Return-Path: X-Original-To: apmail-directory-kerby-archive@minotaur.apache.org Delivered-To: apmail-directory-kerby-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id E621018AD2 for ; Thu, 31 Dec 2015 08:37:21 +0000 (UTC) Received: (qmail 1317 invoked by uid 500); 31 Dec 2015 08:37:21 -0000 Delivered-To: apmail-directory-kerby-archive@directory.apache.org Received: (qmail 1285 invoked by uid 500); 31 Dec 2015 08:37:21 -0000 Mailing-List: contact kerby-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: kerby@directory.apache.org Delivered-To: mailing list kerby@directory.apache.org Received: (qmail 1272 invoked by uid 99); 31 Dec 2015 08:37:21 -0000 Received: from Unknown (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 31 Dec 2015 08:37:21 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id D70F21804FB for ; Thu, 31 Dec 2015 08:37:20 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -0.121 X-Spam-Level: X-Spam-Status: No, score=-0.121 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd3-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-eu-west.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id pclEyItmp4i5 for ; Thu, 31 Dec 2015 08:37:19 +0000 (UTC) Received: from mail-pa0-f50.google.com (mail-pa0-f50.google.com [209.85.220.50]) by mx1-eu-west.apache.org (ASF Mail Server at mx1-eu-west.apache.org) with ESMTPS id BCCBB2059E for ; Thu, 31 Dec 2015 08:37:18 +0000 (UTC) Received: by mail-pa0-f50.google.com with SMTP id uo6so128225535pac.1 for ; Thu, 31 Dec 2015 00:37:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-type:content-transfer-encoding; bh=r3Jej1wq2Eswx9NTt996oDZ1v5zpgqqBs/V4g+8hQb0=; b=Cb7scdQEl1wm5Cxa5Pv+TqApVJDwY1VfHfWQyif7wmGAbQEInIvVicfbsgO0w/+2Yi S09/uI8wab1VbPTZkjhNpS+wYor4d18VWg5Hp3dF7aVxvXi0YgYiGSu3oClvV+Nt7zTf xVePE9vE2h8sTXiT4H1etySiUj369nRX0gr/Nb0CtHQJY9q8mAsrAME6UW6VCbn/didb /My2LWgL526SG+LnBddneN5b0HXVTZFGuGzO01QxO7/qNxndka5eag433dpNlZPCbep7 PB+3TT+ZbIYxR6Nox7pSoLLGj/FDto+dKMW6vJjvROtk1JHVrFThOzV+6qXxxwaJvjQV iDvQ== X-Received: by 10.67.4.100 with SMTP id cd4mr26662069pad.59.1451551037377; Thu, 31 Dec 2015 00:37:17 -0800 (PST) Received: from [192.168.1.29] ([176.154.3.51]) by smtp.googlemail.com with ESMTPSA id sy5sm99941916pac.5.2015.12.31.00.37.15 for (version=TLSv1/SSLv3 cipher=OTHER); Thu, 31 Dec 2015 00:37:16 -0800 (PST) Subject: Re: Status of Kerby To: kerby@directory.apache.org References: <9037BCED616A964EB486B12FCA9DCFCF027C4982@shsmsx102.ccr.corp.intel.com> From: =?UTF-8?Q?Emmanuel_L=c3=a9charny?= Message-ID: <5684E939.1080500@gmail.com> Date: Thu, 31 Dec 2015 09:37:13 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: <9037BCED616A964EB486B12FCA9DCFCF027C4982@shsmsx102.ccr.corp.intel.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Thanks a lot ! Le 31/12/15 08:39, Li, Jiajia a écrit : > Hi all, > > Sep 23, the first release 1.0.0-RC1 of Kerby was released. > From Sep 23 to Dec 31, 82 JIRA issues were resolved, including following important features: > > Features or important changes: > 1. PKINIT in DH case done; > 2. PKINIT in RSA case (75%); > 3. Finished token support; > 4. PKIX CMS/X509 support; > 5. Full BER encoding support; > 6. Separate Asn1 parser; > 7. Dump support for Asn1; > 8. Separate KrbClient, KrbTokenClient, and KrbPkinitClient APIs > > JIRAs resolved: > 1. Fix tool's usage in windows > 2. Define transaction API for identity backend > 3. Enhance json backend to support transaction for reasonable efficiency > 4. Fix some log4j warnings and issues > 5. Adding ability to encrypt and sign using non-RSA keys > 6. Get the verify key for signed JWT token from kdc config and signed token in tests > 7. Token issuer must be trusted as one of preconfigured issuers. > 8. Add support for decrypting JWT tokens in the KDC > 9. kinit tool is enhanced to request a service ticket > 10. Fix KinitTool doesn't work to use keytab file > 11. Fix the bit manipulation functions in KrbFlags > 12. Enable assembly plugin to create tar.gz and zip packages for tool-dist > 13. Categorize KrbOptions by adding group info > 14. Refined asn1 APIs, getting rid of the questionable encoding option > 15. Allow to define explicit and implicit fields more easily for collection types > 16. Added enumerated type > 17. Support BER and indefinitive length encoding in ASN1 > 18. Cryptographic Message Syntax (CMS) support > 19. X509 ASN1 types support > 20. Separate token client out of KrbClient > 21. Separate PKINIT client out of KrbClient > 22. Supporting Asn1Any type > 23. Supporting Asn1Choice type > 24. Introduced Asn1Constructed for support of some primitive types using constructed encoding > 25. Provide an ASN1 dumping tool for troubleshooting > 26. Dumping support for built-in ASN1 types and user defined types > 27. Providing an API to use some useful ASN1 functions by consolidating existing utilities > 28. Support decoding of primitive but constructed encoded types > 29. Separate ASN1 parser > 30. Introduced Asn1Converter to convert a parsing result into an ASN1 object > 31. Introduced Asn1Binder to bind a parse result to an existing ASN1 object > 32. Introduced Asn1Encodeable for encode/decode methods > 33. Support decoding of primitive but constructed encoded types > 34. Break down KrbOption into 4 ones: KrbOption, KrbKdcOption, TokenOption, PkinitOption > 35. Merge the anonymous pkinit feature from pkinit-branch > 36. Load configuration content when adding the resource. > 37. Enable kinit tool kdc flag options. > 38. Added the graphics for teh ASN1 hierarchy > 39. Add some javadocs > > In process and plan to do: > > 1. Clean up the JIRAs > > 2. Update the Github website and the sub-project website > > 3. Check the missing Javadoc for important APIs > > 4. Do some tests for Kerby KDC and client tools in linux, windows, and macs > > Note this is an important release with important features and quite a few of bug fixes according to user requirement and feedbacks. When this release is done, the formal 1.0.0 release will be much prepared and approaching soon. > > > Jiajia >