CZERTAINLY 2.10.0 - Chain, Validation, Migration 🚀

[3keyroman]

CZERTAINLY 2.10.0

We are happy to announce that CZERTAINLY version 2.10.0 has been released! 🚀

This is a major release that includes new features, improvements, and bug fixes. It is recommended to upgrade to this version as it contains important changes.

Highlights

Improved certificate lifecycle validation and states

The certificate lifecycle now contains internal state, validation status, and compliance status.

• internal state represents stage of certificate lifecycle and transition to different state depends on certificate operations (e.g. issue, revoke, etc.) and/or events (approval expired, certificate revoked externally).
• validation status represents the result of the certificate validation process in time. It is periodically checked by system scheduled job to keep up-to-date certificate validation status
• compliance status gives information about the current compliance of the certificate with the policies and standards, if they are configured.

For more information, see Certificate.

Certificate chain construction

The certificate chain construction process has been improved. The system now supports the construction of the certificate chain from the certificate itself, as well as from the certificate inventory. The certificate chain construction process is now more robust and can handle more complex scenarios.

Certificate chains are available can be retrieved from the certificate itself in PEM and PKSC#7 format.

For more information, see Certificate chain.

Support for certificate migration

The authority providers can now support identification interface for certificates that are already issued by authorities. This allows for the migration of certificates between different RA Profiles. The migration process tends to be automated and validated by the system.

When the certificate is migrated, the system will automatically update the certificate's attributes and metadata to match the new RA Profile. If the certificate cannot be migrated, the system will notify the user and allow them to manually migrate/reissue the certificate.

Updated components

The following components were created or updated as part of this release:

• CZERTAINLY-Interfaces
• CZERTAINLY-Core
• CZERTAINLY-FE-Administrator
• CZERTAINLY-MS-ADCS-Connector
• CZERTAINLY-EJBCA-NG-Connector
• CZERTAINLY-Keystore-Entity-Provider
• CZERTAINLY-Software-Cryptography-Provider
• CZERTAINLY-Common-Credential-Provider

Additional information

You can read the full change log here: CZERTAINLY-Core-2.10.0 and related repositories that are listed in CZERTAINLY.

Visit the our website or official documentation to learn more about CZERTAINLY!