Release Notes of KeyTalk S/MIME LDAP Addressbook virtual application server
---------------------------------------------------------------------------


KeyTalk S/MIME LDAP secure email address book virtual appliance

Known issues: None
----------------------------
5.7.0 (31 January 2019)
----------------------------
    - ADDED: NAT / DNS overwrite support
    - ADDED: Manual certificate and key upload option to Admin WebUI in PEM/PFX format
    - ADDED: CLI menu option for remote upgrade fetching
    - ADDED: CLI menu option for internal process viewing
    - ADDED: CLI menu option for logfile viewing
    - ADDED: CLI menu option for internal FireWall management
    - ADDED: CLI menu option for viewing blacklisted IPs
    - ADDED: CLI menu option for configuring syslog server
    - FIXED: Internal FireWall issue 
    - CHANGED: Webbased certificate download default to .cer format (was .crt) to improve Outlook compatability
    - CHANGED: Webbased certificate download includes CN value in certificate filename



5.6.1 (17 September 2019)
----------------------------
    - ADDED: Manual SSL certificate upload in PEM and PFX format
    - ADDED: Indicator if KeyTalk client can reach KeyTalk server
    - CHANGED: Require TLS 1.3 to TLS 1.1 to connect to the LDAP
    - FIXED: Install SSL intermediate CA from PEM or PFX
    - FIXED: AWS Console Client stability
    - FIXED: CLI menu renew SSL certificate option
    - FIXED: Hide passwords in Admin configuration



5.6.0 (11 July 2019)
----------------------------
    - ADDED: High Availablity using native LDAP sync over LDAPS
    - ADDED: Graphical User Interface to easily add LDAP HA nodes
    - ADDED: LDAP sync password change support
    - ADDED: HTTPS based search webpage logo change support
    - ADDED: HTTPS based search webpage title change support
    - ADDED: Support to Hyper-V and Azure
    - ADDED: Virtual disk encryption
    - CHANGED: CLI menu extended with factory reset, admin cert based reset, and more
    - CHANGED: Removed manual SSL certificate upload, now requires KeyTalk Certificate Life Cycle Management connection



5.5.3 p1 (24 July 2019)
----------------------------
    - FIXED: Download certificate feature


5.5.3 (20 May 2019)
----------------------------
    - ADDED: Production release
    - ADDED: CLI menu, reset management UI certificate based authentication to NO
    - FIXED: Cronjob activation for KeyTalk certificate renewal 
    - FIXED: CSS injection vulnerability
    - REMOVED: "Optional" certificate authentication



5.5.3beta (17 May 2019)
----------------------------
    - ADDED: Management UI certificate based strong authentication
    - ADDED: CLI menu , set network, factory reset, change password, quit/apply changes
    - ADDED: Automated KeyTalk HTTPS/LDAPS certificate renewal
    - ADDED: License requirement (same license file as the KeyTalk virtual appliance)
    - ADDED: Client CLI account
    - REMOVED: Root CLI account access
    - REMOVED: Manual SSL certificate upload
    - UPDATED: OpenSSL version
    - UPDATED: CentOS version
    - UPDATED: OpenLDAP version
    - FIXED: NTP fetch



5.3.4beta (21 January 2019)
----------------------------
    - FIXED: Under very specific conditions the server would loose its IP



5.3.4.p1.beta (20 November 2018)
----------------------------
    - ADDED: Management UI password change to the Management UI
    - ADDED: LDAP Admin password change to the UI
    - ADDED: Manual uploading of LDAPS/HTTPS certificate in PEM format
    - FIXED: Several management UI bugs
    - FIXED: Auto configuration of assigned NIC


5.3.4beta (19 September 2018)
----------------------------
    - FIXED: Bug in PHP prevented proper mailaddress lookup sanitation for HTTP(S)
    - FIXED: Secondary network interface bug


5.3.3beta (31 August 2018)
----------------------------
    - ADDED: self signed LDAPS/HTTP factory default certificate
    - ADDED: admin setup manual
    - CHANGED: /setup changed to port :3000
    - CHANGED: OVF file naming conventions
    - CHANGED: Minimal core requirements to 2


5.3.0beta (27 August 2018)
----------------------------
    - ADDED: Admin GUI setup page
    - FIXED: HTTP based wildcard search disabled
    - FIXED: LDAP based wildcard search result limited to 1 (zero is not possible given LDAP protocol)
    - CHANGED: Database size updates from 1 million to maximum 50 million certificate entries


5.2.0beta (22 May 2018)
----------------------------
    - ADDED: Custom LDAP schema
    - ADDED: Fail2Ban support
    - ADDED: AIDE support
    - ADDED: NGINX based search