New features
- [DSS-2511] XAdES manifest signature : mime type of referenced entries
- [DSS-2775] JAdES please add support for x5u header
- [DSS-2972] Add optional check verifying a presence and validity of a signature timestamp
- [DSS-3024] XAdES : add support of EdDSA algo
- [DSS-3064] Add docker compose file to demonstrations project
- [DSS-3069], [DSS-3120], [DSS-3146] Introduce offline PKI Factory module to DSS
- [DSS-3090] Add support of XML Evidence Recods
Improvements
- [DSS-2517] XAdES: dss doesn't validate xades:DataObjectFormat
- [DSS-2913] ASiC : introduce CONTAINER_TIMESTAMP type
- [DSS-3017] Add links to referenced standards within cookbook
- [DSS-3044] Add qualification messages to HTML/PDF simple certificate reports
- [DSS-3045] TLValidationJob : extract OtherTSLPointer information to a TL DTO
- [DSS-3056] Add a possibility to define a wildcard within proxy configuration
- [DSS-3060] Align implementation per TS 119 615 v1.2.1
- [DSS-3082] OCSP fails when server does not support "nonce" extension
- [DSS-3096] Make DSSErrorHandlerAlert to retrieve column/line numbers for an error
- [DSS-3098] Process detached timestamp validation with lowest POE time
- [DSS-3099] Add rotation processing on add an empty signature field
- [DSS-3110] Ease signature policy validation constraints
- [DSS-3114] Add support of NoRotate flag on existing annotation position extraction
- [DSS-3158] OCSP error handling
- [DSS-3161] Improve ASiC container type determination
Bug fixes / Issues
- [DSS-2994] Name restriction on an unsupported name form
- [DSS-3004] DSS demo bundle webapp startup time
- [DSS-3036] Utils.fromBase64 condition is not covered
- [DSS-3067] Problem iwth the certificate validation tool at DSS/webapp-demo/certificate-validation
- [DSS-3076] OnlineOCSPSource and nonce length
- [DSS-3083] Default SecureRandomNonceSource should generate nonces of at least 16 octets
- [DSS-3089] Wrong Javadoc for eu.europa.esig.dss.enumerations.Indication.TOTAL_FAILED
- [DSS-3097] ManifestFilePresentCheck shall allow manifest presence for ASIC-S container
- [DSS-3105] esig-dss generates an invalid enveloped XML signature if the origin XML has comments before the root node
- [DSS-3106] esig-dss generates an invalid enveloped XML signature if the origin XML is encoded in latin-1
- [DSS-3111] PAdES : improve LT-level validation
- [DSS-3113] NPE in Diagnostic data builder
- [DSS-3117] Calls that utilize the ZipUtils class is not thread safe
- [DSS-3119] XAdES Enveloping signature does not incorporate comments within root element
- [DSS-3141] esig-dss generates an invalid enveloped XML signature when using URI "#xpointer(/)" if the origin XML has comments
- [DSS-3148] Wrong RefURI check
- [DSS-3162] ASiC-S : SignedFilesPresentCheck verifies across all files, while should check only root level files
Tasks / Other
- [DSS-2898] Create a key store TSPSource implementation
- [DSS-3009] Upgrade BouncyCastle
- [DSS-3042] Fix TrustService element wording in Diagnostic Data XSD
- [DSS-3061] Update ETSI validation report per TS 119 102-2 v1.4.1
- [DSS-3087] Update maven-jaxb plugin to version 2.x
- [DSS-3163] Upgrade to OpenPdf 1.3.32