundle installation fixes |
|---|
| 174 | - OpenSSL engine linking fixed |
|---|
| 175 | - Renamed OpenSC PKCS#11.bundle to |
|---|
| 176 | opensc-pkcs11.bundle |
|---|
| 177 | - CT-API module loading support |
|---|
| 178 | * libopensc: |
|---|
| 179 | - Renamed sysdep_timestamp_t to sc_timestamp_t |
|---|
| 180 | - Renamed debug/error functions to sc_debug/sc_error |
|---|
| 181 | - Don't DER-en/decode the data in a pkcs15 object |
|---|
| 182 | - Portability fixes for the OpenCT reader driver |
|---|
| 183 | * libscconf: Fixed CRLF parsing for UNIX platforms |
|---|
| 184 | * Added PKCS#11 spy module by Mathias Brossard |
|---|
| 185 | * Other minor bug/build fixes and cleanups |
|---|
| 186 | |
|---|
| 187 | New in 0.8.0; 2003-08-15; Juha YrjölÀ: |
|---|
| 188 | * New and/or improved card drivers: |
|---|
| 189 | Aladdin eToken, MICARDO 2 and STARCOS |
|---|
| 190 | * New reader driver: OpenCT (Olaf's framework) |
|---|
| 191 | * Improved support for win32 and MacOS X. |
|---|
| 192 | * PKCS #11 stuff improved massively |
|---|
| 193 | * Added PKCS #11 and native OpenSC engine drivers |
|---|
| 194 | for OpenSSL |
|---|
| 195 | * Added support for reading the PIN from the PIN keypad |
|---|
| 196 | of a reader |
|---|
| 197 | * New manpages |
|---|
| 198 | * Loads of other improvements and bug-fixes |
|---|
| 199 | |
|---|
| 200 | New in 0.7.0; 2002-06-03; Juha YrjölÀ: |
|---|
| 201 | * Support for config files |
|---|
| 202 | * Yet another PKCS #15 generation rewrite |
|---|
| 203 | * PAM module rewritten for more flexibility and compatibility |
|---|
| 204 | * OpenSC Signer merged to the main source tree |
|---|
| 205 | * CT-API support |
|---|
| 206 | * Support for non-native RSA and DSA keys |
|---|
| 207 | * Improved support for MioCOS cards by Miotec (http://www.miotec.fi) |
|---|
| 208 | * Semi-working support for Aladdin eToken PRO |
|---|
| 209 | * First version to work with OpenSSH without any patching |
|---|
| 210 | |
|---|
| 211 | New in 0.6.1; 2002-03-20; Juha YrjölÀ: |
|---|
| 212 | * Fixed certificate downloading in pkcs15-init |
|---|
| 213 | * Improved PKCS #11 module, so it works with Mozilla 0.9.9 and |
|---|
| 214 | is capable of signing and decrypting mails in Netscape |
|---|
| 215 | * Other various small fixes and improvements |
|---|
| 216 | |
|---|
| 217 | New in 0.6.0; 2002-03-13; Juha YrjölÀ: |
|---|
| 218 | * Many, many new features -- too many to list here |
|---|
| 219 | * New cards supported: Gemplus GPK family, TCOS 2.0, MioCOS |
|---|
| 220 | * Implemented a card reader abstraction layer |
|---|
| 221 | * PKCS #15 generation rewritten by Olaf Kirch. So far generation |
|---|
| 222 | is supported only on GPK and Cryptoflex. |
|---|
| 223 | |
|---|
| 224 | New in 0.5.0; 2002-01-24; Juha YrjölÀ: |
|---|
| 225 | * PKCS #15 generation support |
|---|
| 226 | * PKCS #11 module almost completely rewritten |
|---|
| 227 | * Implemented opensc-explorer; a tool for browsing and modifying |
|---|
| 228 | the card file system |
|---|
| 229 | * Almost complete support for Cryptoflex 16k; implemented cryptoflex-tool |
|---|
| 230 | * Started writing some API documentation using Doxygen |
|---|
| 231 | * Much improved object handling code in PKCS #15 framework |
|---|
| 232 | * Lots of bugs fixed, lots of new ones introduced |
|---|
| 233 | |
|---|
| 234 | New in 0.4.0; 2001-12-29; Juha YrjölÀ: |
|---|
| 235 | * Finished migrating to Autotools |
|---|
| 236 | * Rewritten ASN.1 decoder (should work better on all PKCS #15 cards) |
|---|
| 237 | * Abstracted card handling, so adding support for new cards is a whiz, |
|---|
| 238 | 'opensc-tool -D' will list all installed drivers. |
|---|
| 239 | * Added colored debug and error output ;) |
|---|
| 240 | * Fixed some memory leaks |
|---|
| 241 | * Support for Swedish Posten eID cards |
|---|
| 242 | * Added very preliminary support for EMV compatible cards and Multiflex |
|---|
| 243 | cards by Schlumberger |
|---|
| 244 | |
|---|
| 245 | New in 0.3.5; 2001-12-15; Juha YrjölÀ: |
|---|
| 246 | * Now compiles with C++ |
|---|
| 247 | * Added card reset detection |
|---|
| 248 | * Fixed PIN code changing |
|---|
| 249 | * Improved certificate caching |
|---|
| 250 | |
|---|
| 251 | New in 0.3.2; 2001-11-27; Juha YrjölÀ: |
|---|
| 252 | * Converted to Autotools. |
|---|
| 253 | |
|---|