1Noteworthy changes in version 1.1.0 (2010-06-14) 2------------------------------------------------ 3 4 * Fixed a resource problem with LDAP CRLs. 5 6 * Fixed a bad EOF detection with HTTP CRLs. 7 8 * Made "dirmngr-client --url --load-crl URL" work. 9 10 * New option --ignore-cert-extension. 11 12 * Make use of libassuan 2.0 which is available as a DSO. 13 14 15Noteworthy changes in version 1.0.3 (2009-06-17) 16------------------------------------------------ 17 18 * Client based trust anchors are now supported. 19 20 * Configured certificates with the suffix ".der" are now also used. 21 22 * Libgcrypt 1.4 is now required. 23 24 25Noteworthy changes in version 1.0.2 (2008-07-31) 26------------------------------------------------ 27 28 * New option --url for the LOOKUP command and dirmngr-client. 29 30 * The LOOKUP command does now also consults the local cache. New 31 option --cache-only for it and --local for dirmngr-client. 32 33 * Port to Windows completed. 34 35 * Improved certificate chain construction. 36 37 * Support loading of PEM encoded CRLs via HTTP. 38 39 40Noteworthy changes in version 1.0.1 (2007-08-16) 41------------------------------------------------ 42 43 * The option --ocsp-signer may now take a filename to allow several 44 certificates to be valid signers for the default responder. 45 46 * New option --ocsp-max-period and improved the OCSP time checks. 47 48 * New option --force-default-signer for dirmngr-client. 49 50 * Ported to Windows. 51 52 53Noteworthy changes in version 1.0.0 (2006-11-29) 54------------------------------------------------ 55 56 * Bumbed the version number. 57 58 * Removed included gettext. We now require the system to provide a 59 suitable installation. 60 61 62Noteworthy changes in version 0.9.7 (2006-11-17) 63------------------------------------------------ 64 65 * Internal cleanups. 66 67 * Fixed updating of DIR.txt. Add additional diagnostics. 68 69 * Updated gettext package. 70 71 72Noteworthy changes in version 0.9.6 (2006-09-04) 73------------------------------------------------ 74 75 * A couple of bug fixes for OCSP. 76 77 * OCSP does now make use of the responder ID and optionally included 78 certificates in the response to locate certificates. 79 80 * No more lost file descriptors when loading CRLs via HTTP. 81 82 * HTTP redirection for CRL and OCSP has been implemented. 83 84 * Man pages are now build and installed from the texinfo source. 85 86 87Noteworthy changes in version 0.9.5 (2006-06-27) 88------------------------------------------------ 89 90 * Fixed a problems with the CRL caching and CRL certificate 91 validation. 92 93 * Improved diagnostics. 94 95 96Noteworthy changes in version 0.9.4 (2006-05-16) 97------------------------------------------------ 98 99 * Try all names of each crlDP. 100 101 * Don't shutdown the socket after sending the HTTP request. 102 103 104Noteworthy changes in version 0.9.3 (2005-10-26) 105------------------------------------------------ 106 107 * Minor bug fixes. 108 109 110Noteworthy changes in version 0.9.2 (2005-04-21) 111------------------------------------------------ 112 113 * Make use of authorityKeyidentifier.keyIdentifier. 114 115 * Fixed a possible hang on exit. 116 117 118Noteworthy changes in version 0.9.1 (2005-02-08) 119------------------------------------------------ 120 121 * New option --pem for dirmngr-client to allow requesting service 122 using a PEM encoded certificate. 123 124 * New option --squid-mode to allow using dirmngr-client directly as a 125 Squid helper. 126 127 * Bug fixes. 128 129 130Noteworthy changes in version 0.9.0 (2004-12-17) 131------------------------------------------------ 132 133 * New option --daemon to start dirmngr as a system daemon. This 134 switches to the use of different directories and also does 135 CRL signing certificate validation on its own. 136 137 * New tool dirmngr-client. 138 139 * New options: --ldap-wrapper-program, --http-wrapper-program, 140 --disable-ldap, --disable-http, --honor-http-proxy, --http-proxy, 141 --ldap-proxy, --only-ldap-proxy, --ignore-ldap-dp and 142 --ignore-http-dp. 143 144 * Uses an external ldap wrapper to cope with timeouts and general 145 LDAP problems. 146 147 * SIGHUP may be used to reread the configuration and to flush the 148 certificate cache. 149 150 * An authorithyKeyIdentifier in a CRL is now handled correctly. 151 152 153Noteworthy changes in version 0.5.6 (2004-09-28) 154------------------------------------------------ 155 156 * LDAP fix. 157 158 * Logging fixes. 159 160 * Updated some configuration files. 161 162 163Noteworthy changes in version 0.5.5 (2004-05-13) 164------------------------------------------------ 165 166 * Fixed the growing-dir.txt bug. 167 168 * Better LDAP error logging. 169 170 171Noteworthy changes in version 0.5.4 (2004-04-29) 172------------------------------------------------ 173 174 * New commands --ocsp-responder and --ocsp-signer to define a default 175 OCSP reponder if a certificate does not contain an assigned OCSP 176 responder. 177 178 179Noteworthy changes in version 0.5.3 (2004-04-06) 180------------------------------------------------ 181 182 * Basic OCSP support. 183 184 185Noteworthy changes in version 0.5.2 (2004-03-06) 186------------------------------------------------ 187 188 * New Assuan command LISTCRLS. 189 190 * A couple of minor bug fixes. 191 192 193Noteworthy changes in version 0.5.1 (2003-12-23) 194------------------------------------------------ 195 196* New options --faked-system-time and --force. 197 198* Changed the name of the cache directory to $HOMEDIR/dirmngr-cache.d 199 and renamed the dbcontents file. You may delete the now obsolete 200 cache/ directory and the dbcontents file. 201 202* Dropped DB2 or DB4 use. There is no need for it because a constant 203 database fits our needs far better. 204 205* Experimental support for retrieving CRLs via http. 206 207* The --log-file option may now be used to print logs to a socket. 208 Prefix the socket name with "socket://" to enable this. This does 209 not work on all systems and falls back to stderr if there is a 210 problem with the socket. 211 212 213Noteworthy changes in version 0.5.0 (2003-11-17) 214------------------------------------------------ 215 216* Revamped the entire thing. 217 218* Does now require Libgcrypt 1.1.90 or higher, as well as the latest 219 libksba and libassuan. 220 221* Fixed a bug in the assuan inquire processing. 222 223 224Noteworthy changes as of 2002-08-21 225------------------------------------ 226 227* The default home directory is now .gnupg 228 229 230 Copyright 2003, 2004, 2005 g10 Code GmbH 231 232 This file is free software; as a special exception the author gives 233 unlimited permission to copy and/or distribute it, with or without 234 modifications, as long as this notice is preserved. 235 236 This file is distributed in the hope that it will be useful, but 237 WITHOUT ANY WARRANTY, to the extent permitted by law; without even the 238 implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. 239