source: doc/ChangeLog @ dfe6b61

mei_rt2mei_rt2_fix_1
Last change on this file since dfe6b61 was 09496b3, checked in by Mei <mei@…>, 12 years ago

1) add ID api that takes abac_chunk_t*

  • Property mode set to 100644
File size: 4.0 KB
Line 
1= 0.2.3 =
2
3    2012-XX-YY
4
5        * Added a new ID api call, ABAC::ID::ID(abac_chunk_t *), to allow
6          creating ID from a chunk (Ezra)
7
8= 0.2.2 =
9
10     2012-09-26
11
12        * Remove the self-signing verification check in abac_verifier to allow
13          none self-signing principal credential
14        * Replaced cn extraction code used in libabac with a more generalized
15          method that retrieves the last "CN=" term from the subject line
16          of a principal credential before chopping it out
17        * Added a new API call, next_proof (abac_context_query_again) that can
18          force YAP to backtrack and produce a new solution proof if exists
19        * New performance testing setup under examples directory. Added
20          plotting and graphing scripts
21        * Updated examples directory to use Makefile, added performance
22          testing setup, plotting scripts, and graphing scripts
23        * Added support for accepting encrypted private key with passphrase
24          for principal credential creation and for attribute rule creation
25        * API is expanded to allow specifying private key file and passphrase
26          file
27        * creddy attribute and generate options are expanded to accept
28          a specific private key and allowing passphrase option
29        * a new keycheck option is added to creddy to do access check on
30          a key file (encrypted and none encrypted)
31        * added encryption/passphrase examples
32        * migrate the sample scripts that used to be under swig directory to
33          examples directory and setup as part of regression test suite
34        * add examples for timing/performance runs
35        * change the proof buffer allocation to YAP_AllocSpaceFromYap and sizing
36          the buffer repeatedly and progressively if the initial size is too small
37        * tested with Yap 6.2.3 but not required
38
39= 0.2.1 =
40
41     2012-07-06
42 
43        * The API visible to programmers is much richer and should make
44          development simpler.  As part of this, the libcreddy/libabac
45          distinction has disappeared.  All libcreddy functions are now
46          available through libabac.
47        * updated to use strongswan 4.6.4.  Strongswan 4.4.0 had become very
48          outdated.
49        * Added more examples and documentation.
50        * add a new '--subject-link' option to creddy --attribute to hold the
51          linking role
52        * add --dbdump option to abac_prover_yap to retrieve all prolog clauses
53          stored in the db
54       
55       WARNING
56       - There are occasional spurious error messages originated
57         from Strongswan during access of the attribute credentials.  Those
58         messages are due to libstrongswan mishandling certain values of
59         authorizedKeyIdentifier in a non-destructive way.  While we are
60         working with the strongswan developers to remove these messages, they
61         should not affect ABAC in any way.
62       
63         Here are sample messages:
64       
65         L6 - keyIdentifier:  length of ASN.1 object invalid or too large
66         L6 - authorityCertSerialNumber:  length of ASN.1 object invalid or too large
67       
68         Do report to us if your ABAC is not behaving as
69         expected and messages like above seem to be a factor..
70       
71= 0.2.0 =
72
73     2012-02-27
74
75        * '''API-breaking change''': libcreddy ID and attribute cert creation validity
76          periods are now measured in seconds
77        * significant performance improvements on Linux, see [source:doc/INSTALL] for
78          configure flags
79        * [CredPrinterDocs credential printer]
80        * several bugs and segfaults fixed
81
82= 0.1.3 =
83
84     2011-03-30
85
86        * native Java support
87        * many, many bugfixes
88
89= 0.1.2 =
90
91     2010-10-01
92
93        * libcreddy extracted
94        * credddy rewritten to use libcreddy
95        * sample code for libcreddy in python
96
97= 0.1.1 =
98
99     2010-09-17, updated 2010-09-20
100
101        * Support for intersection rules
102        * Support for encrypted private keys
103        * Build issues on FreeBSD addressed
104
105
Note: See TracBrowser for help on using the repository browser.