ReleaseNotes11r2:Firmware: Difference between revisions
m regular roadmap update |
m regular roadmap update |
||
Line 3: | Line 3: | ||
Service Releases are planned for the second monday each month. <br/> | Service Releases are planned for the second monday each month. <br/> | ||
<br/> | <br/> | ||
This article is generated automatically. Do not edit! | |||
Please see ''[[Support:What is the DVL-Roadmap?|the disclaimer]]'' before using the information presented here! | |||
= 11r2 Service Release 1 (113182) = | |||
Changes included in Version 11r2 Service Release 1<!----> | |||
[http://mantis.innovaphone.com/view.php?id=145275 Definition] | |||
= 11r2 Service Release 2 (113190) = | |||
Changes included in Version 11r2 Service Release 2<!----> | |||
[http://mantis.innovaphone.com/view.php?id=150262 Definition] | |||
== Admin UI: Make SHA256 the default signing algorithm for certificates == | |||
{| | |||
|Status | |||
|<font><font color="green">Closed</font></font> | |||
|- | |||
|Id | |||
|[http://mantis.innovaphone.com/view.php?id=149545 149545] | |||
|} | |||
Change default value in drop-down menus for creating certificates<br/>* Signature: SHA256 | |||
== IP241: New config file parameters /solid-header and /solid-status == | |||
{| | |||
|Status | |||
|<font><font color="green">Closed</font></font> | |||
|- | |||
|Id | |||
|[http://mantis.innovaphone.com/view.php?id=149879 149879] | |||
|} | |||
New config file parameters /solid-header and /solid-status<br/><br/><!--<br/>forms_color.cpp/h<br/>forms_color_mod.cpp<br/>--> | |||
== IP232/222/111: More options for Fine grained function hiding == | |||
{| | |||
|Status | |||
|<font><font color="green">Closed</font></font> | |||
|- | |||
|Id | |||
|[http://mantis.innovaphone.com/view.php?id=150235 150235] | |||
|} | |||
More options for Fine grained function hiding<br/>Allow to hide APP_CONF, APP_LSIT and APP_DIR from display.<br/>Allow to hide FKEYS from APP_HOME.<br/><br/><!--<br/>phone_admin_if.h<br/>phone_conf_ui.cpp/h<br/>phone_list_ui.cpp/h<br/>phone_dir_ui.cpp/h<br/>phone_favs.cpp<br/>app_form.cpp<br/>app_fkey.cpp<br/>app_disp.cpp<br/>--> | |||
= 11r2 Service Release (113190) = | |||
Changes included in Version 11r2 Service Release 2<!----> | |||
[http://mantis.innovaphone.com/view.php?id=150263 Definition] | |||
== Use SHA256 for automatically created certificates == | |||
{| | |||
|Status | |||
|<font><font color="green">Closed</font></font> | |||
|- | |||
|Id | |||
|[http://mantis.innovaphone.com/view.php?id=150332 150332] | |||
|} | |||
Certificates that are created without any user interaction were created using SHA1. Now SHA256 is used.<br/><!--<br/>x509.cpp<br/>--> | |||
= 11r2 Service Release 3 (113236) = | |||
Changes included in Version 11r2 Service Release 3<!----> | |||
[http://mantis.innovaphone.com/view.php?id=150425 Definition] | |||
== IP232/222/111: Change app when using keys LEFT or RIGHT == | |||
{| | |||
|Status | |||
|<font><font color="green">Closed</font></font> | |||
|- | |||
|Id | |||
|[http://mantis.innovaphone.com/view.php?id=149431 149431] | |||
|} | |||
Change app when using keys LEFT or RIGHT.<br/><br/><!--<br/>forms2.h<br/>forms_soap.cpp/h<br/>forms_color.cpp/h<br/>forms_android.cpp/h<br/>forms_color_control.cpp<br/>app_ctl.cpp<br/>--> | |||
== TLS/DTLS: Support for Diffie-Hellman key agreement == | |||
{| | |||
|Status | |||
|<font><font color="green">Closed</font></font> | |||
|- | |||
|Id | |||
|[http://mantis.innovaphone.com/view.php?id=150485 150485] | |||
|} | |||
Add the following cipher suites to DTLS:<br/>* TLS_DHE_RSA_WITH_AES_128_CBC_SHA<br/>* TLS_DHE_RSA_WITH_AES_256_CBC_SHA<br/><!--<br/>dh.h<br/>dh.cpp<br/>lib.mak<br/>dtls_test.cpp<br/>dtls_test.h<br/>dtls.cpp<br/>dtls.h<br/>8021x.cpp<br/>media.cpp<br/>media.h<br/>test_tls.cpp<br/>test_tls.h<br/><br/>cipher_api.h<br/>cipher_api.cpp<br/>tls_cipher.cpp<br/>tls_lib.cpp<br/>tls_lib.h<br/>tls.cpp<br/><br/>unit-tests/tls/encryption/200-dh<br/>unit-tests/tls/basic/104-handshake-client-normal.dhe.xml<br/>unit-tests/tls/basic/155-handshake-server-normal-dhe.xml<br/>unit-tests/tls/dtls/205-connect-client-normal-dhe.xml<br/>unit-tests/tls/dtls/305-connect-server-normal-dhe.xml<br/>--> | |||
== TLS: Config options for disabling individual cipher groups == | |||
{| | |||
|Status | |||
|<font><font color="green">Closed</font></font> | |||
|- | |||
|Id | |||
|[http://mantis.innovaphone.com/view.php?id=151261 151261] | |||
|} | |||
;TLS0 /no-rsa on: disable RSA key exchange<br/>;TLS0 /no-dhe on: disable DHE key exchange<br/>;TLS0 /no-ecdhe on: disable ECDHE key exchange<br/>;TLS0 /des on: enable DES cipher suites<br/>Note that the cipher suite TLS_RSA_WITH_3DES_EDE_CBC_SHA is no longer used unless configured.<br/><!--<br/>test_tls.cpp<br/>test_socket.cpp<br/>cipher_api.h<br/>cipher_api.cpp<br/>socket.h<br/>tls.h<br/>tls.cpp<br/>tls_lib.h<br/>tls_lib.cpp<br/>dtls.h<br/>dtls.cpp<br/>--> | |||
== TLS/DTLS: Support for ECDHE key agreement == | |||
{| | |||
|Status | |||
|<font><font color="green">Closed</font></font> | |||
|- | |||
|Id | |||
|[http://mantis.innovaphone.com/view.php?id=151500 151500] | |||
|} | |||
* Research how Diffie-Hellman works with elliptic courves and if we can do it with reasonable effort<br/>* Port EC library<br/>* Implement ECDHE handshake<br/><!--<br/>ecdh.h<br/>ecdh.cpp<br/>lib.mak<br/>uECC.h<br/>uECC.c<br/>uECC.license.txt<br/>uECC_asm_arm.inc<br/>uECC_asm_avr.inc<br/>opensrc.h<br/>opensrc.mak<br/>test_tls.h<br/>test_tls.cpp<br/>tls.cpp<br/>tls_lib.h<br/>tls_lib.cpp<br/>tls_cipher.cpp<br/>dtls.h<br/>dtls.cpp<br/>dtls_test.h<br/>dtls_test.cpp<br/>cipher_api.h<br/>cipher_api.cpp<br/>media.h<br/>media.cpp<br/>8021x.cpp<br/><br/>unit-tests/tls/encryption<br/>unit-tests/tls/basic<br/>unit-tests/tls/dtls<br/>unit-tests/medialib/ice-channel<br/>--> | |||
== Secure freeing of bufman buffers == | |||
{| | |||
|Status | |||
|<font><font color="green">Closed</font></font> | |||
|- | |||
|Id | |||
|[http://mantis.innovaphone.com/view.php?id=151689 151689] | |||
|} | |||
New function bufman::free_secure that overwrites the memory before freeing.<br/><!--<br/>os.h<br/>os.cpp<br/>test_bufman.h<br/>test_bufman.cpp<br/>--> | |||
== myPBX: New translations == | |||
{| | |||
|Status | |||
|<font><font color="green">Closed</font></font> | |||
|- | |||
|Id | |||
|[http://mantis.innovaphone.com/view.php?id=152106 152106] | |||
|} | |||
New translations for the myPBX launcher and the myPBX web application. | |||
== SIP: New config option /send-deprecated-diversion-header == | |||
{| | |||
|Status | |||
|<font><font color="green">Closed</font></font> | |||
|- | |||
|Id | |||
|[http://mantis.innovaphone.com/view.php?id=152337 152337] | |||
|} | |||
Diversion header is not sent anymore since v11r1sr5 / v11r2sr1 / v10sr24 / v9hotfix50.<br/>For interop reasons this config option is added.<br/>If set the old and deprecated Diversion header is sent.<br/><br/><!--<br/>sip.cpp<br/>siptrans.cpp<br/>--> | |||
= 11r2 Service Release 4 = | |||
Changes included in Version 11r2 Service Release 4<!----> | |||
[http://mantis.innovaphone.com/view.php?id=152500 Definition] |
Revision as of 11:48, 5 August 2015
This is the Firmware 11r2 Roadmap Document.
Service Releases are planned for the second monday each month.
This article is generated automatically. Do not edit! Please see the disclaimer before using the information presented here!
11r2 Service Release 1 (113182)
Changes included in Version 11r2 Service Release 1 Definition
11r2 Service Release 2 (113190)
Changes included in Version 11r2 Service Release 2 Definition
Admin UI: Make SHA256 the default signing algorithm for certificates
Status | Closed |
Id | 149545 |
Change default value in drop-down menus for creating certificates
* Signature: SHA256
IP241: New config file parameters /solid-header and /solid-status
Status | Closed |
Id | 149879 |
New config file parameters /solid-header and /solid-status
IP232/222/111: More options for Fine grained function hiding
Status | Closed |
Id | 150235 |
More options for Fine grained function hiding
Allow to hide APP_CONF, APP_LSIT and APP_DIR from display.
Allow to hide FKEYS from APP_HOME.
11r2 Service Release (113190)
Changes included in Version 11r2 Service Release 2 Definition
Use SHA256 for automatically created certificates
Status | Closed |
Id | 150332 |
Certificates that are created without any user interaction were created using SHA1. Now SHA256 is used.
11r2 Service Release 3 (113236)
Changes included in Version 11r2 Service Release 3 Definition
IP232/222/111: Change app when using keys LEFT or RIGHT
Status | Closed |
Id | 149431 |
Change app when using keys LEFT or RIGHT.
TLS/DTLS: Support for Diffie-Hellman key agreement
Status | Closed |
Id | 150485 |
Add the following cipher suites to DTLS:
* TLS_DHE_RSA_WITH_AES_128_CBC_SHA
* TLS_DHE_RSA_WITH_AES_256_CBC_SHA
TLS: Config options for disabling individual cipher groups
Status | Closed |
Id | 151261 |
- TLS0 /no-rsa on
- disable RSA key exchange
;TLS0 /no-dhe on: disable DHE key exchange
;TLS0 /no-ecdhe on: disable ECDHE key exchange
;TLS0 /des on: enable DES cipher suites
Note that the cipher suite TLS_RSA_WITH_3DES_EDE_CBC_SHA is no longer used unless configured.
TLS/DTLS: Support for ECDHE key agreement
Status | Closed |
Id | 151500 |
- Research how Diffie-Hellman works with elliptic courves and if we can do it with reasonable effort
* Port EC library
* Implement ECDHE handshake
Secure freeing of bufman buffers
Status | Closed |
Id | 151689 |
New function bufman::free_secure that overwrites the memory before freeing.
myPBX: New translations
Status | Closed |
Id | 152106 |
New translations for the myPBX launcher and the myPBX web application.
SIP: New config option /send-deprecated-diversion-header
Status | Closed |
Id | 152337 |
Diversion header is not sent anymore since v11r1sr5 / v11r2sr1 / v10sr24 / v9hotfix50.
For interop reasons this config option is added.
If set the old and deprecated Diversion header is sent.
11r2 Service Release 4
Changes included in Version 11r2 Service Release 4 Definition