EJBCA Community 8.0 Release Notes

COMMUNITY EDITION JUNE 2023

The EJBCA team is pleased to announce the newest release of our open-source PKI software EJBCA Community Edition with version 8.0 and thank each and every EJBCA Contributor for your work in getting us here.

These release notes cover new EJBCA Community features and improvements implemented between EJBCA Community 7.11 and EJBCA Community 8.0.

This latest community release includes several new features, including Matter Smart Home support as well as Post-Quantum Readiness supporting Dilithium and Falcon candidate algorithms. The release also brings technology upgrades including Java 17 support.

Highlights

Post-Quantum Readiness

EJBCA 8 includes support for creating CAs using the NIST round 3 candidate post-quantum signature algorithms Dilithium and Falcon. The standardization of these algorithms is planned to be finalized by INST in 2024. These algorithms are not for production use but are well suited for post-quantum preparation activities and proof of concept usage. For more information on post-quantum algorithm support in EJBCA, see Post-Quantum Cryptography Keys and Signatures.

Matter Smart Home support

Matter is a new standard for interoperable and secure smart home devices. Matter security is based on certificates and the required certificates can be issued by EJBCA using new subject DN attributes as specified in the Matter standard. For more information, see Create CAs for Matter IoT.

Technology upgrades

As a new major version the technology stack supported by EJBCA 8 includes some important updates compared to EJBCA 7. EJBCA 8 supports running on Java 17 in addition to Java 11. Running on Wildfly 26 as application server is also supported and the EJBCA use of application server is based on JEE8. Bouncy Castle has been upgraded to version 1.73.

Downloads and Resources

EJBCA Community releases follow the release schedule for the Enterprise Edition, including all major and feature releases.

There are several options available for downloading the latest EJBCA Community:

EJBCA Community is available for download from GitHub.
EJBCA Community container is available for download from Docker Hub.
EJBCA Community container is available for download from the AWS and Azure marketplaces.
EJBCA Community is available for download from SourceForge.

For download links and resources, see ejbca.org. Want to learn more about our open-source software? Get in touch over at EJBCA Discussions on GitHub, a collective space where you can share feedback and contribute ideas to future releases. We would love to hear from you.

Keyfactor Community

In the Keyfactor Community, developers, engineers, and security teams can get hands-on with Keyfactor's open-source PKI and signing software, share ideas with peers, and learn from industry experts. Find out more and sign up for the Keyfactor Community Newsletter at ejbca.org.