1 These are NEWS entries from the old separate dirmngr package
3 Noteworthy changes in version 1.1.0 (unreleased)
4 ------------------------------------------------
6 * Fixed a resource problem with LDAP CRLs.
8 * Fixed a bad EOF detection with HTTP CRLs.
10 * Made "dirmngr-client --url --load-crl URL" work.
12 * New option --ignore-cert-extension.
14 * Make use of libassuan 2.0 which is available as a DSO.
17 Noteworthy changes in version 1.0.3 (2009-06-17)
18 ------------------------------------------------
20 * Client based trust anchors are now supported.
22 * Configured certificates with the suffix ".der" are now also used.
24 * Libgcrypt 1.4 is now required.
27 Noteworthy changes in version 1.0.2 (2008-07-31)
28 ------------------------------------------------
30 * New option --url for the LOOKUP command and dirmngr-client.
32 * The LOOKUP command does now also consults the local cache. New
33 option --cache-only for it and --local for dirmngr-client.
35 * Port to Windows completed.
37 * Improved certificate chain construction.
39 * Support loading of PEM encoded CRLs via HTTP.
42 Noteworthy changes in version 1.0.1 (2007-08-16)
43 ------------------------------------------------
45 * The option --ocsp-signer may now take a filename to allow several
46 certificates to be valid signers for the default responder.
48 * New option --ocsp-max-period and improved the OCSP time checks.
50 * New option --force-default-signer for dirmngr-client.
55 Noteworthy changes in version 1.0.0 (2006-11-29)
56 ------------------------------------------------
58 * Bumbed the version number.
60 * Removed included gettext. We now require the system to provide a
61 suitable installation.
64 Noteworthy changes in version 0.9.7 (2006-11-17)
65 ------------------------------------------------
69 * Fixed updating of DIR.txt. Add additional diagnostics.
71 * Updated gettext package.
74 Noteworthy changes in version 0.9.6 (2006-09-04)
75 ------------------------------------------------
77 * A couple of bug fixes for OCSP.
79 * OCSP does now make use of the responder ID and optionally included
80 certificates in the response to locate certificates.
82 * No more lost file descriptors when loading CRLs via HTTP.
84 * HTTP redirection for CRL and OCSP has been implemented.
86 * Man pages are now build and installed from the texinfo source.
89 Noteworthy changes in version 0.9.5 (2006-06-27)
90 ------------------------------------------------
92 * Fixed a problems with the CRL caching and CRL certificate
95 * Improved diagnostics.
98 Noteworthy changes in version 0.9.4 (2006-05-16)
99 ------------------------------------------------
101 * Try all names of each crlDP.
103 * Don't shutdown the socket after sending the HTTP request.
106 Noteworthy changes in version 0.9.3 (2005-10-26)
107 ------------------------------------------------
112 Noteworthy changes in version 0.9.2 (2005-04-21)
113 ------------------------------------------------
115 * Make use of authorityKeyidentifier.keyIdentifier.
117 * Fixed a possible hang on exit.
120 Noteworthy changes in version 0.9.1 (2005-02-08)
121 ------------------------------------------------
123 * New option --pem for dirmngr-client to allow requesting service
124 using a PEM encoded certificate.
126 * New option --squid-mode to allow using dirmngr-client directly as a
132 Noteworthy changes in version 0.9.0 (2004-12-17)
133 ------------------------------------------------
135 * New option --daemon to start dirmngr as a system daemon. This
136 switches to the use of different directories and also does
137 CRL signing certificate validation on its own.
139 * New tool dirmngr-client.
141 * New options: --ldap-wrapper-program, --http-wrapper-program,
142 --disable-ldap, --disable-http, --honor-http-proxy, --http-proxy,
143 --ldap-proxy, --only-ldap-proxy, --ignore-ldap-dp and
146 * Uses an external ldap wrapper to cope with timeouts and general
149 * SIGHUP may be used to reread the configuration and to flush the
152 * An authorithyKeyIdentifier in a CRL is now handled correctly.
155 Noteworthy changes in version 0.5.6 (2004-09-28)
156 ------------------------------------------------
162 * Updated some configuration files.
165 Noteworthy changes in version 0.5.5 (2004-05-13)
166 ------------------------------------------------
168 * Fixed the growing-dir.txt bug.
170 * Better LDAP error logging.
173 Noteworthy changes in version 0.5.4 (2004-04-29)
174 ------------------------------------------------
176 * New commands --ocsp-responder and --ocsp-signer to define a default
177 OCSP reponder if a certificate does not contain an assigned OCSP
181 Noteworthy changes in version 0.5.3 (2004-04-06)
182 ------------------------------------------------
184 * Basic OCSP support.
187 Noteworthy changes in version 0.5.2 (2004-03-06)
188 ------------------------------------------------
190 * New Assuan command LISTCRLS.
192 * A couple of minor bug fixes.
195 Noteworthy changes in version 0.5.1 (2003-12-23)
196 ------------------------------------------------
198 * New options --faked-system-time and --force.
200 * Changed the name of the cache directory to $HOMEDIR/dirmngr-cache.d
201 and renamed the dbcontents file. You may delete the now obsolete
202 cache/ directory and the dbcontents file.
204 * Dropped DB2 or DB4 use. There is no need for it because a constant
205 database fits our needs far better.
207 * Experimental support for retrieving CRLs via http.
209 * The --log-file option may now be used to print logs to a socket.
210 Prefix the socket name with "socket://" to enable this. This does
211 not work on all systems and falls back to stderr if there is a
212 problem with the socket.
215 Noteworthy changes in version 0.5.0 (2003-11-17)
216 ------------------------------------------------
218 * Revamped the entire thing.
220 * Does now require Libgcrypt 1.1.90 or higher, as well as the latest
221 libksba and libassuan.
223 * Fixed a bug in the assuan inquire processing.
226 Noteworthy changes as of 2002-08-21
227 ------------------------------------
229 * The default home directory is now .gnupg
232 Copyright 2003, 2004, 2005 g10 Code GmbH
234 This file is free software; as a special exception the author gives
235 unlimited permission to copy and/or distribute it, with or without
236 modifications, as long as this notice is preserved.
238 This file is distributed in the hope that it will be useful, but
239 WITHOUT ANY WARRANTY, to the extent permitted by law; without even the
240 implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.