Release notes - Version 6.5
🚀 Release highlights
- CB-AdES (ETSI TS 119 152-1) creation and validation capabilities
- Attestations (EAA, PID) creation and validation, in SD-JWT VC and ISO/IEC mdoc formats
- LoTE (ETSI TS 119 602) validation job (XML and JSON)
- XAdES alternative XPath handling
- and a lot more (see below)...
🆕 New features
- [DSS-3928] Demos : add webpage for LoTE validation job summary
- [DSS-3933] Add org.bouncycastle.asn1.max_cons_depth configuration in demos
- [DSS-3941] Add namespace verification for mdoc ETSI TS 119 472-1 conformance
- [DSS-3944] Add support of RFC 9864 COSE algorithms definition
- [DSS-3966] DSS Demos : add option to enforce RFC 8017 conformance for RSA signatures
- [DSS-3969] Introduce TLAlert to report decrement updates in TSLSequenceNumber
- [DSS-3971] DSS Demonstrations : add properties to enable certain alerts on TLValidationJob
⬆️ Improvements
- [DSS-3810] Add support of x5c as unsigned header parameter in JAdES
- [DSS-3930] Improve EAA user-friendly identifiers
- [DSS-3931] CB-AdES : change default to create 'x5t' header parameter instead of 'x5ts'
- [DSS-3947] Introduce more granular Attestation services architecture
🐞 Bug fixes / Issues
- [DSS-3932] LoTE analysis fails if no document was obtained
- [DSS-3934] EAA minor bug fixes and improvements
- [DSS-3936] LoTE minor bug fixes and improvements
- [DSS-3938] Performance issue in JWSCompactSerializationParser#isSupported method
- [DSS-3946] /AP of existing signature field can be created (or modified if using openpdf for verifiying) without invalidating the signature
- [DSS-3953] Add missing commits in the develop branch (QWAC, crypto suites)
- [DSS-3955] In code Mdoc custom claim creation leads to invalid signature
- [DSS-3968] ExpirationAndSignatureCheckStrategy mistakenly synchronizes Trusted Lists with zero or more signatures
- [DSS-3970] In Simple report, change the links to eIDAS Dashboard
📋 Tasks / Other
- [DSS-3925] EAA : generate negative test samples
- [DSS-3926] LoTE : generate test samples
- [DSS-3939] Review attestation modules naming
- [DSS-3954] Update cryptographic mechanism end dates based on TS 119 312 v2.1.1
- [DSS-3957] Upgrade to BouncyCastle 1.85
- [DSS-3959] SD-JWT remove method with subject certificate representation as a device key
- All the changes included in DSS 6.5.RC1.
🔄 Migration
For information about code changes and migration process, please refer to the Migration Guide in documentation.