forked from kjur/jsrsasign
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathChangeLog.txt
executable file
·1245 lines (1138 loc) · 43.7 KB
/
ChangeLog.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
ChangeLog for jsrsasign
extended Authority/SubjectKeyIdentifier support
* Changes from 8.0.15 to 8.0.16 (2020-Mar-29)
- src/asn1x509.js
- AuthorityKeyIdentifier class
- issuerDN ASN.1 encoding bug fixed
- now keyIdentifier is automatically calculated
by certificate or key
- issuer dn and serial number can be set
by certificate
- SubjectKeyIdentifier class
- now keyIdentifier is automatically calculated
by certificate or key
- X500Name class
- certissuer and certsubject parameter is added
to set value by issuer or subject of certificate.
- GeneralName class
- dn parameter support was updated.
- src/keyutil.js
- getKeyID method added to calcalate a key identifier
for certificate.
- crypto.js
- Util.isKey static method added
- Signature.{sign,verify} method bug fix for ECDSA
- code refactoring
- src/asn1csr.js
- strict mode fix (pull #410)
- src/jws.js
- strict mode fix (pull #347)
- src/jwsjs.js
- readJWSJS fix (pull #373)
- sample_node/asn1extract2
- sample added. more flexible use than asn1extract.
- test/qunit-do-crypto.html
- getRandom test fix
- test/qunit-do-asn1x509-newcrt.html
- test case expected value fix
SHA384/512withECDSA wrong signature fix and add some curves support
* Changes from 8.0.14 to 8.0.15 (2020-Apr-13)
- src/ecdsa-modified.js
- SHA384withECDSA, SHA512withECDSA signature
wrong validation result issue was fixed (issue #394)
- secp192k1, secp224r1 curve are now supported
- test/qunit-do-ecdsamod.html
testcase added for SHA1/SHA384/SHA512 and
secp192k1/secp224r1
- sample_node command added
- genkey: keypair generation
- eckey2hex: show EC PKCS#1/8 private/public key in hex format
* Changes from 8.0.13 to 8.0.14 (2020-Apr-03)
- src/asn1x509-1.0.js
- add SubjectKeyIdentifier class (issue #402)
- add SubjectKeyIdentifier support in
TBSCertificate.appendExtensionByName method
- test/qunit-do-asn1x509.html
SubjectKeyIdentifier test added
- src/base64x.js
- add multi section support for pemtohex
such as EC PRIVATE KEY and EC PARAMETRS
- test/qunit-do-base64x.html
pemtohex testcase added
- src/keyutil.js (pull #415)
- add support for multi section plain PKCS#5 EC PRIVATE KEY
- test/qunit-do-keyutil-ec.html
plain PKCS#5 EC PRIVATE KEY testcase added
- src/asn1csr-1.0.js
document fix (pull #356)
- npm_util/Makefile
merged (pull #216)
- src/rsasign-1.2.js
merged for RegExp (pull #419)
- src/asn1-1.0.js
merged for strict fix (pull #389)
- src/crypto-1.0.js
document fix in return of decrypt method (issue #383)
- src/x509-1.1.js
onelineToLDAP sample added in document (issue #428)
* Changes from 8.0.12 to 8.0.13 (2020-Mar-31)
- LICENSE.txt
- fixed wrong description from BSD to MIT License
- ext/ec.js
- mitigate Minerva timing attack in ECPointFp.multiply method
https://minerva.crocs.fi.muni.cz/
- test/qunit-do-crypto-ecdsa.html
- testcase fix
- sample_node/tsr2certs added
- script to extract certificates from timestamp response or token
- npm
- ECPointFp, ECCurveFp and ECFieldElementFp are now exported.
* Changes from 8.0.11 to 8.0.12 (2018-Apr-22)
- base64x 1.1.13 to 1.1.14
- function iptohex added
- fix hextoipv6 for wrong "::" shrinking
- asn1x509 1.1.5 to 1.1.6
- KeyUsage class now supports names parameter such as
['digitalSignature', 'nonRepudiation'].
- some refactoring
- tool/tool_ca2.html added for
yet another certificate generation tool by.
- testcase added for above methods/functions
- qunit-do-base64x.html
- qunit-do-asn1x509.html
* Changes from 8.0.10 to 8.0.11 (2018-Apr-17)
- asn1x509 1.1.4 to 1.1.5
- X500Name.setByString fix for attribute value with slash.
- testcase added to confirm above fixes.
- qunit-do-asn1x509.html
* Changes from 8.0.9 to 8.0.10 (2018-Apr-09)
- IPv6 address support in certificate
- LICENSE.txt
- conclude third party licenses.
- asn1x509 1.1.3 to 1.1.4
- IPv4/v6 iPAddress support in GeneralName
- base64x 1.1.2 to 1.1.3
- ipv6tohex, hextoipv6 and hextoip functions
added for IPv6 string conversion.
- x509 1.1.19 to 1.1.20
- add IPAddress support in getExtSubjectAltName2
- testcase added for above methods/functions
- qunit-do-asn1x509.html
- qunit-do-base64x.html
- qunit-do-x509-ext.html
- tool/tool_ca.html
- use SHA256withRSA and RSA 2048bit key
by default.
- add IPAddress support in subjectAltName
* Changes from 8.0.8 to 8.0.9 (2018-Apr-04)
- critical bug fix for ASN.1 string class.
When UTF-8 string is set to ASN.1 object,
string has been garbled.
- src/asn1 1.0.13 to 1.0.14
- DERAbstractString.setString fixed for utf8.
- src/asn1 1.1.2 to 1.1.3
- following OIDs are added:
T/title (2.5.4.12)
description (2.5.4.13)
organizationIdentifier (2.5.4.97)
* Changes from 8.0.7 to 8.0.8 (2018-Apr-02)
- src/asn1x509 1.1.1 to 1.1.2
- GeneralName fix for dn and ldapdn of explicit.
This have caused wrong GeneralName dn/ldapdn ASN.1
encoding.
- CRL.sign fix for init
- tool/tool_ca.html
- subjectAltName extension support added.
- subjectPublicKeyInfo setting fix.
- test/qunit-do-asn1x509
- fix for CRL and GeneralName dn/ldapdn test
- npm/test/t_sig_rsasha1.js added
* Changes from 8.0.6 to 8.0.7 (2018-Mar-25)
- src/jws 3.3.10 to 3.3.11
- verify method returns false in case of
without all of head, payload and signature
to fix issue #332.
- src/jwsjs 2.2.0 to 2.2.1
- readJWSJS fix for wrong initialization as #336
- src/asn1x509 1.1.0 to 1.1.1
- add DN uniqueIdentifier(2.5.4.45) and
description(2.5.4.13) attribute type by PR #335.
- ext/{rsa,rsa2}
- OAEP fix by PR #303.
* Changes from 8.0.5 to 8.0.6 (2018-Feb-10)
- src/x509 1.1.18 to 1.1.19
- fix getSubjectAltName for IP addr of PR #317
- test/qunit-do-x509-ext
- add test getSubjectAltName for DNS and IP
- src/rsa, rsa2
- fix for alert function for issue #325
- src/ecdsa-modified
- fix asn1SigToConcatSig for issue #315
- npm/lib
- jsrsasign-{all,jwths,rsa}-min.js are added
per requested issue #314, #313
* Changes from 8.0.4 to 8.0.5 (2018-Jan-27)
- tool/tool_asn1dumper.html
- #304 pemtohex issue fix
- tool/tool_roca.html added to check ROCA vulnerablity for public key
- src/asn1csr 1.0.6 to 1.0.7
- fix init of fix #308
- src/jws 3.3.10
- fix aud verification in vertifyJWT document #318
* Changes from 8.0.3 to 8.0.4 (2017-Sep-15)
- asn1cms 1.0.4 to 1.0.5
- add KJUR.asn1.cms.CMSUtil.verifySignedData method to
verify CMS signed data.
- crypto 1.2.0 to 1.2.1
- small refactoring
- x509 1.1.17 to 1.1.18
- fix getInfo() to support no extension.
- add sample_node/cmssign
- fix sample/sample-ecdsa.html in sig.init.
- fix sample_node/asn1extract in ASN1HEX method call
- merge PR #292 for https
- merge PR #283 to fix document and example
- merge PR #281 to fix JWK Thumbprint RFC number
* Changes from 8.0.2 to 8.0.3 (2017-Jul-11)
- jws 3.3.9 to 3.3.10
- fix JWS.verify fail for #276
* Changes from 8.0.1 to 8.0.2 (2017-Jul-08)
- jws 3.3.8 to 3.3.9
- fix for jsrsasign-jwths-min.js
- sample/sample-rsasign.html fix for #274.
- test qunit-do-package-rsa.html fix
* Changes from 8.0.0 to 8.0.1 (2017-Ju1-01)
- x509 1.1.16 to 1.1.17
- add getExtSubjectAltName2 which supports
GeneralName type
- make getExtSubjectAltName deprecated
- fix getExtCRLDistributionPointsURI() for #269.
caused error if CDP containts directory name.
now fixed.
- getInfo now supports certificatePolicies
- tool/tool_certview.html
- SHA1 fingerprint issue fixed for #273
* Changes from 7.2.2 to 8.0.0 (2017-Jun-30)
- all of deprecated classes, methods and files are
removed.
- get smaller all-min.js than before.
- following files are refactored:
- asn1hex, asn1x509, crypto, jwsjs, keyutil,
rsapem, rsasign, x509.
- npm/lib/footer.js fix for issue #270.
* Changes from 7.2.1 to 7.2.2 (2017-Jun-23)
- jws 3.3.7 to 3.3.8
- merge pull request #266
- x509 1.1.15 to 1.1.16
- read X.509v3 certificate without any extension
supported in readCertHex.
- ext/yahoo.js
- remove most of codes and keep YAHOO.lang.extend only.
So all of Yahoo YUI vulnerabilities are removed.
* Changes from 7.2.0 to 7.2.1 (2017-Jun-04)
- base64x 1.1.11 to 1.1.12
- function hextopem, pemtohex added
- asn1hex 1.1.11 to 1.1.12
- make ASN1HEX.pemToHex deprecated
- asn1 1.0.12 to 1.0.13
- make KJUR.asn1.ASN1Util.getPEMStringFromHex deprecated
- rsapem 1.2.1 to 1.2.2
- make RSAKey.pemToBase64 deprecated
- x509 1.1.14 to 1.1.15
- make X509.pemToBase64 deprecated
- further refactoring. reducing min.js size by refactoring
- asn1 1.0.12 to 1.0.13
- asn1cades 1.0.2 to 1.0.3
- asn1cms 1.0.3 to 1.0.4
- asn1csr 1.0.4 to 1.0.5
- asn1ocsp 1.0.2 to 1.0.3
- asn1tsp 1.0.2 to 1.0.3
- asn1x509 1.0.23 to 1.0.24
- jws 3.3.6 to 3.3.7
- jwsjs 2.1.0 to 2.1.1
- keyutil 1.1.1 to 1.1.2
- pkcs5pkey 1.1.1 to 1.1.2
- x509 1.1.14 to 1.1.15
* Changes from 7.1.4 to 7.2.0 (2017-May-21)
- major refactoring before reducing file size
- major refactoring for ASN1HEX
- asn1hex 1.1.10 to 1.1.11
- make most of long method name deprecated and
provide new short names.
- DEPRECATED: getHexOf{TLV/V/L}_AtObj
getIntOfL}_AtObj
get{StartPosOfV/ByteLengthOfL}_AtObj
- NEW: get{TLV/V/Vlen/Vidx/L/Lblen}
getChildIdx, getTLVbyList, oidname
- asn1cades 1.0.1 to 1.0.2
- asn1csr 1.0.3 to 1.0.4
- asn1tsp 1.0.1 to 1.0.2
- ecdsa-modified 1.1.0 to 1.1.1
- keyutil 1.1.0 to 1.1.1
- pkcs5key 1.1.0 to 1.1.1
- rsapem 1.2.0 to 1.2.1
- major refactoring for X509
- x509 1.1.13 to 1.1.14
- make most of static method deprecated and
new non-static methods are defined.
- parseExt/getExtInfo method added
- base64x 1.0.10 to 1.0.11
- datetozulu added
- sample/sample*.html tool/tool*.html test/qunit*.html link fixed
- npm [email protected] had wrong reference in navigator.
So [email protected] has been unpublished.
- ext/rng.js
- msCrypto fallback for IE11 to prevent error
when calling window.crypto. (pull/254)
Thanks @mike-w-kelly.
- dsa 2.1.0 to 2.1.1
- verifyWithMessageHash infinite loop bug
fix #238. Thanks @nemesv.
* Changes from 7.1.3 to 7.1.4 (2017-May-06)
- all source codes are moved to src directory
- x509 1.1.12 to 1.1.13
- refactoring codes
- X509v1 certificate support in all methods
- new methods and properties for X509 class
- readCertHex
- getVersion
- getPublicKey
- getPublicKeyHex
- getPublicKeyIdx
- version property
- foffset property
- make following methods and properties deprecated in X509 class
- readCertPEMWithoutRSAInit
- getSubjectPublicKeyPosFromCertHex
- getSubjectPublicKeyInfoPosFromCertHex
- getPublicKeyInfoPosOfCertHEX
- getSerialNumberHex static method
- subjectPublicKeyRSA property
- subjectPublicKeyRSA_hN property
- subjectPublicKeyRSA_hE property
- asn1hex 1.1.9 to 1.1.10
- refactoring codes
- new methods
- getIdxbyList
- getTLVbyList
- make following methods deprecated
- getDecendantIndexByNthList (> getIdxbyList)
- asn1x509 1.0.22 to 1.0.23
- serialNumber(2.5.4.5) parameter added OID attribute type
- base64x 1.1.9 to 1.1.10
- hextoposhex function added
* Changes from 7.1.2 to 7.1.3 (2017-Apr-15)
- jsrsasign-latest-all-min.js was moved to
jsrsasign-all-min.js in master.
In gh-page, both are provided for backword
compatibity.
- base64x 1.1.8 to 1.1.9
- zuluto{date,msec,int} are added
- jws 3.3.5 to 3.3.6
- modified IntDate.getZulu to use zulutosec;
* Changes from 7.1.1 to 7.1.2 (2017-Mar-20)
- CRITICAL BUG FIX: KJUR.asn1.x509.AlgorithmIdentifier
default was wrong in algorithm parameter field.
For example "SHA1" AlgorithmIdentifier object
will be missing algorithm parameter field by
bug. This issue raised just only in 7.1.1 and
the issue was fixed.
- asn1x509 1.0.21 to 1.0.22
- AlgorithmIdentifier bug fix
* Changes from 7.1.0 to 7.1.1 (2017-Mar-10)
- CRITICAL BUG FIX: KJUR.asn1.x509.Certificate.sign() and
KJUR.asn1.x509.X509Util.newCertPEM() have always
signed signatures with SHA1withRSA algorithm regardless
of any specified signature algorithm. This issue was
fixed in this release.
- asn1x509 1.0.19 to 1.0.20
- Certificate
- sign() critical bug fix
sign() was always sign with SHA1withRSA regardless of
specified any other signature algorithm.
This fixes #240 and #241 by @helfloryd.
- AlgorithmIdentifier
- set algorithm parameter to NULL automatically by default
for "*withRSA" algorithm.
- document update
- newCertPEM
- fix document
- x509 1.1.11 to 1.1.12
- X509.verifySignature static method added
- ext/rng.js
- fix #228 from @dzaman. window.crypto.random fix
- crypto 1.1.11 to 1.1.12
- minor document fix
* Changes from 7.0.0 to 7.1.0 (2017-Jan-21)
- minor update for loading private/public key
- support added: PKCS#5 DSA/ECC hexacedimal string of private key
- keyutil 1.0.14 to 1.1.0
- BUGFIX: KEYUTIL.getKey for PKCS#5 PEM ECC private key
was not set curve name properly and now it's fixed.
(issue #227).
- make KEYUTIL.getHexFromPEM deprecated
- move from KEYUTIL.getHexFromPEM to ASN1HEX.pemToHex
- pkcs5pkey 1.0.7 to 1.1.0
- make PKCS5PKEY.getHexFromPEM deprecated
- move from getHexFromPEM to ASN1HEX.pemToHex
- rsapem 1.1.1 to 1.2.0
- refactoring codes
- readPKCS5PubKeyHex added
- readPKCS8PubKeyHex added
- readCertPubKeyHex added
- ecdsa-modified 1.0.5 to 1.1.0
- readCertPubKeyHex added
- dsa 2.0.1 to 2.1.0
- setPrivateHex, setPublicHex added
- readPKCS5PrvKeyHex added
- readPKCS8PrvKeyHex added
- readPKCS8PubKeyHex added
- readCertPubKeyHex added
- asn1hex 1.1.8 to 1.1.9
- ASN1HEX.pemToHex added
- move from {KEYUTIL,PKCS5PRV}.getHexFromPEM,
X509.pemToHex to ASN1HEX.pemToHex
- x509 1.1.10 to 1.1.11
- now X509.pemToHex deprecated and is planed to
remove in jsrsasign 8.0.0.
- asn1cades 1.0.0 to 1.0.1
- move to ASN1HEX.pemToHex
- asn1cms 1.0.2 to 1.0.3
- move from KEYUTIL.getHexFromPEM to ASN1HEX.pemToHex
- asn1csr 1.0.2 to 1.0.3
- move from KEYUTIL.getHexFromPEM to ASN1HEX.pemToHex
* Changes from 6.2.3 to 7.0.0 (2016-Dec-26)
- LGPL license for openpgpjs was removed.
- asn1hex 1.1.7 to 1.1.8
- ASN1HEX.dump also supports ASN1Object as argument
- asn1x509
- API document update
- pkcs5pkey 1.0.7
- merge @machinewu's pull request for API doc fix
- dsa 2.0.0
- some of my own codes are moved from dsa-modified-1.0.js
to dsa-2.0.0 and old openpgpjs codes are re-writed with
my own codes and all of openpgpjs codes are removed from
jsrsasign.
- crypto 1.1.10 to 1.1.11
- some static random number generator methods are
added to KJUR.crypto.Util class for new dsa-2.0:
getRandomHexOfNbytes, getRandomBigIntegerOfNbytes,
getRandomHexOfNbits, getRandomBigIntegerOfNbits,
getRandomBigIntegerZeroToMax, getRandomBigIntegerMinToMax
- REMOVED
- dsa-modified-1.0.js, ext/THIRDPARTY_LICENSE.pgp.txt
- test/qunit-do-*.html
- most of test codes are updated.
* Changes from 6.2.2 to 6.2.3 (2016-Nov-29)
- asn1x509 1.0.18 to 1.0.19
- GeneralName and GeneralNames class supports dn and ldapdn parameters
- SubjectAltName and IssuerAltName extension added
- Extension.appendByNameToArray method added
- asn1csr 1.0.1 to 1.0.2
- CertificationRequestInfo.appendExtensionByName method added
- CertificationRequestInfo extensionRequest encoding critical bugfix
- CSRUtil.newCSRPEM "ext" parameter for extensionRequest supported
- sample_node
- datasing and dataverify script added
- base64x
- API document update
- asn1
- API document update
* Changes from 6.2.1 to 6.2.2 (2016-Nov-19)
- x509 1.1.9 to 1.1.10
- X509 class
- multi-valued RDN support in hex2dn and hex2rdn method.
- optional string index argument added to hex2dn and hex2rdn method.
- hex2attrTypeAndValue static method added
- API document update
- asn1x509 1.0.17 to 1.0.18
- X500Name class
- LDAP(RFC 2253) name support
- setByLdapString method added
- onelineToLDAP static method added
- ldapToOneline static method added
- 'ldapstr& constructor parameter is supported
- more AttributeType name supported in atype2oidList
- OID static class
- oid2atype static method added
- API document update
- asn1 1.0.11 to 1.0.12
- refactoring in DERObjectIdentifier
- API document update
* Changes from 6.2.0 to 6.2.1 (2016-Nov-18)
- asn1x509 1.0.16 to 1.0.17
- multi-valued RDN supported in X500Name and RDN class.
- KJUR.asn1.x509.RDN.parseString() static method added
- API document update
- x509 1.1.9 to 1.1.9 (same)
- X509.readCertPEMWithoutRSAInit fix by @lionello . Thanks.
- crypto 1.1.10 to 1.1.10
- API document fix
- sample_node scripts
- dataencrypt, datadecrypt and jwsview added
* Changes from 6.1.4 to 6.2.0 (2016-Nov-03)
- RSAKey
- CRITICAL BUGFIX: RSA-PSS and RSA-OAEP not working from jsrsasign 5.0.0
because rstr_sha1 function is missingand. Now it was fixed.
(oaep_pad, oeap_unpad)
- API document added.
- crypto 1.1.9 to 1.1.10
- KJUR.crypto.Cipher class added to encrypt/decrypt data.
Currently only RSA, RSAOAEP supported. Other ciphers like
AES, 3DES will be supported near in the future.
- KJUR.crypto.MessageDigest class
- HASHLENGTH, getCanonicalAlgName, getHashLength
- asn1x509 1.0.15 to 1.0.16
- AuthorityInfoAccess class added by @lionello 's pull request. Thanks.
- base64x
- fix API document
- npm
- missing exports of some global string converter were fixed
* Changes from 6.1.3 to 6.1.4 (2016-Oct-16)
- base64x 1.1.7 to 1.1.8
- function hextoArrayBuffer and ArrayBuffertohex added
- some API documents added
* Changes from 6.1.2 to 6.1.3 (2016-Oct-15)
- asn1csr 1.0.0 to 1.0.1
- CSRUtil.getInfo method added to parse CSR
- asn1ocsp
- OCSPUtil.getOCSPResponseInfo API document added
* Changes from 6.1.1 to 6.1.2 (2016-Oct-08)
- OCSP Response support
- asn1hex 1.1.6 to 1.1.7
- refactoring for static methods
- encapsulated BitString support
- more API documents
- asn1ocsp 1.0.0 to 1.0.1
- OCSPUtil.getOCSPResponseInfo added
- merge RegExp fix pull request from @huokko.
Thank you @huokko.
(asn1x509, crypto, jws, keyutil, pkcs5pkey)
* Changes from 6.1.0 to 6.1.1 (2016-Sep-25)
- asn1 1.0.10 to 1.0.11
- encapsulated ASN.1 structure supported
in DEROctetString and DERBitString.
- API document update
- tool_asn1encoder.html added
* Changes from 6.0.1 to 6.1.0 (2016-Sep-24)
- asn1ocsp 1.0.0
- now start to add OCSP protocol support
- OCSP request ASN.1 classes are added
- fix API document in x509 and asn1
- test/qunit-do-{asn1,asn1ocsp}.html added or updated
* Changes from 6.0.0 to 6.0.1 (2016-Sep-12)
- old jsrsasign.js is used in npm package. now fixed.
* Changes from 5.1.0 to 6.0.0 (2016-Sep-11)
- As of so much request to remove Node functions
in nodeutil.js, nodeutil.js have been removed from
jsrsasign.js package. Then it is moved to
new "jsrsasign-util" npm package.
Now "jsrsasign" will be CommonJS, Purescript,
Webpack and Browserify safe package.
Some sample Node.js scripts in "sample_node"
will be updated later.
* Changes from 5.0.15 to 5.1.0 (2016-Sep-07)
- jwsjs 2.0.15 to 2.1.0
- refactoring and API document update
- addSignature, verifyAll, verifyNth method added
- make addSignatureByHeaderKey,
addSignatureByHeaderPayloadKey and verifyWithCerts
deprecated.
- sample_*.html
- review all to work. reference fix. make list in Wiki.
- index*.html
- update
* Changes from 5.0.14 to 5.0.15 (2016-Aug-26)
- pemtojwk and jwktopkcs8 added to sample node scripts
- asn1 1.0.9 to 1.0.10
- ASN1Util.getPEMStringFromHex modified not to use
CryptoJS.
- test/qunit-do-*.html
- test case reference fix
- remove ext/{md5,ripemd160,sha1,sha256,sha512}.js,
ext/THIRDPARTY_LICENSE.pjhash.txt for
Paul Johnston's Hash Algorithm JavaScript
* Changes from 5.0.13 to 5.0.14
- keyutil 1.0.12 to 1.0.13
- KEYUTIL.getJWKFromKey() method added to get
RFC 7517 JSON Web Key(JWK) object from RSAKey or
KJUR.crypto.ECDSA public/private key object.
- KEYUTIL.generateKeypair()
do also setPublicKeyHex for EC private key in
as aligned to PEM private key
loading.
- KEYUTIL.getKey(JWK_EC_PRV)
made change to set public x y too.
- ecdsa-modified 1.0.4 to 1.0.5
- getPublicKeyXYHex() method added
- getShortNISTPCurveName() method added
- npm
- missed to export KJUR.lang now fixed
- sample_node/genjwk added to generate keypair and save as JWK
- tool_certview.html
- loading script fix
* Changes from 5.0.12 to 5.0.13
- base64x.js
- KJUR.lang.String class added and its some static
methods isHex, isInteger, isBase64, isBase64URL and
isIntegerArray also defined.
- KJUR.lang added to npm package namespace.
- tool_string.html added to provide string converter tool.
- jws.js
API document updated.
- CryptoJS codes in code.google.com seem to be removed and
404 not found so that CryptoJS references in all test
were moved to local files.
- CryptoJS codes were moved to ext/cj directory.
- tool_b64u{enc,dec}.html script URL fix
* Changes from 5.0.11 to 5.0.12
- jws between 3.3.3 to 3.3.4
- support grace period for verifyJWT method.
This is to allow time difference between
JWT generator and verifier.
- asn1hex
- API document update
* Changes from 5.0.10 to 5.0.11
- X509v1 certificate support in KEYUTIL.getKey and
X509.getPublicKeyInfoPropOfCertPEM
- sample_node/showcert added
- x509.js 1.1.8 to 1.1.9
- X509.DN_ATTRHEX added to show EV cert DN
- X509v1 certificate support in X509.getPublicKeyInfoPropOfCertPEM.
This makes KEYUTIL.getKey support X509v1 certificate.
- test/qunit-do-x509-getinfo.html
- test case added for EV cert DN
- tool_{jwt,jwtveri}.html
- fix typo. Thanks @ParkinT.
- ext/{rsa,rsa2}.js
- allow hash func to be passed to OAEP. Thanks @davedoesdev.
- asn1x509.js 1.0.13 to 1.0.14
- add 'SN' (i.e. SurName) support in distinguished name.
Thanks @kurtsson.
* Changes from 5.0.9 to 5.0.10
- sample_node/jwtverify bugfix
- x509 1.1.7 to 1.1.8
- following methods are added:
- getInfo()
- getExtSubjectKeyIdentifier()
- getExtAuthorityKeyIdentifier()
- getExtExtKeyUsageName()
- getExtSubjectAltName()
- getExtCRLDistributionPointsURI()
* Changes from 5.0.8 to 5.0.9 (2016-Apr-19)
- ext/rng.js
- use window.crypto.getRandomValues for SecureRandom
if available. (ToDo also for Node.js)
* Changes from 5.0.7 to 5.0.8 (2016-Apr-14)
- LICENSE.txt small update for years of copyright.
- ext/x64-core*.js was missed and added
- x509 1.1.6 to 1.1.7
- X509.{getHexOfTLV_V3ExtValue,getHexOfV_V3ExtValue}
are chageed to return null instead of '' if there
is no extension specified by name or oid.
- X509.getBasicConstraints added
- X509.getSignatureAlgorithmName added
- X509.getSignatureValueHex added
- API document update
- each *.min.js files are moved to min/ folder.
- clean up old *-all-min.js
* Changes from 5.0.6 to 5.0.7 (2016-Mar-05)
- tool_csr.html fix for subject parameter.
- jsrsasign-latest-all-min wrong order in concatination.
This raise wrong PKCS#5/8 encrypted PEM private key
generation in KEYUTIL.getPEM().
- sample_node/asn1extract added
* Changes from 5.0.5 to 5.0.6 (2016-Feb-28)
- bower.json name space fix
- crypto-1.0 1.0.4 to 1.0.5
- file removed
- crypto-1.1 1.1.7 to 1.1.8
- remove unnecessary evals for strict mode.
* Changes from 5.0.4 to 5.0.5
- node sample 'jwssign', 'jwtverify', 'asn1dump'
and 'pemtobin' added.
- base64x 1.1.5 to 1.1.6
- license URL small fix
- asn1 1.0.8 to 1.0.9
- DERGeneralizedTime withMillis fix
- DERGeneralizedTime and DERUTCTime refactoring
- jws 3.3.2 to 3.3.3
- JWS.parse method added
- IntDate.getZulu UTCTime(YY) support added
- jsrsasign-x.x.x-all-min.js move to lib directory from this version
- jsrsasign-{1.2,1.2.1,1.3,1.3.1,2.0.0}.tgz are removed
since they can get from github release/tags.
* Changes from 5.0.2 to 5.0.4 (2015-Nov-23)
- jwtverify, asn1dump and pemtobin sample Node script in
sample_node directory.
There is a bower release but not in npm.
* Changes from 5.0.1 to 5.0.2 (2015-Nov-11)
- jws 3.3.1 to 3.3.2
- RFC 7638 getJWKthumbprint method added
- base64x 1.1.5 to 1.1.6
- function intarystrtohex added
- nodeutil 1.0.0 newly added
- utils for file I/O in Node.js
- npm
- add reference to intarystrtohex and CryptoJS
* Changes from 5.0.0 to 5.0.1 (2015-Oct-17)
- keyutil 1.0.10 to 1.0.11
- add support for bare RSA NED hexadecimal key in KEYUTIL.getKey
* Changes from 4.9.2 to 5.0.0 (2015-Oct-14)
- *NOTICE* release 4.10.0 declined since API semver violation
- some JWS HS* and Crypto Mac signature issue was fixed.
- crypto 1.1.6 to 1.1.7
- add support for various password providing method
such as base64, base64url, hexadecimal or utf8 string
for Mac.
- jws 3.2.4 to 3.3.0
- add support for various password providing method
such as base64, base64url, hexadecimal or utf8 string
for HS* JWS signing and validation
- remove some old fashoned functions and methods
which marked as "deprecated". Followings are removed:
- JWS.generateJWSByP1PrvKey
- JWS.generateJWSByKey
- JWS.generateJWSByNED
- JWS.verifyJWSByPemX509Cert
- JWS.sign can handle header and payload
JSON object not JSON string.
- JWS.verify bugfix in 4.10.0 which only
accepts hexacedimal string key for HS*.
- keyutil 1.0.10 to 1.0.11
- add support for RSA private key without
P/Q/DP/DQ/COEFF of JWK
* Changes from 4.9.1 to 4.9.2 (2015-Oct-02)
- latest asn1x509 1.0.13 was missed in the latest-min.js and
it was fixed.
* Changes from 4.9.0 to 4.9.1
- asn1x509 1.0.12 t 1.0.13
- setByObject method added to X500Name class
- {C: "US", O: "test"} representation now can be used
in newCertPEM method in X509Util class.
* Changes from 4.8.6 to 4.9.0
- certificate signing request(CSR/PKCS#10) generation support
asn1csr-1.0.js added
- asn1 1.0.7 to 1.0.8
- small API document update
- base64x 1.1.4 to 1.1.5
- function strdiffidx added
- keyutil 1.0.9 to 1.0.10
- fix and small program comment update
- jws: small API document update
* Changes from 4.8.5 to 4.8.6
- npm package and bower fix
* Changes from 4.8.4 to 4.8.5
- some of small fix release for npm and jsrsasign-latest-all-min.
- jwt 3.2.3 to 3.2.4
- jws.js update for validation of jti confirming to RFC 7519
as optional in verifyJWT method. Thanks @stephanbacheller.
* Changes from 4.8.3 to 4.8.4
- some of small fix release for npm.
* Changes from 4.8.2 to 4.8.3
- crypto 1.1.5 to 1.1.6
- Signature.sign method fix in automatic detection of private key
- asn1 1.0.6 to 1.0.7
- ASN1Util.oidHexToInt() added
- ASN1Util.oidIntToHex() added
- asn1hex 1.1.5 to 1.1.6
- ASN1HEX.dump() simple ASN.1 dump functionality added
- ASN1HEX.isASN1HEX() added
- tool_asn1dumper.html - Online ASN.1 dump tool added for demo
- ** 4.8.3 updated files
- ChangeLog.txt
- asn1-1.0*.js
- asn1hex-1.1*.js
- crypto-1.1*.js
- test/qunit-do-asn1-oidhex.html
- test/qunit-do-asn1hex-dump.html
* Changes from 4.8.1 to 4.8.2
- keyutil 1.0.8 to 1.0.9
- getKey EC private/public key bug #69 fix
- node npm module officially released at npmjs.com
- ** 4.8.2 updated files
- ChangeLog.txt
- keyutil-1.0*.js
* Changes from 4.8.0 to 4.8.1
- keyutil 1.0.7 to 1.0.8
- RFC 7517 JSON Web Key(JWK) support
for RSA/ECC private/public key added in KEYUTIL.getKey method
- ** 4.8.1 updated files
- ChangeLog.txt
- ecdsa-modified-1.0*.js (jsdoc fix)
- keyutil-1.0*.js
- base64x-1.1.js (b64utohex zero padding added)
- test/qunit-do-base64x.html
- test/qunit-do-keyutil-jwk.html
- test/qunit-do-keyutil-pairpem.html
* Changes from 4.7.2 to 4.8.0 (2015-Jun-01)
- Now jsjws JSON Web Signtaure library is merged into
jsrsasign.
- RFC 7519 JWT JSON Web Token full validation support.
- jws 3.2.2 to 3.2.3
- JWS.verifyJWT added to do full validation for JWT
- JWS.inArray added
- JWS.includedArray added
- ChangeLogs for jws and jwsjs before jws 3.2.2
please see ChangeLog_jws322.txt
- asn1x509 1.0.11 to 1.0.12
- subjectKeyIdentifier OID duplicate definition fix
- JSON Web Token(JWT) full validation demo is available.
- tool_jwt.html update to add 'aud' claim
- ** 4.8.0 updated files
- ChangeLog*.txt
- jws-3.2.*
- jwsjs-2.0.*
- index_jws*.*
- sample_jws*
- tool_b64u*
- tool_{jws,jwt}*.html
- ext/json-sans-eval*.js
- test/qunit-do-jws*.html
* Changes from 4.7.1 to 4.7.2 (2015-May-18)
- x509 1.1.4 to 1.1.6
- add some X.509v3 extension parsing methods.
following methods are added:
- getV3ExtInfoListOfCertHex
- getV3ExtItemInfo_AtObj
- getHexOfTLV_V3ExtValue
- getHexOfV_V3ExtValue
- getPosOfTLV_V3ExtValue
- getExtKeyUsageBin
- getExtKeyUsageString
- getExtAIAInfo
- asn1x509 1.0.10 to 1.0.11
- OID.name2oidList updated for X.509v3 extension OIDs
- OID.name2oid method added
- OID.oid2name method added
- ** 4.7.2 updated files **
- ChangeLog.txt
- asn1x509-1.0.js
- test/qunit-do-x509-ext.html
- test/qunit-do-asn1x509.html
- x509-1.1
- test/index.html
- tool_httpscfg.html
- ext/yahoo-min.js
- ext/yahoo.js
* Changes from 4.7.0 to 4.7.1 (2015-May-14)
- asn1x509 1.0.9 to 1.0.10
- certissuer and certsubj supported in GeneralName class
- x509 1.1.3 to 1.1.4
- getPublicKeyInfoPosOfCertHEX added
- tool_httpscfg.html added
* Changes from 4.6.0 to 4.7.0 (2014-Jul-07)
- RFC 5126 CAdES format supported
- CAdES-BES/EPES/T support in this version.
- asn1cades (NEW)
- asn1tsp 1.0.0 to 1.0.1
- AbstractTSAAdapter, Fixed/SimpleTSAAdapter class added
- asn1cms 1.0.1 to 1.0.2
- SigningCertificate and SigningCertificateV2
attributes are added.
- IssuerAndSerialNumber class constructor now
supports PEM string of certificate.
- properties dDigestAlgs and dCerts of SignedData object
are added for object preservation.
- CMSUtil.newSignedData now supports
SigningCertificate/V2 attributes.
- asn1
- add DEREnumerate class
- x509
- fix for strict mode
- crypto
- fix for Signature.signHex/Str
* Changes from 4.5.0 to 4.6.0 (2014-May-25)
- RFC 3161 Time Stamp Protocol generator is now supported.
- asn1tsp 1.0.0 (NEW)
- asn1 1.0.5 to 1.0.6
- AbstractTime/GeneralizedTime: millisecond support
- asn1cms 1.0.0 to 1.0.1
- IssuerAndSerialNumber: setByCertPEM method added
- SigningCertificate attribute added
- SigningCertificate attributeV2 added
- asn1x509 1.0.8 to 1.0.9
- OID.oid2name added
- X500Name
- add certissuer, certsubject parameter support
- base64x 1.1.2 to 1.1.3
- function hextob64, hextob64nl, b64nltohex added
- tool_tsreq.html for TimeStamp Request demo (NEW)
- tool_tsres.html for making TimeStampToken demo (NEW)
- tool_ca.html
- fix signing key bug
- support ExtKeyUsage
* Changes from 4.2.3 to 4.5.0 (2014-May-17)
- RFC 5652 CMS SignedData generator is now supported.
- asn1cms 1.0.0 (NEW)
- asn1 1.0.4 to 1.0.5
- unsorted DERSet is now supported for ASN.1 BER
- DERUTCTime/GeneralizedTime provides current time
if arguments is not specified.
- asn1x509 1.0.8 to 1.0.9
- x509.Time: automatic detection for UTC/Gen by length
- OID: some oids are added.
- keyutil 1.0.6 to 1.0.7
- KEYUTIL.getHexFromPEM can omit sHead now.
* Changes from 4.2.2 to 4.2.3 (2014-May-14) minor update
- keyutil 1.0.6
- isPublic and isPrivate flag fix for generateKey method.
- tool_ca.html
- fix keyutil.js reference
* Changes from 4.2.1 to 4.2.2 (2014-Apr-19)
- asn1x509 1.0.7 to 1.0.8
- add setSignatureHex method for Certificate class
- modify newCertPEM method to support to specify signature
by value.
- add AuthorityKeyIdentifier X.509v3 extension class
- keyutil 1.0.4 to 1.0.5
- PKCS#10 CSR support. Following methods are added:
- KEYUTIL.getKeyFromCSRPEM
- KEYUTIL.getKeyFromCSRHex
- KEYUTIL.parseCSRHex
- Tool:
- tool_forfact.html:
CSR to fake certificate converter for factorable.net
key weakness check.
- Test codes:
- add test/qunit-do-keyutil-csr.html
* Changes from 4.2.0 to 4.2.1 (2013-Oct-11)
- keyutil 1.0.3 to 1.0.4
- new getPEM method for exporting keys
- exporting PKCS#8 encrypted private key also supported.
- DES-CBC support for PKCS#5 encrypted private key
- additional DSA support
- make old methods are marked as deprecated.
* Changes from 4.1.6 to 4.2.0 (2013-Oct-06)
- DSA support added to most of classes.
- now RSAKey/KJUR.crypto.{ECDSA,DSA} class has new properties
isPrivate and isPublic
- asn1x509 1.0.5 to 1.0.6
- new X509Util.newCertPEM method is added to provate
easy certificate issuance by JSON object.
- DSA/ECDSA support added to Signature, TBSCertificate,
AlgorithmIdentifier and SubjectPublicKeyInfo classes
- keyutil 1.0.2 to 1.0.3
- provide support for DSA
- getKey
- getKeyFromPublicPKCS8Hex,parsePublicPKCS8Hex
- x509 1.1.1 to 1.1.2
- ECDSA,DSA support added in X509.getPublicKeyFromCertPEM
- dsa-modified 1.0.0 to 1.0.1
- method setPrivateKey, setPublicKey are changed to
setPrivate and setPublic respectively to align RSA/ECDSA class.
* Changes from 4.1.5 to 4.1.6 (2013-Oct-02)
- newly dsa-modified 1.0.0 added