1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
|
= API Changes =
== Remove org.mozilla.jss.pkcs11.PK11TokenCert ==
The `org.mozilla.jss.pkcs11.PK11TokenCert` class is not used so it has been removed.
== Deprecate org.mozilla.jss.pkcs11.PK11InternalTokenCert ==
The `org.mozilla.jss.pkcs11.PK11InternalTokenCert` class has been deprecated and will be removed in the future.
Use `org.mozilla.jss.pkcs11.PK11Cert` instead.
== Deprecate org.mozilla.jss.pkcs11.PK11InternalCert ==
The `org.mozilla.jss.pkcs11.PK11InternalCert` class has been deprecated and will be removed in the future.
Use `org.mozilla.jss.pkcs11.PK11Cert` instead.
== Consolidate trust flag constants ==
The trust flag constants defined in `org.mozilla.jss.netscape.security.pkcs.PKCS12` and `org.mozilla.jss.crypto.InternalCertificate` have been deprecated.
Use the corresponding constants in `org.mozilla.jss.pkcs11.PK11Cert` instead.
|===
| `PKCS12` | `InternalCertificate` | `PK11Cert`
| `TERMINAL_RECORD`
| `VALID_PEER`
| `VALID_PEER`
| `TRUSTED`
| `TRUSTED_PEER`
| `TRUSTED_PEER`
| `SEND_WARN`
|
| `SEND_WARN`
| `VALID_CA`
| `VALID_CA`
| `VALID_CA`
| `TRUSTED_CA`
| `TRUSTED_CA`
| `TRUSTED_CA`
| `NS_TRUSTED_CA`
|
| `NS_TRUSTED_CA`
| `USER`
| `USER`
| `USER`
| `TRUSTED_CLIENT_CA`
| `TRUSTED_CLIENT_CA`
| `TRUSTED_CLIENT_CA`
| `INVISIBLE_CA`
|
| `INVISIBLE_CA`
| `GOVT_APPROVED_CA`
|
| `GOVT_APPROVED_CA`
|===
== Consolidate trust flag methods ==
The trust flag methods in `org.mozilla.jss.netscape.security.pkcs.PKCS12` have been deprecated.
Use the corresponding methods in `org.mozilla.jss.pkcs11.PK11Cert` instead.
|===
| `PKCS12` | `PK11Cert`
| `isFlagEnabled()`
| `isTrustFlagEnabled()`
| `encodeFlags()`
| `encodeTrustFlags()`
| `decodeFlags()`
| `decodeTrustFlags()`
|===
The trust flag methods in `org.mozilla.jss.netscape.security.pkcs.PKCS12Util` have been deprecated.
Use the corresponding methods in `org.mozilla.jss.pkcs11.PK11Cert` instead.
|===
| `PKCS12Util` | `PK11Cert`
| `getTrustFlags()`
| `getTrustFlags()`
| `setTrustFlags()`
| `setTrustFlags()`
|===
== Add symkey library ==
The PKI symkey library has been moved into JSS with the following changes:
- the package name has been renamed to `org.mozilla.jss.symkey`
- the JAR file has been renamed to `jss-symkey.jar`
- the shared library file has been renamed to `libjss-symkey.so`
|
