New Features

ECA-4991 - Allow configuration of serial number octet size per CA

ECA-5865 - Add a summary of visible prior approval steps before final approval

ECA-6052 - Add Domain Blacklist validator

ECA-7206 - End Entity Profile setting to allow dnsName SAN field to be automatically populated by the CN in a CSR

ECA-7340 - PSD2 GUI support when adding end entity

ECA-7770 - Database protection for CSR in CertificateData

ECA-7779 - Implement test function in SCP Publisher

ECA-7780 - Implement EJBCA Issue Checker Framework

ECA-7808 - Add Domain Blacklist Validator class with basic structure

ECA-7809 - Persistance of Domain Blacklists

ECA-7810 - Show warning at validation failure in Approval process

ECA-7860 - New Approval issuance phase for Validators

ECA-7861 - Implement DomainBlacklistAsciiLookalikeNormalizer

ECA-7863 - Implement Domain Blacklist Checker classes

Improvements

ECA-5438 - English translations for ErrorCodes in the RA

ECA-5667 - Add a file link metadata type to Approvals

ECA-6075 - RA Web: Improve validator error messages

ECA-7526 - Add a description field to Certificate and End Entity Profiles

ECA-7607 - Optimize ejbca-db-cli speed when verifying audit log

ECA-7693 - CSR download and clear buttons in Ra Web

ECA-7709 - Update tag library schemas for JEE7

ECA-7756 - Improve error message when CA signingkey was changed without renewing CA certificate

ECA-7782 - Add documentation for the EJBCA Issue Checker

ECA-7783 - Attach access control logic to tickets

ECA-7791 - Update to JEE7 API library

ECA-7793 - Log4j priority is deprecated

ECA-7803 - Label the EJBCA Issue Checker as experimental

ECA-7812 - Unit tests for matching against Blacklists

ECA-7817 - Add autocomplete=off to all h:inputSecret fields

ECA-7826 - Wrap tickets descriptions in a class

ECA-7837 - Make Dynamic UI Property handle empty lists

ECA-7838 - Include two choosable head banners for test and acc systems

ECA-7840 - Implement Integer multiple-choice for DynamicUiProperty

ECA-7842 - System test for "Approval" validation phase

ECA-7843 - EJBCA startup does full table analysis on Oracle causing timeout issue during startup

ECA-7852 - Change the menu option "View Log" into "Audit Log"

ECA-7854 - Rename "Constraints" label in CT logs to "Log Sharding"

ECA-7862 - Investigate and fix shouldConvertToCorrectEndEntityInformation test failure.

ECA-7870 - Introduce a ValidatorsHelper for UI tests

ECA-7871 - Add more path examples for windows paths in properties files

ECA-7872 - Update the documentation tags and improve labels for roles pages

ECA-7882 - Sort Admin UI lists ignoring case

ECA-7883 - Rename "Issue Checker" to "Configuration Checker"

ECA-7887 - Improve Domain Blacklist checkers

ECA-7889 - Syntax check of domains in domain blacklists

ECA-7897 - Disallow "Abort certificate issuance" option for Approval Request issuance phase

ECA-7898 - Disallow Approval Request issuance phase for CAA Validators

ECA-7900 - Show matching blacklist entry when a domain is blacklisted

Bug Fixes

ECA-5326 - SCEP RA mode should not require batch generation checkbox in EE profile

ECA-7608 - CSR stored in End Entity is never cleared but re-used

ECA-7664 - Regression: Cannot enable CMS for existing CA

ECA-7717 - Trying to save P11 crypto token with incorrect PIN makes EJBCA think token already exists

ECA-7758 - Fix WebTest failures

ECA-7759 - Regression: Widgets gone missing in JSF conversion - End Entity Profiles -> notifications

ECA-7772 - Avoid foreign key constraints creation for obsolete AccessRulesData and AdminEntityData

ECA-7773 - Hide harmless alter table error from DB CLI import command

ECA-7775 - ziprelease-cesecore-src and ziprelease-cesecore-bin build targets broken

ECA-7776 - ConfigDump: Publish Queue Process Service configs are being exported as "Renew CA Service" Workers

ECA-7777 - Can't view end entity with deleted profile in RA

ECA-7786 - Regression: not possible to export CA keystore

ECA-7787 - Regression: Edit CA page does not show key aliases from Statedumps correctly

ECA-7794 - SCP Publisher does not store/load the password properly

ECA-7796 - Fix FindBugs warnings

ECA-7804 - Update MySQLDialect since it uses MyISAM instead of InnoDB with upgraded Hibernate libs

ECA-7805 - Fix failures in ConfigdumpCoreUnitTest and YamlWriterUnitTest

ECA-7806 - NPEs during scanning

ECA-7807 - NumberFormatException during scan

ECA-7821 - Regression: CA key types not updated when creating CA and selecting signature algorithm

ECA-7850 - Fix checks for numeric IDs

ECA-7855 - SHA384 missing from algorithms selection when returning signed CMP messages

ECA-7858 - Not all certificate profiles shown in Issue Checker for limited admins

ECA-7859 - Regression: addendentity CLI command can not be used for auto-generated passwords

ECA-7873 - Regression: CA cert list in CA Structure & CRLs changes order causing CRL generation to fail

ECA-7874 - InstantiationException when trying to view JSP pages

ECA-7876 - Cannot create CVC CA on JBoss EAP 7.1

ECA-7877 - View Certificate in Edit CA screen not available for CV Certificates

ECA-7879 - Regression: list of CAs is sorted case sensitive

ECA-7885 - Upload controls on Edit Validator page does not work

ECA-7888 - DynamicUiProperty of label type cause NPE on post back to server

ECA-7890 - Missleading error message in adminweb when Domain Blacklist Validation fails

ECA-7896 - EditCAsMBean.initApprovalRequestItems() doesn't init any request item types

ECA-7899 - Increase POST Size for New Blacklist Validator

ECA-7901 - Blacklist validator classes are no longer found ini GUI

Tasks

ECA-7764 - Add a Magnum-CI job that tests trunk on an HSM enabled installation.

ECA-7813 - Check upload file size limit on Appliance

ECA-7816 - Place holder issue for GUI testing of Domain Blacklist Validator

ECA-7820 - Remove installation documentation for WildFly 8,9 and Glassfish

ECA-7864 - DOCUMENTATION: please add FIPS same key restriction

ECA-7880 - Document the Domain Blacklist Validator