SecureBlackbox (VCL) 9.1.214

SecureBlackbox (VCL edition) is the comprehensive component collection for your Internet security.

SecureBlackbox is split to several packages:
· PKIBlackbox - offers support for Public Key Infrastructure (X.509 certificates, certificate requests, certificate revokation lists, certificate storages etc.). PKIBlackbox supports Windows Certificates and Windows Certificate Storages. PKIBlackbox lets you manage certificates, stored on CryptoCards and USB CryptoTokens, via CryptoAPI.
· PGPBlackbox - clean-room implementation of all PGP algorithms and standards with support for operations with PGP keys and keyrings (PGPBlackbox is not available for C++Builder)
· SSLBlackbox - client and server components that provide complete support for SSL2, SSL3 and TLS1. Unlike other components SSLBlackbox contains original implementation of all encryption algorithms and security protocols, used in the package, and doesn't depend on third-party libraries.
· MIMEBlackbox - high-quality MIME components with own character conversion tables and own MIME parser/assembler. MIMEBlackbox offers support for S/MIME too.
· SSHBlackbox - client components that provide support for SSH1 and SSH2 (including compression) and don't depend on third-party libraries. Server-side components are in development.
· SFTPBlackbox - client component that provides support for Secure File Transfer Protocol (SFTP, SSH-based protocol).


This is VCL edition, which can be used with Delphi 4-7, C++Builder 4-6 and Kylix 2-3.

Limitations:

· Speed limit on of certain operations
· Nag screen

What's New in This Release: [ read full changelog ]

· [All] (PKI) Made handling of PKCS#11 session-level notifications optional
· [All] (PKI) Made PKCS#11 components tolerant to HSMs supporting single sign-on mode (one login per multiple apps)
· [All] (SFTP) Added /usr/libexec/sftp-server to the list of known sftp server executable locations (SFTP-over-command-channel mode)

· [All] (HTTPS) HEAD and OPTIONS requests, if connection was set to keep-alive, didn't return until disconnection. Fixed.
· [.NET, Java] (PKI) If both loMatchAll and loExactMatch were set in options of certificate lookup, RDN comparison was performed in less strict manner (tag types were ignored). Fixed.
· Note that this fix can have an effect on various certificate validation procedures which will begin to fail due to "non-working" certificate lookups.
· However, this behaviour is standard-compliant and failures can happen only with malformed responses and CA certificates, which were reissued with different Subject RDN.
· If you need to return old behaviour, ...