changes

这是linux下ssl vpn的实现程序

=================
=  CHANGE LOG   =
=================

SSL-Explorer 0.2.7_01 Community Edition - August 12, 2006

Bug Fixes
    o Downloading files in IE was broken after Cache-Control, Expires and Pragma headers were added
      to the HTTP response.
    o LogonStateMachine is not re-initialized in all WebDAV & Embedded client flows. Causing NullPointerException 
      when client attempts to connect.
    o Removing child page task fails to remove reference from menu map.
    o Bug introduced in 0.2.5 caused certificates to fail import.
    o Reverse proxy fails to process POST parameters when Content-Type is not application/x-www-form-urlencoded
                        
=================
=    HISTORY    =
=================

SSL-Explorer 0.2.7 Community Edition - August 7, 2006


Bug Fixes
    o Reverse proxy to Outlook Web Access corrupts POST parameters. This is caused by IIS
      and OWA assuming an ISO-8859-1 encoding and not setting this as the encoding on 
      the request. An addtional field has now been added allowing the default UTF-8 encoding
      to be overriden with the character set specified in the Reverse Proxy configuration.
    o Importing trusted certificate fails with NullPointerException. Alias is required
      but field was missing from user interface.
    o Importing trusted certificate fails when subject entity does not contain audited
      entity.
    o LogonStateMachine is not re-initialized in all logon flows. Causing NullPointerException 
      after server has restarted.
      
-----------------

SSL-Explorer 0.2.6 Community Edition - August 4, 2006

Features
    o Login flow now presents user with the authentication schemes they have been assigned
      through their policy. If a user is not attached to any authentication schemes they
      will simply not be able to login. This requires that the user enter their username 
      before being passed through to the authentication scheme selection, if the user
      only has one scheme assigned they will be automatically be taken to that scheme. To
      prevent leakage of user information an attempt to login with a bad username will still
      result in an authentication scheme being dispayed.
    o Attribute selection user interface added to input fields where attributes can be set.
    o RSS based context sensitive help added to managment console.
                          
Bug Fixes
    o User is prompted for password if they attempt to access a resource that contains 
      the ${session:password} attribute and their chosen authentication scheme does not
      contain the password module.
    o Proxy support was broken since 0.1.16. This release contains fixes for agent proxy
      authentication.
    o Domain field missing from profile agent proxy information.
    
----------------
    
SSL-Explorer 0.2.5 Community Edition - July 28, 2006

Features
    o Authentication schemes are now assigned to policies. This currently has no effect but has been 
      added in preperation for the next release that will include a policy based authentication flow.
    o Replacement proxy can now set list of acceptable target hosts, with wildcard support.
    o Authentication scheme order options added.
    o Policy order options added to resource assignment (in preperation for policy attributes).
                
Bug Fixes
    o Access to resources with ${session:password} was broken when Password module was not present 
      in the authenticated scheme. User will now be prompted for their password before being
      allowed access to the resource.
    o Confidential data private key flow breaks when Password module is not used in the authenticated
      scheme.
    o If ${session:username} and ${session:password} are used for web forward authentication but the 
      values are incorrect, the user is never able to authenticate through normal HTTP authentication.            
    o After a restart request the user interface becomes unusable.
    o Authentication options removed from tunneled web forward.
    o Deleting single file in Network Places now prompts user to confirm
    o Warning messages no longer displayed on logon page.

-----------------

SSL-Explorer 0.2.4 Community Edition - July 6, 2006

Features
    o Minor framework changes to application launching required for Enterprise Edition.
    
-----------------

SSL-Explorer 0.2.3 Community Edition - June 29, 2006

Features
    o Plugin install framework added to allow plugins to execute one time installation
      routines.

Bug Fixes
    o Webfolder MKDIR fails due to incorrect HEAD reply sent by SSL-Explorer.
    o Restart confirmation throws permission error.
    o Removing plugin type extension results in confusing message.
    o Purchase certificate link opens in same window.

-----------------

SSL-Explorer 0.2.2 Community Edition - June 23, 2006

Features
    o Extension types can now be added using sslexplorer.extenstionType.xxxx system property with 
      xxxx being the plugin type name and value pointing to a valid ExtensionType class name. 
    o Extensions can now be hidden from the application view with the hidden="true" attribute.
    o Agent launcher extended to allow other application types to be launched directly through the
      launcher applet.

Bug Fixes
    o Active directory searches now support paging of requests, this helps to support AD deployments
      where the number of objects exceeds the maximum page size (which by default is 1000).
    o Message sink fails to initialize a newly added sink after the Notifier has been started.
    o Network place stores now set default file encoding. CIFS store encoding can be changed at 
      runtime by setting the "jcifs.encoding=CHARSET" system property in $SSLX_HOME/sslexplorer/conf where
      CHARSET is the expected encoding of the CIFS servers.
    o Disabled authentication schemes were still able to be selected at logon.
    o Multiple groups of same type added to Active Directory users.
    o All ant targets now compile source code when invoked.
    o HTTPS reverse proxies would fail due to Maverick SSL trust store being unavailable in source release.
   
-----------------

SSL-Explorer 0.2.1 Community Edition - June 15, 2006

Bug Fixes
    o UTF-8 encoding of web pages fails because reverse proxy 'bug' forces ISO-8859-1 encoding
      of requests.
    o PKCS12 import of server certificate fixed.
    o Fixed bug in Active Directory which caused pre-authentication information is invalid erros
      even when username and password is correct. This was traced back to case sensitivity option.
    o Usernames and passwords are encoded correctly into Network Places URIs.
    o Network places edit re-encodes and already encoded path.
    o All logging now wrapped into isInfoEnabled, isDebugEnabled methods to help reduce logging 
      overhead.
    o Web forwards on favourites page are now launched in seperate window.
    o Default logging level changed back to INFO.
    o Exception thrown when no extension store is available.    
    o Web folders fail to launch with NullPointerException thrown from getPasswordFromCredentials.
    o Active directory referrals cause multiple user database failures.
    o Sort fails on groups and account pages.
    o Proxy settings not used by installation wizard.    
    o Deleting/creating built-in accounts causes session to crash.
    
-----------------

SSL-Explorer 0.2.0 Community Edition - June 9, 2006

Features
    o New intuitive user interface with seperation of user and management interfaces.
    o New policy based permissions framework.
    o Installation wizard simplifys initial configuration.
    o Improved Active Directory support
    o Resource creation wizard to simplify the creation and access right assignment of resources.
    o Add resources to favorites at the policy level.
    o Improved web forward support including FORM based authentication.
    o New messaging framework.
    o Improved network place support with Windows shares, local and FTP file access.
    o User attributes can be added to accounts and referenced in resources using variables.
    o Confidential attributes are now stored securely on the server using asymmetric encrpytion.
    o New WEBDav implementation. 
    o CSS based themes
    
-----------------

SSL-Explorer 0.1.16_01 - March 1, 2006

Bug Fixes
    o WebDAV authentication fails

-----------------

SSL-Explorer 0.1.16 - February 24, 2006

Features
    o Authentication module framework now allows an authentication scheme to access a 
      HttpServletResponse directly.
    o Added permission for WOL feature. 
    o Extra log entries to help detect possible network errors.

-----------------

SSL-Explorer 0.1.15_01 - January 24, 2006

Bugs
    o Database upgrade script fails with column constraint error.
    o Text area parameter type causes JSP error.
    o Registry <get> extension element not recognised by server after extension upload. 

-----------------

SSL-Explorer 0.1.15 - January 20, 2006

Features
    o Reverse proxy host header field added - allows you to define the exact hostname used so
      that backend servers can be configured to use virtual hosting.
    o NTLM proxy support now allows a browser to transparently authenticate over NTLM against 
      a reverse proxy web forward.
    o Wake up on LAN feature allows broadcast packet to be sent to wakeup computers.

Bugs
    o Outgoing HTTP connections incorrectly forced to disconnect causing forwarding errors.
    o Upload of certificate authority reply fails with 404 Page Not Found error.
    o HTTP debugging mode in some cases causes 404 Page Not Found errors on web forwards.
    o VPN Client synchronization would often fail even though the client was started OK.
    o Active directory database fails to initialize when hostname contains '_' character.
    o Fix to trusted CA signature verification process which caused some certificates to be 
      incorrectly returned as invalid.
    o Editing a reverse proxy web forward fails to save with "Path already exists" error.
    o VPN client fails to connect with Handshake failure after installing CA trusted cert.

-----------------

SSL-Explorer 0.1.14 - October 27, 2005

Features
    o Optional HTTP listener can now redirect users to HTTPS server.
    o SSL tunneling now supports remote forwarding.
    o PKCS12 private keys can now be imported into SSL-Explorer's keystore.
     
Bugs 
    o Secure proxy href replacement fails with HTML entities such as &amp;
    o Secure proxy only supports GET and POST requests.
    o Extension ${session:password} token was not being replaced with users password.
    o HttpUrlConnection to extension store does not follow redirects.
    o Server start up check fails when server is configured to listen on a specific interface
      and another service exists on the same port on a different interface.