Novell Developer Kit - Change Log: Novell Certificate Server Libraries for C

Change Log: Novell Certificate Server Libraries for C

October 17, 2007

Binaries:

Updated source code to the 3.3.0 version. New features include:

Support for the SHA-2 signing algorithm.

Support for forcing the acquisition of a new CRL rather than using a cached CRL during certificate chain validation.

Support for User and Server Self-Provisioning via new SecurityRightsLevel APIs.

The capability to require Write rights to operate the CA via new SecurityRightsLevel APIs.

The capability to allow any authenticated user to cause the CA to issue an emergency CRL via new SecurityRightsLevel APIs.

Support for the PKCS#8 Private Key type in the NPKIT PEM types.

Changes to support 64 bit versions.

A flag for NPKIGetServerInfo that is used to remotely start the Server Health Check.

A flag for NPKICreateDefaultCertificates, which will cause the default certificates to be re-created if the CA has changed.

Changed NPKICreateDefaultCertificates to automatically add subject alternative names when creating the default certificates.

APIs to configure the new KMO Export functionality which can export a KMO's certificates and private-key to the file system in a format consistent with Apache or OpenSSL Servers. (This functionality is not needed or available on NetWare.)

Various bug fixes.

Doc:

No changes.

Sample:

No changes.

October 11, 2006

Binaries:

Updated code to the 3.2.0 version.

Doc:

Updated documentation to reflect API version changes.
Refreshed HTML links to ensure all external documentation sites resolve.

Sample:

No changes.

March 1, 2006

Binaries:

Updated libraries to the 3.1.1 version.
Added debug libraries for the AIX, HP-UX, Linux and Solaris platforms.
Supplied Unix packages compatible with eDir 8.73 and eDir 8.8 (ex. for Linux, NOVLpkia.i386.rpm is for eDir 8.73 while novell-npkiapi.i386.rpm is for eDir 8.8).
Removed Novell Certificate Server binaries as these are updated in the Security Support Pack.

Doc:

Relocated summary listing of the Certificate Server APIs from the Overview to Getting Started section to resolve link problems.
Refreshed HTML links to ensure all external documentation sites resolve.
Documented the following new NPKIT functions:
- NPKIT_CacheAddElement
- NPKIT_CacheAddPKCS12Elements
- NPKIT_CacheClearAllElements
- NPKIT_CacheCreateContext
- NPKIT_CacheElementInfo
- NPKIT_CacheExportToPKCS12
- NPKIT_CacheFreeContext
- NPKIT_CacheRead
- NPKIT_CacheWrite
Fixed broken sample code links.
Updated Trademark information.

Sample:

No changes.

October 2005

Binaries:

No changes.

Doc:

Transitioned to revised Novell documentation standards.

Sample:

No changes.

March 2005

In addition to updating the readme and license.text files, the following changes were made:

Binaries:

No changes.

Doc:

Revised document to conform with requirements of Novell Forge for all Certificate Server for C documents.
Deprecated Subject Alternative Name Types and replaced with the revised General Name Type Extensions in NPKI and NPKIT libraries.
Added the NPKIT_x509 Certificate Invalidity Reason Flags.
Added NPKI_Version and NPKIT_Version values.

Sample:

No changes.

October 2004

Updated the license.txt file. In addition, the following changes were made:

Binaries:

No changes.

Doc:

Made technical corrections and fixed broken links.

Sample:

No changes.

June 2004

Made the following updates to the Novell Certificate Server Libraries for C (NCSLIB) software:

Binaries:

Rolled in the latest version of the 2.72.1 code, which includes all bug fixes for future releases.

Doc:

Made a few editorial revisions.

Sample:

No other changes.

February 2004

Rebuilt all downloads to include changes to license.txt and Readme files. For detailed changes for each download, see the following sections:

Binaries:

No other changes.

Doc:

No changes.

Made editorial revisions and fixed broken links.

Sample:

No other changes.

October 2003

Binaries:

Changed names from Certificiate Server Libraries to Novell Certificate Server Libraries for C.

Doc:

Updated for name change.

Sample:

Updated Readme.

June 2003

Completed major edit of all C libraries (NPKI and NPKIT) in documentation.

March 2003

In documentation, added a chapter explaining how to replace Novell Certificate Server Version 1 with Novell Certificate Server Version 2 and NPKIT API (both of which need to be updated from Version 1).

17 January 2003

Added two new Certificate Server API libraries:

Novell Certificate Server API Version 2 (NPKI) - A new cross platform, directory-centered public key management library that does not depend on a Novell Client.

Novell Public Key Infrastructure Toolbox (NPKIT) - A new cross platform, non-directory public key utility library.

These new libraries supercede the original Novell Certificate Server Library (Version 1) (NWPKI) and should be used together to provide the same functionality as the original API. None of the new APIs require the Novell Client. These new APIs should be used by all new applications, as well as existing applications that plan to use any of the new functionality.

Existing programs may retain backward compability by continuing to use the Novell Certificate Server Version 1 API. All future Certificate Server bug fixes and product enhancements will be incorporated into the new API libraries only.

September 2002

Updated the preface and concept chapters in documentation.

May 2002

Made the following changes:

Changed the designation of the functions from NWPKI to NPKI
Removed the functions that are not dependant on eDirectory and created a module for them called NPKIT
Renamed the original module to NPKIAPI and now it supports only eDirectory platforms

February 2002

Changed names from Novell Certificate Server to Certificate Server Libraries.

September 2001

Added four new root functions and structures to documentation.

June 2001

Expanded Certificate Server to include Certificate Revocation List (CRL) and certificate verification functionality.

February 2001

Updated import/export information in the documentation.

March 2000

Added 16 new Trusted Root functions. These functions allow you to create, find, and retrieve Trusted Roots and Trusted Root contexts. Additional functions allow you to match and verify subject certificates with issuer certificate credentials, as well as retrieve and decode certificates and their extended data.

Added support for the NWPKIUserExportKey in this updated API set.