1.0-alpha8

• TLS revised
  • Client explicitly refuses to accept change cipher spec if no or NULL cipher was proposed
  • Hello requests are no longer included in the handshake hashing
  • Support for encrypted change cipher spec messages added
  • Explicit checks on server certificate chain added:
    • Certificate can not be self-signed: Cannot check trust against configured root CAs when server certificate is self-signed
    • Server can provide full certificate chain up-to and including root CA. Importing root CA to the store for certificate chain validation would implicitly trust this certificate chain. Thus, we skip all self-signed certificates on import.
  • Session resumption issues resolved
• Credential prompt has "Remember" checkbox initially selected when credentials originate from Windows Credential Manager
• Last authentication attempt failure notice is more general now and no longer insinuate user credentials are the likely cause of the failure
• Additional log messages added

1.0-alpha7

TLS code clean-up before testing

1.0-alpha6

• EAP-TTLS operational now
  • TTLS+PAP, TLS v1.0/1.1/1.2, session resumption
• EventMonitor is Windows application now
• Endless other improvements and bug fixes

1.0-alpha5

• Configuration
  • All configurations imported via XML are marked read-only now
  • Provider's custom credential prompt labels are honored now (for password-based methods)
  • Provider's contact info support added
• Monitoring
  • Event reporting finished
  • EventMonitor utility introduced
• Security
  • Credential encryptrion method changed - the former didn't work between normal and UAC-elevated processes: stored credentials are no longer valid and should be reentered
  • IPC BLOBs are encrypted now

1.0-alpha4

• Pre-shared credentials introduced
• MsiUseFeature utility added
• Doxygen documentation update
• Internal reorganization

1.0-alpha3

• User interface now functional
• Internal reorganizations and clean-ups
• Doxygen documentation update
• Some minor issues fixed

1.0-alpha2

• XML configuration handling changed to match draft-winter-opsawg-eap-metadata-02
• CredWrite accepts user name as Base64 encoded UTF-8 string now
• Microsoft Installer's feature completeness check added

1.0-alpha1

Support for XML configuration import/export finished

1.0-alpha0

Initial release