Changelog - GeCert
The GeCert server and Gecert Connect have independent versions. The server version is shown by
/api/system/info (see how to check it); the Gecert Connect version, under Advanced Settings.
Server
1.8.4 (2024-11-27)
Updates database model: no
New features
GET /api/keys/stopwatch-info and GET /api/keys/{id}/stopwatch-info routes, with the time spent in each step, used by the
Check server connection button of Gecert Connect 1.2.0
1.8.3 (2024-11-11)
Updates database model: no
Bug fixes
Fixed the display of the failure messages list and the use of the loading indicator in the web application
1.8.2 (2024-11-11)
Updates database model: no
Bug fixes
Fixed concurrency issue
1.8.1 (2024-11-11)
Updates database model: no
Bug fixes
Fixed the inclusion of the user's organizations when listing certificate accesses
1.8.0 (2024-11-11)
Updates database model: no
New features
Copy of every authorization from one certificate to another (POST /api/certificate-access/certificates/{from}/to/{to} and the
Copy authorizations to another certificate option in the certificate details)
Improvements
The response of a certificate access grant now carries the user's e-mail address
Message explaining the access denied (HTTP 403) error in Gecert Connect, in case notifications are muted
1.7.6 (2024-04-10)
Updates database model: no
Improvements
Logs: request ID in Serilog, operation times in the key stores, in the KMIP (Kryptus) client and in the routes used by the KSP, and cleaner logging of database commands
Certificate validity dates shown with the day (dd/MM/yyyy)
Removed the decryption debugging code from the Kryptus key store
1.7.5 (2024-04-02)
Updates database model: no
Improvements
Cache of the Kryptus HSM responses (KMIP client), with the ResponseCacheDisabled option in the key store configuration
Logs of the Gecert Connect requests to the server
1.7.4 (2023-12-20)
Updates database model: no
Bug fixes
Fixed the block cipher mode and the hashing algorithm in the Kryptus HSM KMIP client, and the padding algorithm name in the logs
1.7.3 (2023-12-05)
Updates database model: yes
New features
Key store access per organization: granted and removed by the Sys Admin in the organization details (POST and
DELETE /api/key-store-access, GET /api/subscriptions/{id}/key-stores), with the ViewKeyStoreAccess and ManageKeyStoreAccess
permissions. Only released key stores are offered to the organization
RS512 algorithm in signature and verification operations
Option to use HSM (UseHsm) when importing keys into Azure Key Vault, and TenantId key store setting
Improvements
Gecert Connect: WebView2 Runtime included in the installer; retry of the request after the token is refreshed, with logout if it fails again; cache of the keys already verified
1.7.2 (2023-08-28)
Updates database model: no
Bug fixes
Handled the case where the default key store is not available
1.7.1 (2023-08-28)
Updates database model: no
Improvements
Error when trying to insert a key into a key store with key insertion disabled, and message in the web application when no key store is available
The DatabaseDefault key store can be overridden in the KeyStores configuration section
1.7.0 (2023-08-24)
Updates database model: yes
New features
Certificate usage: list of the operations performed with the key of each certificate (GET /api/certificates/{id}/usage)
Key Store Details in the Sys Admin area and Key Parameters in the organization
Improvements
Number of accesses in each certificate's summary; error when deleting a key that still has a certificate
1.6.0 (2023-08-16)
Updates database model: no
New features
Key Stores list in the Sys Admin area
Removal of every access to a certificate and of every access of a user
Key deletion in PKCS #11 key stores and HardDelete setting per key store
Gecert Connect maintenance mode (GecertConnect:UnderMaintenance)
1.5.3 (2023-08-11)
Updates database model: no
Improvements
Buttons disabled when the user has no permission; permissions checked on the key's or certificate's organization
Encryption and signature verification performed with the certificate's public key
Gecert Connect: server unreachable screen and log actions through gecertconnect://logs/... links
1.5.2 (2023-08-08)
Updates database model: yes
New features
Key usages record: every operation performed by Gecert Connect is stored with date, user, operation, algorithm, hash and value
Validity dates stored in the certificate, with the update-certificate-validity-dates command to fill in the existing certificates
Improvements
Gecert Connect: grouped notifications and certificate list refresh without blocking the interface
1.5.1 (2023-08-03)
Updates database model: no
Improvements
Failure responses when adding or registering certificates (incorrect password, certificate already in the organization, certificate without an RSA key, key that does not match the certificate), shown in the web application
Key deletion in the database key store
1.5.0 (2023-08-01)
Updates database model: no
New features
Reports: expiration of the organization's certificates and events of one certificate, as XLSX, CSV or PDF
Server configuration in Gecert Connect through the gecertconnect://server/... link, from the
GET /api/app-configuration/gecert-connect/server route
1.4.1 (2023-07-26)
Updates database model: no
Bug fixes
Fixed the listing of a certificate's authorized users
1.4.0 (2023-07-26)
Updates database model: yes
New features
Kryptus kNET HSM key store, with its own KMIP client
Check of the minimum Gecert Connect version (GecertConnect:MinSupportedVersion)
KeyInsertionDisabled setting per key store
Improvements
Only users with access to the organization can be granted access to a certificate, and a user cannot have access to the same certificate in two organizations
1.3.0 (2023-07-13)
Updates database model: yes
New features
Certificate registration (.cer) for an existing key and registration of keys that already exist in the key store
Azure Key Vault key store
Encryption and decryption operations through Gecert Connect
Language selection in Gecert Connect
1.2.2 (2023-06-09)
Updates database model: no
Bug fixes
The Gecert Connect installer no longer launches the application with elevated privileges
1.2.1 (2023-05-23)
Updates database model: no
Improvements
Gecert Connect: single instance, button to open the logs, back button on the login screen and new icon
PKCS #12 incorrect-password messages recognized in Portuguese, English and Spanish
1.2.0 (2023-04-17)
Updates database model: no
New features
First version published with Gecert Connect 1.0.0: advanced settings, logs and notifications in the application
0.2.0 (2023-03-27)
Updates database model: yes
New features
Gecert Connect: GrantID login, certificates and certificate details pages and installer with .NET 6 and the Lacuna Key Storage Provider
0.1.0 (2023-02-09)
First version: organizations, keys, certificates, certificate accesses, events and the key routes used by the KSP
Gecert Connect
1.2.0 (2024-11-27)
New features
Check server connection in the advanced settings, with the time of each step, and a color indicator of the server response time; advanced settings available before login
Certificate verification counter on the initial load and certificate count in the page header
Improvements
Certificates verified in batches on the initial load; certificate polling interval of 60 seconds; local data cleaned up on logout
1.1.3 (2024-04-10)
Improvements
Expiration date with the day; logs with the times of the configuration fetch and of the named pipe
1.1.2 (2024-04-02)
Improvements
Loading indicator on the certificates page; retry of the request after the token is refreshed; keys already verified are not verified again; logs of the requests to the server
1.1.1 (2023-09-15)
Improvements
WebView2 Runtime included in the installer; error messages of the login screen initialization; maintenance polling every 60 seconds and notifications grouped within 30 minutes
1.1.0 (2023-08-17)
New features
Server configuration through the gecertconnect://server/... link; server not configured, server unreachable, update required and
maintenance screens; log actions through links; language selection
1.0.3 (2023-06-09)
Bug fixes
The installer no longer launches the application with elevated privileges
1.0.2 (2023-05-22)
Improvements
Single instance; button to open the logs; back button on the login screen; installer icon and license
1.0.1 (2023-04-26)
Improvements
New logs in the named pipe and in the certificate installation
1.0.0 (2023-04-17)
First published version