release53.html

---
layout: default
title: KeyStore Explorer - Release Notes
---

<div class="page-header">
    <h1>Release 5.3.2 <small class="text-muted">19 Dec 2017</small></h1>
</div>
<div class="row">
    <div class="col-md-6">
        <p>
            This release fixes the following bugs:
            <ul>
                <li>Fixed errors caused by some encryption algorithms for PKCS#8 private key files (reported by Osys)</li>
                <li>Fixed bug in certificate extension viewer (unknown OID caused an error)</li>
                <li>Fixed update check interval</li>
                <li>Fixed default DN could not include empty RDNs</li>
                <li>Fixed bug that caused an error when trying to access a PKCS#11 keystore under Java 9</li>
            </ul>
        </p>
    </div>
    <div class="col-md-6">
    </div>
</div>

<div class="page-header">
    <h1>Release 5.3.1 <small class="text-muted">01 Nov 2017</small></h1>
</div>
<div class="row">
    <div class="col-md-6">
        <p>
            This release includes the following bug fixes and enhancements:
            <ul>
                <li>Java 9: Fixed ECDSA signature problem with Brainpool curves (reported by Davyd Santos).</li>
                <li>Java 9: Unable to launch on MacOS (reported by Nicolas Henneaux, partial fix by Frank Dietrich).</li>
                <li>Certificate Extension Viewer: When an extension contained multiple URIs, everything after the first URI was not displayed.</li>
                <li>Mac OS version: Removed version number from application name (requested by Don Montalvo).</li>
                <li>The included Bouncy Castle library has been updated to version 1.58.</li>
            </ul>
        </p>
    </div>
    <div class="col-md-6">
    </div>
</div>


<div class="page-header">
    <h1>Release 5.3.0 <small class="text-muted">01 Aug 2017</small></h1>
</div>
<p>
    This release includes the following new features, enhancements and bugfixes:
</p>

<h2 class="h3">New Flexible DN Chooser</h2>
<div class="row">
    <div class="col-md-6">
        <p>
            In older versions of KSE the dialog for entering the Distinguished Name (DN) had a strict scheme of 7 commonly
            used name components (CN, OU, O, L, ST, C, E) in the commonly accepted order. It was not possible to use other
            name components like for instance SerialNumber (SN). Also, it
            was not possible to create a DN with more than one occurrence of the same attribute (especially OU is often used more
            than once in a DN).
        </p>
        <p>
            The new DN chooser dialog allows to add and remove RDNs (relative distinguished names) at any position by
            clicking on the "+" and "-" buttons. For every RDN you can select one of the following name components:
            <ul>
                <li>Common Name (CN)</li>
                <li>Organizational Unit (OU)</li>
                <li>Organization (O)</li>
                <li>Locality (L)</li>
                <li>State (ST)</li>
                <li>Country (C)</li>
                <li>Email Address (E)</li>
                <li>SerialNumber (SN)</li>
                <li>GivenName (GN)</li>
                <li>Surname (SURNAME)</li>
                <li>DomainComponent (DC)</li>
            </ul>
        </p>
        <p>
            The new DN chooser dialog defaults to almost the same scheme as before (CN, OU, O, L, ST, C) with only
            email address removed (according to RFC 5280 it belongs in the SubjectAlternativeName extension).
        </p>
    </div>
    <div class="col-md-6">
        <p>
            <img src="images/releases/release53/rel53_dnchooser.png" class="img" align="top" border="0" />
        </p>
    </div>
</div>

<h2 class="h3">Flexible Validity Date Selection</h2>
<div class="row">
    <div class="col-md-6">
        <p>
            The validity of a certificate generated by KSE used to start at the point of time when it was issued.
            The certificate generation dialog only provided a setting for a validity period in years, months, weeks or days
            and the validity end date was calculated by adding this period to the current date and time. Most of the times
            this is sufficient. However, there are scenarios where it is necessary to create a certificate with a
            <em>notBefore</em> that lies in the past or in the future.
        </p>
        <p>
            KSE 5.3 allows to freely select both validity start ("<em>notBefore</em>") and validity end ("<em>notAfter</em>").
        </p>
        <p>
            The validity start defaults to the current date and time. Therefore the old behavior can now be achieved by
            selecting the wanted amount of years/months/weeks/days like before and then clicking the apply button.
            This sets the end date accordingly.
        </p>
        <p>
            This new feature is a contribution by Michele Mariotti.
        </p>
    </div>
    <div class="col-md-6">
        <p>
            <img src="images/releases/release53/rel53_validity.png" class="img" align="top" border="0" />
        </p>
    </div>
</div>

<h2 class="h3">Other Enhancements</h2>
<div class="row">
    <div class="col-md-6">
        <p>
            <ul>
                <li>Added support for QcStatements OID 0.4.0.1862.1.5 (PKI Disclosure Statements) and OID 0.4.0.1862.1.6 (Type) for eIDAS certificates in certificate viewer (contributed by Jordi Pinzón)</li>
                <li>Windows installer: Silent installation now possible (contributed by shivan)</li>
                <li>Maximum key length for DSA keys is now 2048 (contributed by Luís Câmara)</li>
                <li>Export certificate chain in PEM format (requested by several users)</li>
                <li>Improved file name suggestions for OpenSSL key export in order to avoid name collisions (suggested by Daniel Mota Leite)</li>
                <li>Improved German translation (mostly by Frank Dietrich)</li>
                <li>Compatible with Java 9 now</li>
                <li>Updated included Bouncy Castle library to 1.57</li>
            </ul>
        </p>
    </div>
    <div class="col-md-6">
        <p>
        </p>
    </div>
</div>

<h2 class="h3">Bugfixes</h2>
<div class="row">
    <div class="col-md-6">
        <p>
            <ul>
                <li>DNs with other components than CN, OU, O, L, ST, C, E and/or several occurences of the same
                    name attribute are now properly displayed (reported by Tom Van Oppens)</li>
                <li>Fixed EC private key export (reported by Karsten Ohme)</li>
                <li>Serial number not limited to 32bit anymore (reported by Luís Câmara)</li>
                <li>Fixed NPE when exporting a private key in MSCAPI keystore with DnD (reported by dmatob)</li>
            </ul>
        </p>
    </div>
    <div class="col-md-6">
        <p>
        </p>
    </div>
</div>


<div class="page-header">
    <h1>Older Release Notes</h1>
</div>
<p>
    <a href="release52.html">KeyStore Explorer Release 5.2.0, 5.2.1 and 5.2.2</a>
</p>
<p>
    <a href="release51.html">KeyStore Explorer Release 5.1.0 and 5.1.1</a>
</p>
<p>
    <a href="release50.html">KeyStore Explorer Release 5.0.0 and 5.0.1</a>
</p>