From 72437deddd45d38e6a39d05f849430239595e9a1 Mon Sep 17 00:00:00 2001 From: Raul Metsma Date: Wed, 28 Aug 2024 13:02:14 +0300 Subject: [PATCH] Update release notes and code signature timestamping URL-s (#617) IB-7900 Signed-off-by: Raul Metsma --- COPYING | 15 +++++++-------- RELEASE-NOTES.md | 20 ++++++++++++++++++++ build.ps1 | 4 ++-- libdigidocpp.wxs | 4 ---- src/CMakeLists.txt | 4 ++-- vcpkg.json | 2 +- 6 files changed, 32 insertions(+), 17 deletions(-) diff --git a/COPYING b/COPYING index 5aa31cc36..e145b13fb 100644 --- a/COPYING +++ b/COPYING @@ -15,14 +15,13 @@ Schema for XML Signatures [2] http://www.w3.org/Consortium/Legal/IPR-FAQ-20000620.html#DTD _______________________________________________________________________________ -etc/schema/OpenDocument_manifest.rng - - OASIS OpenDocument v1.0 - OASIS standard, 1 May 2005 - Relax-NG Manifest Schema - $Id$ - © 2002-2005 OASIS Open - © 1999-2005 Sun Microsystems, Inc. +etc/schema/OpenDocument_dsig.rng + + OASIS OpenDocument v1.2 + Committee Draft 05 Rev 02, 11 November 2010 + Digital Signatures Relax-NG Schema + + Copyright © OASIS Open 2008-2010. All Rights Reserved. _______________________________________________________________________________ etc/schema/OpenDocument_manifest_v1_2.rng diff --git a/RELEASE-NOTES.md b/RELEASE-NOTES.md index 692e737b5..edcccf020 100644 --- a/RELEASE-NOTES.md +++ b/RELEASE-NOTES.md @@ -1,3 +1,23 @@ +Libdigidocpp library [3.18.0](https://github.com/open-eid/libdigidocpp/releases/tag/v3.18.0) release notes +-------------------------------------- +- Major rewrite of library internals due upstream dependecy xalan-c and xml-security-c package has been retired. + https://shibboleth.atlassian.net/wiki/spaces/DEV/pages/3726671873/Santuario + https://lists.apache.org/thread/tls9xgp45zbhzc9k8jhd3m49r6npbrql +- Update libraries and platform support + (#572, #565, #571, #570, #574, #578, #581, #582, #583, #579, #587, #589, #590, #563, #592, #597, #605, #608, #616) +- Improve signature and container compatibility + (#573, #585, #586, #588, #591, #584, #596, #593, #595, #603, #604, #607, #613, #609) +- Other fixes and optimizations + (#564, #577, #580, #599, #606, #612, #614, #611, #610) + +[Full Changelog](https://github.com/open-eid/libdigidocpp/compare/v3.17.0...v3.18.0) + +Libdigidocpp library [3.17.1](https://github.com/open-eid/libdigidocpp/releases/tag/v3.17.1) release notes +-------------------------------------- +- Keep previous signature in memory to avoid changing its structure + +[Full Changelog](https://github.com/open-eid/libdigidocpp/compare/v3.17.0...v3.17.1) + Libdigidocpp library [3.17.0](https://github.com/open-eid/libdigidocpp/releases/tag/v3.17.0) release notes -------------------------------------- - Update libraries and platform support (#549, #554, #558, #553) diff --git a/build.ps1 b/build.ps1 index 71a1c0eb5..4a0e86c83 100644 --- a/build.ps1 +++ b/build.ps1 @@ -64,7 +64,7 @@ foreach($type in @("Debug", "RelWithDebInfo")) { if($sign) { & $vcvars $platform "&&" signtool.exe sign /a /v /s MY /n "$sign" /fd SHA256 /du http://installer.id.ee ` - /tr http://sha256timestamp.ws.symantec.com/sha256/timestamp /td SHA256 ` + /tr http://timestamp.digicert.com /td SHA256 ` $vcpkg_installed_platform/$platform-windows/bin/*.dll ` $vcpkg_installed_platform/$platform-windows/debug/bin/*.dll } @@ -81,5 +81,5 @@ if($sign) { if($sign) { & $vcvars $platform "&&" signtool.exe sign /a /v /s MY /n "$sign" /fd SHA256 /du http://installer.id.ee ` - /tr http://sha256timestamp.ws.symantec.com/sha256/timestamp /td SHA256 "$msi_name" + /tr http://timestamp.digicert.com /td SHA256 "$msi_name" } diff --git a/libdigidocpp.wxs b/libdigidocpp.wxs index 12b113d95..7ee740bdd 100644 --- a/libdigidocpp.wxs +++ b/libdigidocpp.wxs @@ -37,8 +37,6 @@ - - @@ -70,8 +68,6 @@ - - diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt index 063223af0..81b15fd88 100644 --- a/src/CMakeLists.txt +++ b/src/CMakeLists.txt @@ -107,6 +107,7 @@ add_library(digidocpp crypto/TS.cpp crypto/X509Cert.cpp crypto/X509CertStore.cpp + $<$:crypto/WinSigner.cpp> util/ZipSerialize.cpp ) @@ -229,7 +230,6 @@ install( TARGETS digidocpp if(WIN32) list(APPEND CRYPTO_HEADER crypto/WinSigner.h) - target_sources(digidocpp PRIVATE crypto/WinSigner.cpp) target_compile_options(digidocpp PUBLIC "/guard:cf") target_link_options(digidocpp PUBLIC "/guard:cf") target_link_libraries(digidocpp PRIVATE Crypt32 cryptui ncrypt) @@ -242,7 +242,7 @@ if(WIN32) add_custom_command(TARGET ${TARGET} POST_BUILD COMMAND signtool.exe sign /a /v /s MY /n "${SIGNCERT}" /fd SHA256 /du http://installer.id.ee "$<$:/ph;/ac;${CROSSSIGNCERT}>" - /tr http://sha256timestamp.ws.symantec.com/sha256/timestamp /td SHA256 $ + /tr http://timestamp.digicert.com /td SHA256 $ COMMAND_EXPAND_LISTS ) endforeach() diff --git a/vcpkg.json b/vcpkg.json index 9da42ba0d..de815d66d 100644 --- a/vcpkg.json +++ b/vcpkg.json @@ -1,6 +1,6 @@ { "name": "libdigidocpp", - "version": "3.18.0", + "version": "4.0.0", "dependencies": [ { "name": "libxml2",