What's new in SecureBlackbox for BizTalk 12.0.264

Jan 8, 2015
  • (DAV) TElWebDAVServer.OnBeforeUpload/OnBeforeDownload/OnTransferFinished events added
  • (HTTPS) Added TElHTTPSClient.PostMultipart() method.
  • (SOAP) Added TElXMLSOAPClient.SendMessageWithAttachment(s) methods.
  • (PKI) Added TElRelativeDistinguishedName.GetStringValuesByOID/GetFirstStringValueByOID methods.
  • (XML) Added xoUseHexSerialNumber option to TElXAdESSigner/TElXAdESVerifier.XAdESOptions property.
  • (Base) Improved RDN comparison according to RFC 5280
  • (Base) TElCustomFileSystemAdapter improved to handle UNC paths set as BasePath.
  • (HTTPS) TElHTTPSServer improved to parse If-Match/If-None-Match headers.
  • (SSH) TElSSHKey.LoadPrivateKey improved to load Putty public keys even in case of SB_ERROR_SSH_KEYS_INVALID_PASSPHRASE return code.
  • (HTTP) TElHTTPSClient.PostWebForm improved to encode empty POST parameter values correctly.

New in SecureBlackbox for BizTalk 12.0.263 (Dec 17, 2014)

  • (PKI) TElX509CertificateEx.SerialNumber property can be set to a value no longer than 20 bytes in order to ensure compatibility with certain third-party readers. This doesn't apply to TElX509Certificate.SerialNumber property.
  • (Cloud) Added SolFS+CloudBlackBox samples on C#, Java, VB.Net and update sample on VCL
  • (PKI) Added TElCertificateRevocationListEx.PreferredHashAlgorithm property that allows to set CRL signing hash algorithm.
  • (Cloud) Added support for resumable and chunked uploads for Google Drive. (DAV) TElWebDAVServer improved to process chunked requests correctly.
  • (PKI) HTTP and LDAP CRL retrievers now support CRLs provided in PEM format.
  • (SFTP) Added proper support for fmOpenOrCreate mode on SFTP versions 3 and 4
  • (MIME) Fixed hang up when parsing a multipart message and no boundary found in the part body
  • (XML) Fixed thread-safety problem in InitializeXMLCharProps method (XML initialization).
  • (XML) Fixed handling of here() function for XPath tranform and XPath Filter 2.0 transform.
  • (XML) Fixed handling XPath expression when comparing with an empty

New in SecureBlackbox for BizTalk 12.0.261 (Oct 17, 2014)

  • [All] (Base) Added TElX509CertificateValidator.SkipSubjectNameIfAltNameExists property that forces the validation to be performed according to RFC6125.
  • [All] (PKI) Added support for buggy TSP servers that provide responses under "application/timestamp-result" content type.
  • [All] (XML) Added XPath Filter 2.0 transform support.
  • [All] (Cloud) Added support for OAuth 2.0 for Dropbox
  • [All] (PKI) Added pcsoUseSystemProcAddresses to TSBPKCS11StorageOption. Allows to work with some buggy PKCS11 tokens.
  • [All] (PKI) Improved searching for CA certificate for OCSP signer certificate in the TElX509CertificateValidator.
  • [All] (XML) Optimized XPath query processing.
  • [All] (PKI) Fixed AV in certificate validator when ValidateInvalidCertificates property is true.
  • [All] (PDF) Fixed writing of array objects after appending a new object.
  • [All] (XML) Fixed exclusive canonicalization transform processing.
  • [All] (Cloud) Fixed folders creation for Google Drive
  • [All] (Cloud) Fixed several minor issues in Dropbox component
  • [VCL] (Base) Fixed parsing of numbers with decimal separator other than dot in JSON
  • [VCL] (Base) Fixed memory leak in TElX509CertificateValidator (CRL object was not disposed of in some cases).
  • [VCL] (HTTP) TElHTTPUtils.HTTPTimeToDateTime method didn't parse dates with Sunday as a weekday. Fixed.
  • [VCL] (Base) Global validation element retriever factory objects were not freed with CleanupRegisteredGlobalObjects(). Fixed.
  • - [.NET] (Base) NullReferenceException was occasionally thrown in response to socket closure on WinRT platform. Fixed.

New in SecureBlackbox for BizTalk 12.0.260 (Oct 17, 2014)

  • [All] (FTPS) TElSimpleFTPSServer.OnFileAllocate event added.
  • [All] (SFTP) TElSimpleSFTPClient enhanced with new DownloadStream/DownloadFile/UploadStream/UploadFile overloads with SuppressAdditionalOperations parameter that allows to suppress additional checks. Allows to work with some buggy servers.
  • [All] (Base) Added ability to reuse binding address in outgoing sockets
  • [All] (Mail) TElSMTPClient: DIGEST-MD5, CRAM-MD5 and NTLM SASL authentication mechanisms are now enabled by default.
  • [All] (SSH) Added DefaultWindowSize and MinWindowSize properties to the server-side SSH component
  • [All] (PKI) Certificate Policies extension are now saved in more 3rd party software friendly way
  • [All] (SSL) Improved compatibility of DTLS components with Chrome and Firefox implementations
  • [All] (PDF) Improved clearing of TElPDFDocument instance (make it reusable).
  • [All] (Base) TElX509CertificateValidator performed redundant revocation checks for already checked certificates. Fixed.
  • [All] (Base) TElSocket hanged during proxy authentication on some conditions. Fixed.
  • [All] (FTPS) ALLO size parameter was limited to maximum 32 bit integer value. TElFTPSServer/TElSimpleFTPSServer fixed to allow larger sizes.
  • [All] (Mail) Fixed a bug which caused incorrect time parsing in mail messages.
  • [All] (SSL) Fixed an issue in custom TLS extension processing (the extension type field was not promoted to the user)
  • [.NET] (Base) Fixed a minor string processing bug in product core that was unintentionally added in the previous update and resulted in various side effects.

New in SecureBlackbox for BizTalk 12.0.259 (Oct 17, 2014)

  • [All] (FTPS) TElSimpleFTPSClient enhanced with parametrized MLSD/MLST commands support.
  • [All] (MIME) Added ability to set a custom MIME prefix text; see the TElMessage.MIMEPrefix property
  • [Java] (XML) Added SOAP samples.
  • [All] (Mail) SMTP client changed to report command replies with OnReceived event line-by-line, not a complete reply at once
  • [All] (MIME) Changed declaration of TElDKRSAPublicKey.Generate method; now it takes only Bits parameter and returns generated private key as a byte array
  • [VCL] (MIME) Changed type of TElDKRSAPublicKey.Exponent and TElDKRSAPublicKey.Modulus properties; ExponentSize and ModulusSize properties were removed
  • [Java] (PDF) Signing process took a lot of time in some conditions (when large data blocks were to be encoded to BASE16).
  • [All] (FTPS) Fixed a bug when it was impossible to change outgoing data inside TElSimpleFTPSServer/TElFTPSServer.OnBeforeSendReply event handler.
  • [All] (FTPS) It was impossible to change outgoing data inside TElSimpleFTPSServer/TElFTPSServer.OnBeforeSendReply event handler.
  • [All] (MIME) Fixed several bugs in DKIM signatures verification
  • [VCL] (MIME) The first character of default MIME prefix text was missed. Fixed.
  • [VCL] (MIME) Fixed a bug with missing the first character of default MIME prefix text

New in SecureBlackbox for BizTalk 12.0.258 (Oct 17, 2014)

  • [All] (FTPS) TElSimpleFTPSServer now supports wildcards for NLST command. This allows "mget *.*" command to work.
  • [Java] (PDF) TinySignerPKCS11 sample added.
  • [All] (Base) TElCustomCertStorage.LoadFromBufferJKS method fixed to report error if wrong password provided.
  • [All] (Base) FileSystemAdapter incorrectly processed UNC paths. Fixed.
  • [All] (PKI) TElMessageTimestamper.Timestamp produced invalid timestamps. Fixed.
  • [VCL] (LDAP) Fixed a bug when search operation failed. The bug was introduced in first 12th version builds.
  • [.NET] (Base) ParseURL method failed if the URL contained a port number. Fixed.

New in SecureBlackbox for BizTalk 12.0.257 (Oct 17, 2014)

  • [All] (Base) PEM decoding fixed.
  • [All] (DC) Fixed URL composing which is used to post back signature results in ActiveX control
  • [All] (HTTP) Digest authentication fixed.
  • [All] (SSL) Server was incorrectly choosing a session certificate in certain ciphersuite configurations, leading to handshake failures. Fixed.
  • [All] (SSL) Fixed occasional GCM cipher failures in SSL/TLS client
  • [VCL] Due to a bug in C++Builder compiler certain parts of SecureBlackbox code were unusable. Workaround has been added.
  • [.NET, Java] (FTPS) foPreallocateStorage in TElSimpleFTPSClient didn't work due a typo error. Fixed.
  • [.NET] (Base) When using a workaround in UNC path handling, the error code was not reset. Fixed.

New in SecureBlackbox for BizTalk 12.0.256 (Oct 17, 2014)

  • [All] Documentation updated to reflect the replacement of BufferType with ByteArray.
  • [.NET] (Base) The mechanism to open files behind a UNC path has been improved.
  • [All] (HTTPS) URL with parameters (the part after ?) were passed by TElHTTPSClient to the server with an extra question mark. The issue appeared in build 255 due to last-minute changes. Fixed.

New in SecureBlackbox for BizTalk 12.0.255 (Oct 17, 2014)

  • [All] BufferType type has been replaced with ByteArray.
  • [VCL] Delphi 5 (yes, that old one) support dropped
  • [VCL] RAD Studio XE6 support added
  • [All] (PKI) Added support for trusted timestamps (TSP protocol) to Authenticode
  • [All] (HTTPS) Added handling of response code 308 as per RFC 7238
  • [All] (FTPS) TElSimpleFTPSServer.OnBeforeSendReply event added.
  • [All] (SSH) InactivityPeriod property added for forwarding classes that tells the component to close the forward if there were no activity for some time.
  • [All] (SSL) Added support for signaling ciphersuite value (SCSV), a compatible method for indicating support for renegotiation info extension.
  • [All] (PKI) Added SHA2 support to PKCS#5
  • [All] (MIME) Added AlignEncryptedKey property that allows to fix a compatibility issue with old software in encrypted mail messages
  • [All] (Base) TElMessageEncryptor/TElMessageDecryptor improved to support RSA-OAEP with non SHA-1 MGF1 functions.
  • [All] (Base) TElMessageEncryptor and .NET EnvelopedCms compatibility improved.
  • [All] (Base) Processing of X.509 CRL Distribution Points and Name Constraints extensions significantly reworked and improved.
  • [All] (Base) TElDSAKeyMaterial.LoadPublic improved to load PEM-encoded keys in OpenSSL format.
  • [All] (PKI) TElCertificatePoliciesExtension improved to handle policies with multiple qualifiers correctly.
  • [All] (XML) Added workaround for parsing TSP info if a data contains TSP reply.
  • [All] (FTPS) TElSimpleFTPSServer changed to return 550 code in case of file absence on DELE request.
  • [All] (SFTP) Improved upload speed with Bitvise WinSSHD server.
  • [All] (PKI) TElTSPServer class improved to clear AuthenticatedAttributes on subsequent requests.
  • [All] (MIME) Removed the Offset parameter in the TElMessageHeader.Parse method
  • [All] (Base) TElMessageEncryptor/TElMessageDecryptor improved to support RSA-OAEP with non SHA-1 MGF1 functions.
  • [All] (Base) TElMessageEncryptor and .NET EnvelopedCms compatibility improved.
  • [All] (Base) Processing of X.509 CRL Distribution Points and Name Constraints extensions significantly reworked and improved.
  • [All] (SSL) Server name extension is now automatically sent on TLS 1.0-1.2, which aims to improve compatibility with newer SSL and HTTPS servers.
  • [.NET] (Base) Improved cryptographic code efficiency with regard to garbage collection
  • [.NET, C++, VCL] (Base) Improved error reporting in DiskFileSystemAdapter - now the error code is [attempted to be] returned more precisely and not just "Access Denied" as before.
  • [Java] (XML) Optimized xml canonicalization and saving.
  • [All] (XML) Fixed NullPointerException in TElXAdESVerifier.ExtractAllCertificates method.
  • [All] (Cloud) A minor fix to shared access signatures calculation in debug mode
  • [All] (HTTPS) When sending the request using the inherited methods of TElRESTClient, output stream was not cleared before the second request.
  • [All] (HTTPS) Multiple cookies put to HTTPClient.RequestParameters.Cookies were sent not correctly. Fixed.
  • [All] (HTTPS) 204, 205 and 304 response codes were not handled right if connection was kept and not closed by the server. Fixed.
  • [All] (PKI) Fixed CompleteChainValidation parameter in TElX509CertificateValidator.Validate method.
  • [All] (PDF) Fixed extra newline in signature widget for numeric OID values generated by TElPDFPublicKeySecurityHandler.GetSignatureInfo method.
  • [All] (Charsets) Fixed charset conversion.
  • [All] (XML) Fixed XPath processing.
  • [All] (SOAP) Ensures that a Header element is always created before Body element.
  • [All] (SSL) The TLSv1.2-only client did not reject servers rolling back to TLSv1.0 or TLSv1.1. Fixed.
  • [All] (MIME) Fixed a bug in parsing mail headers with empty field bodies
  • [VCL] (Base) Fixed TElRandom.Randomize implementation.
  • [VCL] (Base) Fixed import and export of keys to Windows system stores, broken in one of SBBv12 betas.
  • [VCL] (PDF) Fixed decryption with TElPDFPublicKeySecurityHandler.
  • [.NET] (SSL) Fixed broken SSLv2 implementation.
  • [.NET, Java] (SSL) TElSSLServer didn't work with some TLS1.2 ciphersuites. Fixed.
  • [.NET] (Office) Fixed constructor visibility for some encryption handlers.
  • [Java] (Base) Fixed JNI.java not to include the JNI native library extension Java doesn't expect the extension by default and doens't work in some cases when the extension is specified.
  • [All] (Office) Fixed RC4 decryption for binary documents.
  • [C++] (Office) Fixed signing of .docx, .xps documents for Mac/iOS

New in SecureBlackbox for BizTalk 12.0.253 (Oct 17, 2014)

  • [All] (PKI) PKCS#11 constants and types have been renamed from CK?_ (eg. CK_LONG, CK_RV) to SB_CK?_ (SB_CK_LONG etc.)
  • [All] (HTTPS) NewURL parameter in OnRedirection event of TElHTTPSClient can now be changed by the event handler.
  • [All] (FTPS) TElSimpleFTPSServer.OutgoingLocalBinding property added that allows to set outgoing address and port for active transfer mode.
  • [All] (FTPS) Added support for EPRT and EPSV commands to FTPS server.
  • [All] (FTPS) Added support for SITE command in FTPS server.
  • [All] (SSH) Added port knocking functionality to SSH forwarding components.
  • [.NET] (PKI) PKCS#11 is now available for Windows CE
  • [C++] (PKI) PKCS#11 is now available for static PKCS#11 libraries on iOS.
  • [Java] (PKI) PKCS#11 via JNI is now available for Android.
  • [All] (FTPS) FTPS server now reports error code to a client in case of exception inside OnTransferCompleted event handler.
  • [Java] (Base) Fixed a bug in JCE cryptoprovider that caused invalid signatures generation.
  • - [Java] (Office) Fixed signing/verification using CryptoAPI signature handler for some binary documents.

New in SecureBlackbox for BizTalk 12.0.251 (Oct 17, 2014)

  • [All] (Cloud) SkyDrive component has been renamed to OneDrive
  • [C++] Static libraries for iOS and MacOS requires compiler and library support for the ISO C++ 2011 standard.
  • [.NET] (FTPS) RemoteCharset property has been removed from TElSimpleFTPSClient
  • [All] (PKI) Added HMAC-Based One-Time Password and Time-based One Time Password
  • [All] (Cloud) Added support for Box.com cloud storage
  • [All] (FTPS) Added support for HOST command.
  • [All] (FTPS) Added QuoteParameters property to the client component which specifies, when to wrap the parameter of the FTP command with QuoteParamChar property
  • [All] (FTPS) TElSimpleFTPSServer.OnCommandUnhandled event added.
  • [All] (XML) Added TElXMLSOAPClient component.
  • [Java] (PKI) JNI module and code improved to allow usage of PKCS#11 devices on Linux x86/x64/Mac OS X.
  • [All] (OpenPGP) Code improved to use the latest keys expiration date for malformed keys with wrong packets sequence.
  • [All] (SSH) Added support for global (non-channel-wise) keep-alive signals.
  • [All] (PKI) Added csoUseGenericSigAlgorithmOIDs flag for better control over signature algorithm written down to the CMS structure.
  • [All] (PDF) Improved invisible signature to conform to PDF/A requirements.
  • [All] (SSL) Added support for client-side authentication with EC certificates.
  • [All] (FTPS) FTP server improved to accept "MODE S" command.
  • [NG] (iOS, MacOS) Fixed a memory management issue caused by a revised implementation of core TList class on NG platform. The problem led to occasional memory access errors (AV's etc.) on iOS and MacOS platforms.
  • [VCL, .NET] (SSH) TElSSHServer closed connection after EOF packet was received from a client. Now this behaviour can be controled using TElSSHTunnelConnection.OnEOF event.
  • [VCL, .NET] (SSH) TElShellSSHSubsystemHandler worked incorrectly when input data was sent from a client using pipe. Improved.
  • [VCL] (Base) Optimized UTF-16 to UTF-8 conversion for non-Win32 platforms.
  • [C++] Improved/fixed wide char/wide string handling for Linux, MacOS and iOS platforms.
  • [VCL] (SSH) GSS-API can now be used under Linux and MacOS X.
  • [All] (Base) Fixed a bug when certificate policies extension of TElX509Certificate was read incorrectly.
  • [All] (SSL) Fixed a bug in TElSessionPool.Remove that may cause a deadlock.
  • [All] (ZIP) Fixed bugs with adding a directory into the archive for non Windows systems and with uncleaned list of directory signatures after archive has been closed
  • [All] (Office) Fixed loading of xml signatures if ManifestHashAlgorithm element is not present in the signature info.
  • [All] (PKI) Fixed occasional 'Invalid key length' exception thrown by TElMessageEncryptor and Cloud components.
  • [All] (SSH) TElSSHServer.OnAuthFailed was not fired. Fixed.
  • [All] (XML) Minor fix in decryption transform.
  • [All] (FTPS) FTP server errroneously returned 225 code instead of 226 for ABOR command. Fixed.
  • [VCL, C++] (Charsets) Fixed charsets initialization on POSIX systems, if cwstring unit initialized after charsets.
  • [Java] (XML) Possible "[B cannot be cast to..." exceptions fixed in XAdES classes.
  • [Java] (XML) Fixed saving of serial number in IssuerSerial element, if zero is present in decimal representation at position multiple of 9.
  • [Java] (ZIP) Fixed StringIndexOutOfBoundsException exception on file open.
  • [NG] (Base) Calling wrong iOS pthread library fixed. Fixed incrementing of GlobalLockCSFlag.

New in SecureBlackbox for BizTalk 12.0.247 (Oct 17, 2014)

  • [All] (PKI) RSA computations involving private keys are now protected from timing attacks
  • [All] (XML) Added support for AES-GCM authenticated encryption algorithm in XML encryption.
  • [Java] (Base) Added DNSSEC support for Android target.
  • [Java] (PKI) TElJavaCertStorage added that allows to manage certificates in MY and ROOT stores on Windows and AndroidKeyStore on Android.
  • [Java] (PKI) TElCustomCertStorage enhanced with LoadFrom*BKS methods that allow to load certificates from BKS storages.
  • [All] (Base) Socket shutdown sequence changed from proper to compatible with buggy servers which don't handle partial socket shutdown properly.
  • [All] (FTPS) Some servers respond to Delete command with wrong response code 200 (while 250 is required by specification). The client component now accepts such response.
  • [All] (FTPS) TElSimpleFTPSClient.ParseFileListEntry parsed time in Windows file listings incorrectly. Fixed.
  • [All] (Mail) SMTP client changed to use the most secure authentication scheme first on login.
  • [All] (SOAP) Added TElXMLSOAPBaseSignatureHandler.ReferencesDigestMethod property that specifies default digest method for newly added references.
  • [All] (PDF) Added workaround that fix error in the document structure when 'endstream' keyword is absent.
  • [Java] (Base) TElX509Certificate.FromX509Certificate/GetPrivateKey improved to work with non-exportable keys.
  • [All] (FTPS) TElSimpleFTPSServer didn't take into account return codes of underlying file system adapter on file open operations. Fixed.
  • [All] (PDF) An empty signature field widget was overridden incorrectly when signing the field in IgnoreExistingAppearance mode, causing the old widget to be prioritized over the new one by some readers.
  • [All] (SSH) Fixed a bug in TElSimpleSSHClient.ExecuteCommand() which erroneously made the component discard STDERR output.
  • [.NET] (HTTPS) A bug in TElCookieManager resulted in NullReferenceException's in TElHTTPSClient. Fixed.
  • [.NET] (PKI) Fixed a recently introduced glitch in TElPKCS11CertStorage that was 'hiding' the contents of the device from the user (x64 platforms only).
  • [VCL, .NET] (Mail) NTLM authentication for SMTP fixed.
  • [VCL] (Charsets) Fixed memory leak in ASCII charset.

New in SecureBlackbox for BizTalk 9.1.215 (Feb 23, 2012)

  • .NET edition was extended to support Silverlight 5 and Windows Phone 7.5 "Mango" frameworks.
  • Authorization part of CloudBlackbox was extended. Support for policies and shared access signatures was added to ElWinAzureDataStorage component. Support for ACL, policies and federated users was added to ElAWSS3DataStorage.
  • New ElCookieManager component allows ElHTTPSClient to automate cookie management.
  • File processing by OpenPGPBlackbox components hastened due to implementation of caching streams.
  • Implementation of SFTP via command channel was added, which is used when SFTP subsystem is disabled on the server.
  • PDFBlackbox now supports signature widgets in JPEG format.

New in SecureBlackbox for BizTalk 7.2.169 (Feb 2, 2010)

  • [All] (Base) Added workaround for buggy HTTP proxies, which sends LFLF instead of CRLFCRLF after reply string
  • [All] (Base) TElRelativeDistinguishedName.SaveToDNString() method has been added
  • [All] (FTPS) Code 230 is accepted now for CWD and PWD commands.
  • [All] (FTPS) Added Windows style file list parser (tested with ftp.microsoft.com)
  • [All] (EDI) Added HTTP-authorization related properties to AS2 client component
  • [All] (EDI) Added ability to setup verification options before loading a message/receipt
  • [All] (EDI) Added Received-Content-MIC receipt field generation
  • [All] (XML) Added URIStream, URIStreamOffset, URIStreamCount properties for ElXMLReference class
  • [.NET, VCL] (PKI) Added TElX509CertificateEx.AltKeyID property that allows to specify custom key identifier values for PKCS#11-based certificates
  • [All] (SSH) Optimized compression subsystem (decreased the amount of used memory, increased decompression speed)
  • [.NET, VCL] Improved PKCS#11 on-board keypair/certificate generation routine
  • [All] (Base) Fixed minor client-side TSP issue causing intermittent WRONG NONCE errors
  • [All] (EDI) Setting AS2Message.FileModified property did not work
  • [All] (SSH) Exit code was not returned correctly in some cases by TElSimpleSSHClient. Fixed.
  • [.NET] (EDI) Receipt request options parsing errors
  • [.NET] (HTTPS) Bug in URL splitting method
  • [.NET] (PGP) Fixed MONO JIT specific issue with loading pgp keys
  • [VCL] (HTTPS) Access violation on component destroy if an error occured while establishing a connection

New in SecureBlackbox for BizTalk 7.2.168 (Feb 2, 2010)

  • [All] (Base) Added global IgnoreTagsWhenComparingRDNs flag
  • [All] (SFTP) Added TreatZeroSizeAsUndefined property
  • [All] (PKI) Added tsoIgnoreNonce to TSPClient options (can be useful when working with some buggy servers)
  • [All] (Base) SecureBlackbox now understands incorrectly inserted timestamps (TimeStampResp instead of TimeStampToken)
  • [All] (Base) Improved JKS format handling
  • [All] (EDI) Miscellaneous AS2 components fixes
  • [All] (HTTPS) TElHTTPSClient now encodes the path part of the URL if the URL contains spaces in it
  • [All] (HTTPS) TElHTTPSClient now includes authentication header when no username is specified and the password is set. Such authentication scheme (password without username) is used by some popular hardware.

New in SecureBlackbox for BizTalk 7.2.167 (Dec 2, 2009)

  • [All] (Base) Improved handling of negative X.509 serial numbers
  • [All] (SSH) Improved work of X11 forwarding (increased compatibility with several third-party server implementations)
  • [All] (SFTP) Added a possibility to omit sending Truncate flag to server when uploading files
  • [All] (SMTP) Error during SSL negotiation sometimes caused TElSMTPClient to hang
  • [All] (HTTP) Memory leaks in Digest authentication
  • [All] (SSH, SFTP, PDF) ZLib compression didn't work in some cases

New in SecureBlackbox for BizTalk 7.1.166 (Nov 22, 2009)

  • [All] (SSL) Added TLS renegotiation attack prevention mechanisms
  • [All] (ZIP) Added support for wilcard symbols (*, ?) to .Add, .Extract methods;
  • [All] (PDF) Improved compatibility with Adobe Reader 9.2 (in a case like adding a second or more signature for hybrid-reference file, or signing an AES-encrypted document)
  • [All] (SSH) Increased X11 channels creation compatibility
  • [All] (SSL) Improved TLS1.2 compatibility with IIS server
  • [VCL] (Base) Improved socket connection errors reporting
  • [.NET] (PKI) Improved speed of TElASN1*Tag.SaveToBuffer methods
  • [All] (SFTP) Fixed DownloadFiles and UploadFiles methods on Linux: the methods used hardcoded backslash () symbol as a path separator. Now platform-specific separator is used.
  • [All] (PKI) Fixed SHA2 signing issue with system certificates
  • [.NET] (SSH) Fixed DES encryption on SSHv1

New in SecureBlackbox for BizTalk 7.1.165 Preview (Nov 22, 2009)

  • [.NET, VCL] (XML) Added SignatureCompliance property to TElXMLSigner/TElXMLVerifier/TElXMLSignature classes, that enables support of EBICS signature.
  • [All] (ZIP) Added support for BZip2 compression method
  • [All] Added ValidateForTimestamping method to TElX509CertificateValidator class
  • [All] (PKI) Added limitation of ASN.1 tree depth. The maximal depth is now set to 256 by default, but can be changed if needed.
  • [All] (PGP) Optimized memory management in TElPGPReader class; added MemoryConsumptionStrategy property
  • [All] (SSH) Improved work with certain SSH implementations (reporting themselves as "mod_sftp" and WinFIOL)
  • [All] (HTTP) If a connection goes over HTTPS and a proxy server is used but web tunnel is not configured, the component now automatically sets and uses web tunnel properties copied from http proxy properties.
  • [.NET, VCL] (XML) Added StrictMode property to TElXMLEnvelopedSignatureTransform class.
  • [.NET, VCL] (MIME) Added double quotes to the boundary line for better compatibility with web-mail services.
  • [VCL, .NET] (HTTP) Fixed Basic authentication string formatting which included extra #0 at the end of the text
  • [VCL] (PKI) Minor memory leak removed from TElMessageDecryptor class
  • [.NET] (ZIP) Fixed some problems with ZIP encryption and archives handling

New in SecureBlackbox for BizTalk 7.1.164 Beta (Nov 22, 2009)

  • [All] (PKI) Added TElX509CertificateValidator class for automatic complex validation of certificates
  • [.NET, VCL] (ZIP) Added components for ZIP compression and decompression
  • [VCL] Added support for CodeGear RAD Studio 2010
  • [.NET CF] (HTTP) Added NTLM and Digest authentication support
  • [.NET, VCL] (HTTP) Added ForceNTLMAuth property to TElHTTPSClient class
  • [.NET, VCL] (PKI) Added TElX509Certificate.Equals method to compare certificates
  • [All] (SSL) Elliptic curve ciphersuites support is now off by default
  • [All] (PDF) Improved liberal PDF validation mode
  • [All] (PKI) Improved work with Aladdin eTokens and Gemplus cards
  • [All] (SSH) Server-side connection handlers have been slightly reworked
  • [AX] (PGP) Progress is now reported correctly for large files (>2GB)
  • [All] (HTTP) Fixed POST issues when NTLM authentication is used

New in SecureBlackbox for BizTalk 7.1.163 (Nov 22, 2009)

  • [All] (FTPS) Improved compatibility with VShell server
  • [VCL] (PKI) Warnings and hints removed
  • [All] (HTTP) Fixed timeout exceeded issue under keep-alive connections
  • [.NET, VCL] (PKI) Fixed interface of TElHTTPOCSPClient class (HTTPSClient property was read-only), broken in 7.1.162 build
  • [AX] (HTTP) Fixed a bug in GetEx method

New in SecureBlackbox for BizTalk 7.1.162 (Aug 18, 2009)

  • [.NET, VCL] (PDF) Empty signature fields can be now added to the document
  • [.NET, VCL] (SSH) Added means for sending channel EOF before closing the channel
  • [.NET, VCL] (SSL) Added UseSSLSessionResumption property to TElSimpleSSLClient class and its descendants
  • [VCL] (MIME) Added hash algorithm selection in DKIM signer demo
  • [.NET, VCL] (PDF) Raw signature body is now accessible via SignatureContents property
  • [.NET, VCL] (PDF) Added aoAdjustTimesToUTC document assembly option
  • [.NET, VCL] (HTTP) Added ForceKeepAliveIfConnectionHeaderIsAbsent property
  • [All] (PKI) Added support for badly encoded CMS SignerLocation attribute
  • [All] (MIME) Fixed time zone issue in DomainKeys signature creation time
  • [All] (MIME) Fixed bug in relaxed canonicalization algorithm in DKIM

New in SecureBlackbox for BizTalk 7.1.161 (Jul 28, 2009)

  • [.NET, VCL] (PKI) TSBOCSPValidationNeededEvent parameter list was extended with URL parameter.
  • [.NET, VCL] (PDF) Added DecryptionMode property. That allows to sign an encrypted document or partially decrypt the document.
  • [All] (SFTP) Improved compatibility with Titan MFT and WS_FTP servers
  • [All] (SSH) Improved cipher renegotiation compatibility with older OpenSSH servers
  • [.NET, VCL] (PKI) URL property has been moved from TElHTTPOCSPClient class to TElOCSPClient class.
  • [VCL] (PKI) Win32CryptoProvider is updated to use unicode-enabled routines of Crypto API in Delphi 2009
  • [All] (SSH) Fixed minor bug in ElSSHKey generation/loading
  • [AX] (PGP) EncryptFile produced AV in use-old-packets mode. Fixed.
  • [All] (SSH) TElSimpleSSHClient.ExecuteCommand didn't always return all data, sent by the server. Fixed.

New in SecureBlackbox for BizTalk 7.1.160 (Jul 18, 2009)

  • [.NET, VCL] (SSH) Added ExecuteCommand method to ElSimpleSSHClient class
  • [.NET, VCL] (PKI) Added support for on-demand token access mode
  • [.NET, VCL] (PKI) Added pcsoUniqueIDs PKCS11 option to prevent objects with same IDs from being created
  • [.NET, VCL] (PKI) Added support for synchronous slot event monitoring mode
  • [.NET, VCL] (SFTP) Added UseUTF8OnV3 property
  • [VCL] (SSL) Added support classes for kbmMW 3.0 and later.
  • [All] (PKI) Implemented optional Win32 cryptographic context caching (results in significant performance increase of recurrent system certificate-based operations)
  • [All] (PKI) Improved compatibility with ActivClient token from ActivIdentity
  • [All] (HTTP) When Gzip compression was enabled, redirection to other resource where both old and new resource were provided with GZip compression could cause "Invalid GZip header" exception. Fixed.
  • [All] (HTTP) Fixed a bug in Digest authentication ("MD5-sess" algorithm)
  • [All] (PDF) Fixed loading of pdf document with a comment object inside a dictionary object
  • [All] (PKI) Fixed minor OCSP response processing issue
  • [All] (FTPS) Fixed minor ASCII mode download bug
  • [.NET] (MIME) Fixed minor date encoding issue