Edit on GitHub

PKI SDK changelog

2.17.1 (2024-08-27)

  • [PKI-119] Improve validation for PDF signature with invalid ByteRange parameter.
  • [PKI-124] Improve CRL local cache validation (For CRL distribution points returning inconsistent CRLs).
  • [PKI-125] Improve PAdES validation for mandatory DSS archiving policies.
  • [PKI-123] Fix PAdES not using DSS revocation artifacts on first signer when ValidateAll method call.
  • [PKI-126] Fix PAdES visual positioning for PDFs with cropbox on the page media size.

2.16.1-beta01 (2024-06-13)

  • [PKI-99] Fix PAdES DSS usage for signature-timestamp validation when ValidateAll method call.

2.16.0 (2024-04-16)

  • [PKI-112] Add Nonce and Nonce raw bytes properties to TstInfo
  • [PKI-117] Add support to Encrypted Private Keys decoding
  • [PKI-113] Improve PDF 'Append Mode' generic error to InvalidPdfException
  • [PKI-116] Improve PDF annotation change validation
  • [PKI-118] Improve pt-BR messages on Validation Results
  • [PKI-114] Improve legacy XAdES ArchiveTimeStamp namespace support
  • [PKI-115] Improve DateTimeOffsets on validation messages with custom time zone PkiConfig.TimeZoneInfo
  • [PKI-109] Fix PAdES signatures custom SignatureFieldName being set to default on some scenarios

2.15.0 (2023-07-28)

  • [PKI-102] Add X509Extension option on CSR generation
  • [PKI-102] Add IssuingDistributionPoint option to X509Extension generation
  • [PKI-107] Add global TimeZoneInfo configuration for DateTimeOffset strings
  • [PKI-101] Improve CRLs and Certificates Set decoding performance
  • [PKI-101] Improve CAdES co-signatures performance
  • [PKI-108] Improve PAdES RangeBytes value validation

2.14.0-rc01 (2023-07-28)

  • [PKI-100] Add Qualified Certificate Statements extension decoding and generation
  • [PKI-100] Add X509 Name OrganizationIdentifier element
  • [PKI-100] Improve Name generation from OIDs and Values list

2.13.2 (2023-06-29)

  • [PKI-104] Fix PdfMarks (Adobe wrongly checking signature when PdfMarked post signed with LTV enabled)

2.13.1 (2023-05-03)

  • [PKI-103] Improve PDF DocTimeStamp message-imprint validation

2.13.0 (2022-10-19)

  • Add PadesSigner filling pre-positioned blank signature feature
  • Improve signature check for third parties IPrivateKey implementations
  • Improve PDF signatures listing on non-consistent PDFs

2.12.3 (2022-08-16)

  • Add GovBR Trust Arbitrator option
  • Add X.520 Description name parameter
  • Increase PKI Brazil pre-loaded static CAs

2.12.2 (2022-07-20)

  • Improve PdfContextwith form fields information
  • Improve PdfMarker with form fields filling

2.12.1 (2022-07-10)

  • Improve XML transfer data parameters

2.12.0 (2022-06-27)

Unexpected breaking change

Am I affected?

  • If you make use of custom IPrivateKey, you may need to update your implementation
  • If you make use of any dependent packages, Lacuna.Pki.* family, you may need to update the packages to the latest minor version

Changelog:

  • Add Encryption interface
  • Add signer name and location optional fields to PDF signature
  • Improve signature CSP access to PublicKey
  • Improve PKCS#12 generation options

2.11.7 (2022-06-11)

  • Fix PdfMarker NullReferenceException when preserving signatures visual representation on some PDFs

2.11.6 (2022-06-06)

  • Fix T8 PDF opening exception Unable to cast object of type 'Lacuna.T8.text.pdf.PdfNull'

2.11.5 (2022-05-07)

  • Improve decoding from bad formatted CRL Distribution Point URL

2.11.4 (2022-04-27)

  • Add PDF/A standard property to PdfContext

2.11.3 (2022-04-25)

  • Improve XML and PDF validation with external date reference

2.11.2 (2022-04-22)

  • Fix ValidationException on XML signing

2.11.1 (2022-04-13)

  • Improve Paraguay certificate fields decoding
  • Add Paraguay "Pasaporte" certificate field

2.11.0 (2022-04-02)

  • Add line spacing configuration for PDF (PadesVisualText and PdfMarkText features)
  • Improve Pades signing and validation performance

2.10.1 (2022-03-06)

  • Fix unwanted warning logs from lazy loaded country PKI fields decoding

2.10.0 (2022-02-25)

  • Improve certificate generation feature options
    • User notices certificate policy
    • Extended key usage extension critical option
    • End entity basic constraints extension critical option

2.9.1 (2022-01-27)

  • Improve PDF support with encoded XMP
  • Improve PDF marker signature removal

2.9.0 (2021-11-24)

  • Add PDF marker page content scaling feature
  • Add XML signature editor with archive timestamp extending feature
  • Improve TimestampRequester with Basic authentication option through Authorization header
  • Improve OCSP generation and validation
  • Improve PDF/A compliance signature support

2.8.12 (2021-08-19)

  • Add XAdES X509Name info element by default on PKI Brazil policies
  • Improve PDF handling thread safety
  • Improve PKI Brazil DateOfBirth certificate field decoding error handling
  • Fix XAdES X509Name order
  • Fix PDF mark font auto resizing

2.8.11 (2021-08-07)

  • Improve not supported PDF encryption error handling

2.8.10 (2021-08-02)

  • Add LTV presence check to PAdES signer info

2.8.9 (2021-07-16)

  • Improve PAdES default validation with DSS artifacts
  • Improve support to PDFs with minor inconsistencies

2.8.8 (2021-07-10)

  • Improve TSL (Trusted Service List) status validation
  • Fix PdfMark text vertical align limit

2.8.7 (2021-05-07)

  • Add PDF signature visual representation position recover from PAdES signer info
  • Add signature validation level for obsolete algorithms
  • Add PDfContext with basic PDF and signature info
  • Add password protected PDF exception
  • Set Lapp feature as failover
  • Improve PDF marker permissions checking

2.8.5 (2021-04-22)

  • Fix PAdES visual representation auto positioning behavior when applied on multiple pages

2.8.4 (2021-03-26)

  • Fix Bad Data error on RSA key loading from PKCS#12. Affects .NET Frameworks 4.0, 4.5 and 4.6

2.8.3 (2021-03-24)

  • Improve PDF Marker flattening

2.8.2 (2021-03-19)

  • Improve PDF signatures (without signed attributes) validation policy
  • Improve CMS signatures (without signed attributes) validation policy

2.8.0 (2021-01-11)

  • Add CAdES signing description feature
  • Add XAdES DataObjectFormat description feature
  • Add PAdES visual representation text vertical alignment
  • Add PdfMarker text vertical alignment
  • Improve CAdES signing certificate issuner name validation

2.7.9 (2020-09-17)

2.7.8 (2020-09-14)

  • Update ICP-Brasil CAdES, PAdES and XAdES validation policies
  • Fix XML with comments signature

2.7.7 (2020-09-09)

  • Set exclusive c14n as XML signatures default canonicalization method
  • Add forced removal of XML default namespaces on to-sign elements (which is not being correctly suppressed on .NET c14n implementation, see issue report)
  • Fix namespaces propagation on XML signature validation
  • Fix ValidationContext usage on XAdES validation with archive timestamps

2.7.5 (2020-07-28)

  • Add default XPath transformation on XML enveloped signatures

2.7.3 (2020-07-18)

  • Add PDF metadata include and recover on PadesSigner, PadesSignature and PdfMarker
  • Add global configuration for prioritizing revocation status validation trhough OCSP over CRL
  • Add PDF Document Timestamp signature visual representation option
  • Improve Ecuador certificate fields
  • Improve PdfMarker required area calculation with text rotation

2.7.2 (2020-05-29)

  • Add PAdES signer custom signature field name option

2.7.1 (2020-05-28)

  • Add custom X509 extensions feature to certificate generation

2.7.0 (2020-05-22)

  • Add Banco Central del Ecuador certificate fields
  • Add PKI Argentina certificate fields
  • Add ICP-Brasil missing certificate fields (e.g: RIC, CEI, Dados eleitorais, SIGEPE)
  • Add text font color option to PAdES visual representation
  • Improve CRL local cache performance

2.6.1 (2020-05-07)

  • Fix non-printable characters on stack trace

2.6.0 (2020-04-14)

  • Add embedded font on PAdES PDF/A visual representation
  • Add background color option to PAdES visual representation
  • Add XAdES long term policies
  • Add TimestampException type on mandatory timestamp attributes failure

2.5.5 (2019-12-18)

  • Add Access Identity and Authentication Info certificate attributes encoding
  • Update ICP-Brasil CAs local cache
  • Fix Unix systems CA certificate store loading

2.5.4 (2019-11-21)

  • Fix PdfMark points per centimeters unit computation.
  • Fix retrieving PDF signature visual representation size when malformed rectangle definition on PDF.

2.5.3 (2019-08-06)

  • Improve PdfMarks new page template.
  • Add PdfMarker preserve signatures visual representation feature.

2.5.2 (2019-07-16)

  • Add AlphaCode (a pseudorandom alhpa code generator and handler)

2.5.1 (2019-05-23)

  • Add PKI Paraguay certificate fields
  • Add PAdES auto-positioning vertical and horizontal directions control

2.4.0 (2019-04-08)

  • Add LAPP support
  • Add objects PEM encoder
  • Improve access to validation artifacts

2.3.0 (2019-02-22)

  • Add support for Elliptic-curve certificates validation
  • Add support for Elliptic-curve certificates generation
  • Improve access to validation artifacts
  • Fix email regex validation

2.2.8 (2019-02-15)

  • Improve CadesSigner validation configurator

2.2.7 (2018-12-26)

  • Improve Pdf Marks with owner restrictions

2.2.6 (2018-12-17)

  • Fix Name generation with special characters support

2.2.5 (2018-11-20)

  • Improve PAdES validation with DSS OCSP stored
  • Improve Name fields generation order
  • Improve self-signed certificate generation

2.2.4 (2018-11-09)

  • Fix CadesSigner quick certificate validation with more permisssive configurator

2.2.3 (2018-11-01)

  • Improve memory usage on PAdES signatures
  • Add invalid CAdES signature file exception

2.2.2 (2018-10-17)

  • Add functional PAdES signer reason
  • Add FIPS compliant digest algorithms on .NETFramework 4.0 Client target
  • Add Role attribute for Attribute Certificates
  • Fix PDF marks rotation bug

2.1.3 (2018-08-13)

  • Add TSA optional parameter: TSA policy OID
  • Improve Name encoding policies
  • Fix archive signature finisher

2.1.0 (2018-07-16)

  • Add multi-target package support: .NETStandard 2.0, .NETFramework 4.5 and .NETFramework 4.0 Client

1.20.16 (2018-05-15)

  • Fix certificate chain filling bug on PAdES

1.20.15 (2018-05-08)

  • Update ICP-Brasil CAs local certificate store

1.20.14 (2018-05-08)

  • Improve malformed certificate extensions decode
  • Improve OCSP nocheck validation

1.20.12 (2018-01-30)

  • Add proxy configuration for the PKI SDK Web requests

1.20.10 (2018-01-17)

  • Add signers custom certificate validation configuration support
  • Add offline signer certificate validation configuration preset

1.20.9 (2017-12-27)

  • Add PDF/A standard and PDF version properties to PadesSignature
  • Add PKCertificate generation without certificate policy URI option
  • Improve ASN1 encoding util for primitive types

1.20.8 (2017-12-13)

  • Add serial number option to public key certificate generation

1.20.7 (2017-12-06)

  • Add signature element Id to XmlSignature
  • Fix case sensitive CRL cache path
  • Fix Windows certificate store not supported signature algorithm warnings

1.20.6 (2017-11-21)

  • Add commitment type attribute option for XAdES and PAdES signatures
  • Fix unrecognized commitment type attribute on CAdES
  • Fix PdfMarks not respecting previous throw behaviour

1.20.5 (2017-11-20)

  • Fix PAdES signing-time

1.20.4 (2017-11-17)

  • Add validation context feature for validating CAdES, PAdES and XAdES signatures
  • Add verify parameters method for signer classes
  • Add commitment type attribute option for CAdES signatures
  • Fix chain build loop possibility

1.20.1 (2017-10-26)

  • Multi-target package supporting .Net Frameworks 4.5 and 4.0 Client Profile
  • Using new csproj technology

1.19.5 (2017-10-02)

  • Add Certificate Signing Request (PKCS#10) object
  • Improve RFC 3161 response encoding
  • Improve PKI Peru fields decode
  • Update T8 lib

1.19.4 (2017-09-14)

  • Improve issuer and subject names decode

1.19.3 (2017-09-07)

  • Improved PAdES complete signature
  • Add Timestamp and signer revocation values after PAdES signature completed when LTV
  • Fix multi URIs CRL distribution points extension
  • Fix malformed OCSP status decode bug

1.19.1 (2017-07-27)

  • Removed SHA1 hash algorithm from allowed algorithms on default signature policies. Affects XadesBasic, XmlDSigBasic, Xades AdrTempo timestamps, Pades Basic, Italy CadesBes, CadesBes, CadesT, CadesC, CadesXLong, CadesXType1, CadesXLongType1 and CadesA policies

1.19.0 (2017-07-25)

  • Add PDF password protection feature
  • Add timespan range for OCSP validation
  • Fix OCSP fill issuer
  • Fix bug on custom validation levels set for signing

1.18.0 (2017-07-04)

  • Improve PDF marks

1.17.1 (2017-06-21)

  • Add Public Key X509 Certificate generation
  • Add PKCS#12 generation

1.16.9 (2017-06-10)

  • Pdf date referenced signature validation also considering CMS SignedData revocation data set if present

1.16.8 (2017-05-25)

  • Add property PadesVisualText.SigningTimeOffset

1.16.7 (2017-05-10)

  • Fix XML signature validation rising UnacceptableSignaturePolicyException
  • Fix PDF marks image data redundancy
  • Add URI to data download trace log

1.16.6 (2017-04-26)

  • Fix license refresh on restricted product
  • New restricted product validation

1.16.5 (2017-03-16)

  • Updated ICP-Brasil intermediate CAs

1.16.4 (2017-03-01)

  • Changes on CAdES signature inspection and compression to deal with incorrectly encoded timestamps

1.16.3 (2017-02-15)

  • Add PKI Peru certificate fields

1.16.2 (2017-02-07)

  • Add Xml policy mappers
  • NFe policy without signature elements IDs

1.16.1 (2017-01-23)

  • Fix last hotfix merge

1.16.0 (2017-01-16)

  • Add grunt conditional packaging for both Net4.0 and Net4.5 frameworks
  • Add PdfMarker invalid pdf exception
  • Add more Name parameters
  • Add support to PAdES validation with date reference
  • Add support to CSR generataion
  • Add features based licensing option
  • Improve Icp-Brasil filds. Fields also return null if have default padding value
  • Improve digest algorithm get instance from various names patterns
  • Improve Pades signature to load and validate adbe.pkcs7.sh1 PDF signatures
  • Improve internal downloads
  • Fix TSL UnderSupervision state as a valid state
  • Fix Certificate Store loading delay due certificate chain loading attempt
  • Fix bug with provider Microsoft Base Cryptographic Provider v1.0
  • Fix CAdES archive timestamp encode
  • Fix PAdES visual representation empty line
  • Fix PDF marks and PAdES visual representation incorrect positioning in some rotated PDFs
  • Fix exception in some Icp-Brasil fields decode

1.13.5 (2016-12-08)

  • Add new XML signature policy options

1.13.4 (2016-08-15)

  • Fix bug occurring in some PDF signatures

1.13.3 (2016-07-20)

  • Add versioned T8

1.13.2 (2016-07-14)

  • Fix CAdES complete revocation references attribute order
  • Update italian TSL uri and root

1.13.1 (2016-07-07)

  • Fix bug affecting the signature of some large PDFs

1.13.0 (2016-07-05)

  • Add PAdES ICP-Brasil signature policies (v1.0)
  • Add CAdES ICP-Brasil new signature policies (v2.2 and v2.3)
  • Add XAdES ICP-Brasil new signature policies (v2.3)
  • Add CRL and OCSP asynchronous issuance
  • Fix issue affecting OCSP issuer validation
  • Fix issue in CAdES signer-info digest algorithm definition
  • Fix bug affecting usage of PKCS#12 certificates on rare scenarios

1.12.2 (2016-06-10)

  • Add visual representation parameter exception

1.12.1 (2016-06-03)

  • Add support for decoding of ICP-Brasil certificate fields "OAB" and "RG"
  • Add support on attribute certificate generation for the AuthorityKeyIdentifier extension
  • Introduce new class CadesAcceptablePoliciesCatalog to simplify validation of CAdES signatures accepting multiple signature policies
  • Introduce new class Rfc3161Encoding allowing applications to implement the timestamp protocol (TSP)
  • Introduce specialized exception class TimestampRequestException for identifying errors when requesting timestamps
  • Add support for certificates with rare alternative SHA-1 with RSA signature algorithm OID (1.3.14.3.2.29)
  • Introduce new class FileSystemNonceStore with a dependency-free implementation of the INonceStore interface

1.12.0 (2016-05-02)

  • Introduce new class PdfMarker for performing PDF marks
  • Introduce new interface ITimestampRequester allowing customization of timestamping
  • Add support for customization of culture, format and time zone of the signing time in PAdES visual representation
  • Add support for performing CAdES signatures (without encapsulated content) passing message digest only
  • Add support for adding encapsulated content to CAdES signature
  • Add ICP-Brasil trusted root "v5"
  • Fix issue affecting validation of XML signatures having namespace declarations on the Signature element
  • Fix issue affecting positioning of PAdES visual representations in specific several-signers scenarios
  • Fix issue causing unnecessary PIN dialogs when listing certificates

1.11.2 (2016-03-27)

  • Fix bug on CRL decoding when the ReasonCode is present
  • Improve messages for certificate revocation status validation

1.11.1 (2016-03-24)

  • Fix bug on certificate revocation status validation which caused a stack overflow on rare OCSP validation scenarios

1.11.0 (2016-02-22)

  • SDK no longer requires the iTextSharp AGPL-licensed library in order to perform PAdES signatures
  • Deprecated package Lacuna.Pki.PadesConnector, since PAdES signatures are now performed internally by the SDK

1.10.1 (2016-02-15)

  • Fix bug on PAdES signature which caused an incompatibility with certain TSAs which issued timestamps larger than expected
  • Fix bug on attribute certificate generation which prevented the AuthorityInformationAccess extension from being added when the CAIssuersUri was given
  • Fix bug on attribute certificate validation concerning validation of the "IsCA" basic constraint on the issuer certificate
  • Fix bug on attribute certificate validation when the NoRevocationAvailable extension is present

1.10.0 (2016-02-13)

  • Add support for user-extensible private keys
  • Add support on Asn1Util class for encoding the ASN.1 type "sequence of"
  • Add support for decoding the "DNS Names" certificate extension
  • Add support for clearing the previously loaded SDK license

1.9.1 (2016-02-11)

  • Fix bug on encoding of ASN.1 structure AlgorithmIdentifier which caused the field "parameters" to be omitted instead of being filled with the NULL value

1.9.0 (2016-01-21)

  • Add support for XML signatures (XmlDSig/XAdES)
  • Add support for propagating changes to a signature policy's trust arbitrators to its timestamp validation policies
  • Improve certificate validation to check the PathLenConstraint extension
  • Improve CAdES signature validation on cases on which the signer certificate could not be found
  • Fix bug on validation of licenses without the "restricted use" field
  • Fix bug on CAdES signature validation which caused a wrong ValidationItem to be informed when no valid signature timestamp was found (was informing InvalidReferencesTimestamp, correct is InvalidSignatureTimestamp)

1.8.0 (2015-11-23)

  • Add support on PAdES visual representation for specifying a container inside the signature rectangle on which to place the text

1.7.2 (2015-11-12)

  • Modify behavior of property IcpBrasilCertificateFields.CompanyName to return the company name when the certificate is a ICP-Brasil company (PJ) certificate (previously the property only worked for ICP-Brasil application certificates)
  • Fix bug on ICP-Brasil AD-RC v2.1 CAdES signature policy (policy OID was incorrect)
  • Fix bug on validation of CAdES signatures using implict policies

1.7.1 (2015-10-30)

  • Add support for ICP-Brasil CPF field on "OU" field of subject name having a space after the colon ("OU=CPF: xxxxxxxxxxx")

1.7.0 (2015-10-27)

  • Add support for licenses with use restricted to certain Lacuna products
  • Modify behavior of IcpBrasilCertificateFields class to try to decode fields regardless of whether the certificate appears to be an ICP-Brasil certificate or not
    • Notice: the correct way to verify if a certificate is a valid ICP-Brasil certificate is to validate it using the TrustArbitrators.PkiBrazil trust arbitrator, not through its fields

1.6.0 (2015-10-14)

  • Add support on PAdES visual representation for horizontal text alignment to the right
  • Introduce class PkiInfo with information about the loaded SDK license
  • Fix bug on logging which caused the "source" argument to have an incorrect value

1.5.8 (2015-09-30)

  • Add check of signature value on PadesSigner
  • Fix bug that caused classes WindowsCertificateStore and Pkcs12CertificateStore to return an empty list of certificates instead of throwing an exception when the SDK license was not found
  • Fix bug in the backward compatibility for the old PAdES visual representation

1.5.7 (2015-09-28)

  • Refactor of PAdES visual representation (introducing new class PadesVisualRepresentation2)
  • Fix bug on Italy CAdES policy which caused additional certificates and CRLs to be wrongly added to the SignedData

1.5.6 (2015-08-31)

  • Add support for supplying an external certificate store to the PadesSigner class
  • Fix bug on certificate revocation status check when an external certificate store was required
  • Fix bug on properties DateOfBirth and CertificateType of class IcpBrasilCertificateFields which caused an exception to be thrown if the certificate was badly issued/encoded (behavior now is to return null)

1.5.5 (2015-08-14)

  • Modify licensing to accept license files with .config extension only to prevent leaking of the license files
    • Notice: licenses issued prior to the date of this release are still accepted with a .xml extension

1.5.4 (2015-07-30)

  • Improve certificate revocation status check
  • Improve validation of PAdES signatures to consider internal signature timestamps

1.5.3 (2015-07-30)

(version not released)

1.5.2 (2015-07-23)

  • Add support for password-based authentication with timestamp servers
  • Improve validation messages for errors on revocation status check
  • Improve intellisense documentation
  • Deprecated property PkiConfig.MaxDelay in favor of property PkiConfig.PreemptiveDownloadMaxDelay

1.5.1 (2015-07-16)

  • First publicly available version