We have just released version 7.0.2 of the UnboundID LDAP SDK for Java. It is available for download from GitHub and SourceForge, and it is available in the Maven Central Repository. You can find the release notes for this release (and all previous versions) at https://docs.ldap.com/ldap-sdk/docs/release-notes.html, but here’s a summary of the changes:
-
We added support for using the 2.x version of the Bouncy Castle FIPS-compliant security provider, which provides support for FIPS 140-3 compliance. The 1.x version of the library, offering FIPS 140-2 compliance, is still supported. To use the LDAP SDK in this mode, you should ensure that the necessary jar files are in the classpath, and then you should call
CryptoHelper.setUseFIPSMode("BCFIPS2")
as early as possible in the life of the application. -
We added a new
PropertyManager
class that can be used to retrieve the value of specified properties using either system properties or environment variables. Values can be optionally parsed as Booleans, numbers, or comma-delimited lists. Most uses of system properties within the LDAP SDK have been updated to support the newPropertyManager
mechanism so that it’s possible to set values as environment variables as an alternative to system properties. -
We fixed a bug in the
SSLUtil.certificateToString
method that prevented it from including the notBefore and notAfter timestamps in the string representation. -
We added client-side support for the Ping Identity Directory Server’s new to-be-deleted accessibility state for use with the get subtree accessibility and set subtree accessibility extended operations.
-
We updated the
MoveSubtree
utility class to provide the ability to use the new to-be-deleted accessibility state (as an alternative to the hidden state) for the target subtree before starting to remove entries from the source server. -
We added a new
SubtreeAccessibilityState.isMoreRestrictiveThan
method that can be used to determine whether one accessibility state is considered more restrictive than another. -
Updated the documentation to include the latest versions of the following LDAP-related specifications:
- draft-coretta-ldap-subnf-01
- draft-coretta-oiddir-radit
- draft-coretta-oiddir-radsa
- draft-coretta-oiddir-radua
- draft-coretta-oiddir-roadmap
- draft-coretta-oiddir-schema
- draft-ietf-kitten-scram-2fa
- draft-melnikov-sasl2
- draft-melnikov-scram-bis
- draft-melnikov-scram-sha-512
- draft-melnikov-scram-sha3-512