EJBCA 7.9.1 Release Notes

JUNE 2022

The EJBCA team is pleased to announce the release of EJBCA 7.9.1.

This release includes improvements for the Microsoft Auto-enrollment integration and enhanced support for OAuth key rollover.

Deployment options include EJBCA Hardware Appliance, EJBCA Software Appliance, and EJBCA Cloud.

Highlights

Improvements to Microsoft Auto-enrollment Integration

We have resolved a couple of issues related to concurrent requests to EJBCA's auto-enrollment servlets. The improvements ensure proper handling of parallel requests, even under heavy loads.

New OAuth Key Updater Service

To better support OAuth providers' key rollover process, a new service worker has been added which automatically polls the provider for new public keys. See OAuth Key Update Worker for more details.

Upgrade Information

Review the EJBCA Upgrade Notes for important upgrade information. For upgrade instructions and information on upgrade paths, see Upgrading EJBCA.

EJBCA 7.9.1 is included in EJBCA Hardware Appliance 3.9.6, EJBCA Software Appliance 2.2.1 and EJBCA Cloud 2.10.1.

Change Log: Resolved Issues

For full details of fixed bugs and implemented features in EJBCA 7.9.1, refer to our JIRA Issue Tracker.

Issues Resolved in 7.9.1

Released June 2022

New Features

ECA-10693 - Periodically update public keys on Azure OAuth Alias

Improvements

ECA-10561 - ACME EAB with multiple keys

ECA-10519 - Add proper Git readme and license files in root directory

ECA-10746 - Improve ACME DNS challenge error handling and logging

ECA-10562 - Add support for EE email in REST /v1/certificate/pkcs10enroll POST

Bug Fixes

ECA-10300 - MSAE alias "Test connection" clears user input

ECA-10545 - RA Web Make New Request does not correctly parse CSR

ECA-10692 - Intune revocation poller fails if CA uses ldap order

ECA-10734 - ADConnectionSingletonBean - could not obtain lock within 5000MILLISECONDS

ECA-10745 - MSAE "RelatesTo" Id can ger overwritten during parallel requests

ECA-10758 - Sun PKCS11 not working on RedHat OpenJDK 11.0.15

ECA-10763 - Name constraints throwing NPE after 7.6.0