Service release notes Certificate Manager 8.12.x

For more details about CM service releases, see Patch Certificate Manager.

CM service release 8.12.4

Synchronization of half-signed AWB object modifications

Fixes a problem which caused half-signed modifications of AWB objects to not be visible in other CF instances than the one where the modification was (half) signed.

CF now supports malformed postalAddress in X.509 certificates

According to the X.509 standard, postalAddress should be encoded as a Sequence of DirectoryString. CF now also supports cases where postalAddress is encoded directly as a DirectoryString. For technical details, refer to section 8.5.1. Id2Signer1 in the Technical Description.

expand

CM container release 8.12.4-1

Changes to CF server image 8.12.4-1

Update JDK version

The Adoptium Temurin JDK is updated from version 21.0.4-7 to 21.0.8-9.

Changes to PGW image 8.12.4-1

Update JDK version

The Adoptium Temurin JDK is updated from version 21.0.4-7 to 21.0.8-9.

Update Apache Tomcat version

Updated Apache Tomcat from 10.1.39 to 10.1.46.

CM service release 8.12.2

All installations (clients and server)

CF/importPKI tool support for importing malformed certificates

CF and the importPKI tool now support importing malformed certificates that have the UniqueIdentifier encoded as a PrintableString instead of a BitString.
Additionally, support has been enabled for importing keys in P12 format for KAR, which are associated with such certificates.