Release notes: ============== Date : 15.06.2016   Version : 4.0.8 Revision : 5447 DigiSign Client changes: ======================== - IAS-ECC Tempoary card initialization; Removed 'needs padding' bit - Cryptoki event handling / refresh token bug fix - Toolkit; Added DS3 startManager implementation - SCS; Added PKCS#7 detached signature - Added support for pkcs#7 detached signature - Toolkit; Authenticate() uses PIN-Cache with the same logic than other verifiers - Toolkit; Authenticate/VerifyPIN; If PIN is empty, show pin query dialog - Windows settings; registry node Wow6432Node removed; 32-bit application on 64-bit OS reads settings from 64-bit registry branch - Toolkit; IsSmartCardPresent, IsPresent fix - DSApplication; PIN cache clear fix caused by desktop locked state - DSToolkit; DS3 pinNumber enumeration fix; Affected functions VerifyPIN, ChangePIN, UnblockPIN - Toolkit; Added CMPRequestCertificate function - DigiSign Application; Added 50 second timeout to close dialogs if left open - Toolkit; TransmitCMPMessage and SValue fixes - Toolkit; Added missing GetSValueRecordCount and cmpProtectionHash type 4.0.4: ====== - DSApp; WebSigner parsing fix; Effected DSApp versions; 4.0.2 & 4.0.3 - Windows installer package signed with SHA256 hash 4.0.3: ====== - DSApp & Windows; Session notifier fix to work better with RDP sessions - SCardGetStatusChange/SCARD_READERSTATE fix that caused problems when using RDP client 6.0 or newer - Toolkit; SelectSmartCardReader fix to return selected reader in the case of multiple readers - Added following DS3 functions: - - FindFirst_NR_Certificate, FindNext_DS_Certificate - - Compute_Signature, Compute_DS_Signature, Compute_nonRepudiation_Signature, Compute_XML_Signature - - Verify_Signature, Verify_Signature_and_GetSignerCert - - mPolluxAuthenticateWithoutProxy - - GetReaderEx - - VerifyPIN, ChangePIN, UnblockPIN - - Initialize, InitializeEx - ECC key loading fix - WebSigner content loading fix (that caused 'Signature request was invalid and therefore rejected') error - OSX; Directories moved from /tmp/.digisign to /Library/Preferences/mPolluxDigiSign and /Library/Logs/mPollux - Windows installer; Added missing x64 cryptoki.dll - WebHandler; Compute XML signature bug fix - Added pkcs7 and xml signers to SCS; Input type 'data' is only supported - IPC client; Added 1 minute timeout if server hander jams (windows only) - Toolkit; Modified to be more compliant with old implementations 4.0.2: ====== - SSL/TLS client fix if server doesn't support any suggested protocols - Translation fixes - Toolkit; DS3 compliant callback event fix - Translation fixes 4.0.1: ====== - SCS error message fix in the case when no matching user certificates available - SCS; Added support for SHA224 and SHA384 hash functions - SCS; Return "400, Operation failed" if function fails after successful authentication - SCS; Added information dialog if no suitable certificates found - Secure socket client "stored session negotiation" bug fix - Added OSX 10.11 support - Added DigiSign_Toolkit.dll windows return code mapper - WebSigner; Digest algorithm moved back from sha256 to sha1 because of compatibility reasons - Added 'steel' background - Added more DigiSign 3.X compatible toolkit functions - Added application label from EF(DIR) to reader selection dialog - Automate authentication logic fix - Card removed event fix; Remove certificates when only one certificate exists - Added tokenLabel into card reader selection list - GUIClient::Authenticate() fix; Continue querying if authentication result allows retry - httpToolkit fix; Show card selection dialog if TokenIf is not defined and more than one cards available - Added more Dynamic script language variations (fi,sv,en) - CCryptoLib; Parser #include fix - DigiSignApplication; Default include script location is "SmartCardCachePath" - DigiSignApplication crash fix while removing reader when authentication dialog is open - Added 'pinNumericValuesOnly' setting - Added logout text to https/client authentication test - ChangePIN background fix for non-Windows versions - IAS-ECC Temporary card personalizatin fix - Minidriver; AcquireContext crashing fix in the case of empty IAS-ECC card - Http authentication logic enhancements - Added update-menus to Debian installer 4.0.0: ====== - DigiSign Application; Authentication tab PIN selection fix if multiple cards inserted - Added debian autostart scrpt after installation - Linux based distro enhancement; - Introduce websigner certificate and cryptoki module to firefox and thunderbird automatically - minidriver .INF file fix; Removed extra spaces that caused installation failure - Socket server fix to be sure that handler is instantiated before thread starts - Added revision and SCS version numbers to local web server's info page - Added version check, default parameters and better response codes to SCS signer's GET method - WebSigner; Default content type set to "data" - PKCS#7 signature time fix to use correct time source - WebSigner; added ipAddress to server's certificate - WebSigner; all 127.0.0.1 references changed to localhost - Windows version; Automated version numbering of .exe and .dll modules - WebSigner; allow xml header inside SignRequest - OSX fix; Using Developer ID certificates instead 3rd party developer certificates - Debian fix; Added missing documents - DSApp; PKCS#12 import to smart card fixed - SCS signer; added issuer filter - Linux; Added cryptoki and websigner certificate inserting into new nss database - OSX fix; Card remove event caused application jamming - SCS crash fix when card is removed during operation - OSX installer fix; Copy translations to correct directory - Translator fixes - Cryptoki C_Finalize jamming fix