|
|
Version
2.0.128.29 Summary
New Features
- HMAC or password (non PKI) based signing is now supported.
- Additional helper function ChangeOrAddProperty has been added to make
working with signature properties easier.
- Support for user provided XPath expressions has been added via SignXMLXpathStr
method.
- Support for exported base64 encoded certificates, not necessarily
installed in the local machine store, has been added. It allows users
to store their certificates along with their public key in a central
store and keep their private keys in either smart cards or USB tokens
and hence be mobile within their enterprises and be able to sign as
long as they can access then public keys stored in the central storage.
- A new property DetailedVerificationFlag has been added which when
set to zero (the default is 1), prevents Verify() and VerifyXMLStr()
methods from extracting detailed verification information from the signed
XML. It makes the signature verification faster. If the signer details
and the signed document details are needed, set the DetailedVerificationFlag
back to 1 and call Verify() / VerifyXMLStr() again. Now you have access
to all the properties related to the signature just verified.
- A new method CaptureLiveSignature() has been added. It lets users
capture live signature from signature pads and mouse without having
to create XML Siganture. It is useful for applications where all you
need is an image and a PKI based XML Signature is not required.
The following object methods have been added:
- SignXMLXpathStr
- ChangeOrAddProperty
- CaptureLiveSignature
Following object properties have been added:
- UseHMAC
- HMACPassword
- SignerCertificate
- DetailedVerificationFlag
Bug Fixes
- A bug related to template signing has been fixed. The previous release
failed to detect the presence of the signature template if it was nested
several levels deep inside the XML node tree.
- A bug related to CRL checking when CRL distribution point was provided
as ldap:// has been fixed. Now SecureXML correctly verifies CRL status
for certificates with both http:// and ldap:// type CRL distribution
points.
|
