0.3.10 - 0.3.11 are just some feature ideas. They might not be feasible. 0.3.9 is the current version.
Version | Release Date? | Description |
---|---|---|
0.3.4 | Nov 2006 | 90% feature complete. Probably contains some bugs. |
0.3.5 | Dec 2006 | PKCS8Key constructor is public now. Whoops. Hostname verification knows about more than just CN's now - also checks subjectAlts in the server's certificate. |
0.3.6 | Jan 2007 | Fixed Java 1.4 bug with HttpsURLConnection. |
0.3.7 | Feb 2007 | 40 bit and 56 bit ciphers disabled by default. RMI-SSL improved. getSSLContext() added. Various other improvements. |
0.3.8 | Nov 2007 | PBE (password-based-encryption) formally introduced and improved. 40 bit and 56 bit ciphers still disabled by default, but working better when re-enabled. |
0.3.9 | May 2008 | Some PBE fixes. Using latest ASN.1 code from BouncyCastle. |
0.3.10 | May 2008 |
Socket monitoring. Make it easier for long-running server applications to warn about impending certificate expiries. OCSP - Online Certificate Status Protocol NotQuiteSoEasySSLProtocolSocketFactory will trust any server The First Time, and store that server's cert on disk for future accesses. |
0.3.11 | Jun 2008 | TrustMaterial.setAutoReload( true / false ) , and KeyMaterial.setAutoReload( true / false ) ,
but only if no password, or "changeit" was provided. (Question: should this "reload" tear down all open sockets?).
|
0.4.0 | Jul 2008 | Non-public code (protected, private, etc) moved into a separate "impl" package where possible. |
0.5.0 | Aug 2008 | API froven. All future versions must be reverse-compatible with 0.5.0 (except for any parts of 0.5.0 later found to be insecure). |
0.7.0 | Nov 2008 | JavaDocs written for all public methods and classes. |
0.7.5 | Mar 2009 | JUnit tests written for all classes. |
0.9.0 | May 2009 | First BETA release. JUnit tests passing on all targetted platforms:
|
0.9.1 - 0.9.9 | Aug 2009 | Bug fixes. |
1.0.0 | Jan 2010 | Development mostly stops. |
The problem we're solving with Commons-SSL is quite small, so I don't see any reason to ever go beyond 1.0.0, except for fixing bugs.