v8.14.2
*****************************************************************************

** Maintenance
    * [PSLCSG-3155] - Update cryptographic algorithm expiration dates (ETSI/SOGIS refresh)

** Fixed bugs
    * [PSLCSG-3104] - Viewer rendering no longer fails with 500 Internal Server Error when an image render request has zero width/height


v8.14.1
*****************************************************************************

** Improvements
    * [PSLCSG-2598] - Add helpful examples to API documentation for /signer and /viewer
    * [PSLCSG-2607] - Add CSP directive "report-to", as it will replace the deprecated "report-uri"
    * [PSLCSG-2858] - Migrate to sign-me API 2.8.9510
    * [PSLCSG-2877] - Update documentation of CscDevice support for CSC API version 2.x
    * [PSLCSG-2878] - Localize support for CSC API version 2.x
    * [PSLCSG-2890] - ViewerFineOverlay: add new overlay to the demo default
    * [PSLCSG-2908] - jdk.internal.net pollutes debug log
    * [PSLCSG-2913] - Limit signature container size when signing PDF/A documents
    * [PSLCSG-2981] - Implement background health check for SmartcardPool and SignMe devices
    * [PSLCSG-2998] - Define observations for proNEXT device for performance monitoring of external service calls
    * [PSLCSG-3001] - Implement background health check for Csc device
    * [PSLCSG-3006] - Implement background health check for ProNEXT device
    * [PSLCSG-3024] - Implement background health check for AIS device
    * [PSLCSG-3039] - CscDevice: ignore unknown signature algorithms

** Fixed bugs
    * [PSLCSG-2824] - Fix MessageBodyProviderNotFoundException by registering the correct JacksonJsonProvider in AisEtsiDevice and UPRegDevice
    * [PSLCSG-2851] - Fix exception handling in PrincipalContext
    * [PSLCSG-3040] - Consider zones in CSC device implementation
    * [PSLCSG-3058] - Fix IZone threadsafety issue

** Maintainance
    * [PSLCSG-3049] - Perform CVE-Checks and update dependencies
    * [PSLCSG-2871] - Check & update 3rd party dependencies

** Stories
    * [PSLCSG-2941] - Support performance monitoring via Micrometer + Prometheus + Grafana
    * [PSLCSG-2954] - Meaningful alternate descriptions for signature-related annotations
    * [PSLCSG-2994] - Support logging of monitoring data into CSV file


v8.14.0
*****************************************************************************

*** Upgrade notice ***
----------------------

The package "logstash-logback-encoder" has been upgraded. Logback configurations
using a Logstash appender need to change the host and port declaration
from "<remoteHost>${LOGSTASH_HOST}</remoteHost><port>${LOGSTASH_PORT}</port>"
to "<destination>${LOGSTASH_HOST}:${LOGSTASH_PORT}</destination>"


v8.13.5
*****************************************************************************

** Improvements
	* [PSLCSG-3023] - Support D-Trust card v6.x
	* [PSLCSG-3038] - Support PIN caching with D-Trust card v5.x
	* [PSLCSG-3041] - Internationalize bridge device connection page
	* [PSLCSG-3042] - Internationalize viewer's document properties sidebar 	

** Bugs
	* [PSLCSG-3057] - Ensure that the control UI's configuration.json file is loaded from shared config directory tree 


v8.13.4
*****************************************************************************

** Improvements
	* [PSLCSG-2870] - Support Telesec Signature Card 3.0 in server-side signing and sealing processes

** Stories and improvements for incubation
	* [PSLCSG-2861] - Improve viewer rendering quality (requires addition of ViewerFineOverlay to viewer configuration)


v8.13.3
*****************************************************************************

** Improvements
	* [PSLCSG-2971] - Optimize br5owser caching for Angular apps
	* [PSLCSG-2681] - Add logging to analyze timing for remote signatures with procilon components
	* [PSLCSG-2993] - Optimze proNEXT client design for better runtime
	* [PSLCSG-2996] - Restrict access to Angular files from the config directory

** Bugs
	* [PSLCSG-2936] - Fixed: UPRegDocumentSigner renders and embeds an error message instead of Zulassungsbestätigung image into the document

** Maintenance
	* [PSLCSG-2995] - Update jersey libraries
	* [PSLCSG-3014] - Update trusted lists


v8.13.2
*****************************************************************************

** Bugs
	* [PSLCSG-2904] - Fixed: AIS-RAS verify call leads to exception
	* [PSLCSG-2906] - Fixed: PDF/A max. length constraints for signatures may be compromised
	* [PSLCSG-2909] - Fixed: NullPointerException during LTV extension


v8.13.1
*****************************************************************************

** New stories and features 
	* [PSLCSG-2717] - Support document timestamp creation

** Improvements
	* [PSLCSG-2671] - User-friendly handling of conversation timeout by viewer
	* [PSLCSG-2761] - Enable full control over logsize as default in logback (Remove ${log.id})
	* [PSLCSG-2819] - Standard and default security bean definitions are different

** Bugs
	* [PSLCSG-2823] - A-Trust Signature from Viewer - MessageBodyWriter not found
	* [PSLCSG-2854] - Do not use exponential notation when encoding numbers in PDF objects
	* [PSLCSG-2852] - Outcome handling regression, leading to Sign Live! CC signITgears with signMeOobAdvanced hanging in the loop
	* [PSLCSG-2853] - Action list deserialization via IElement not working


v8.13.0
*****************************************************************************

*** Upgrade notice ***
----------------------

The bean "aisSslContextBuilder" has been renamed to "aisSslContextProvider". Please consider this in case
you are redefining or referencing it in custom Spring XML configuration files.


Items addressed in this release:
--------------------------------

** New stories and features 
	* [PSLCSG-1700] - Support PKCS#11 modules for use in signature creation using RSA and ECDSA
	* [PSLCSG-2742] - Support dynamic signature field reference / creation by PDF document signer

** Improvements
	* [PSLCSG-2245] - Ignore leading/trailing whitespace in gears demo settings
	* [PSLCSG-2745] - Update 3rd party libraries
	* [PSLCSG-2730] - Remove device "yes" as the service is not actively provided by verimi
	* [PSLCSG-2342] - Improve readability of license manager page
	* [PSLCSG-2713] - Do not expose stack traces in HTTP responses to client API requests
	* [PSLCSG-2781] - Optimized String evaluation of SCIM-related claims

** Bugs
	* [PSLCSG-2686] - UPReg Signer does not apply the signature reason provided by UPReg service
	* [PSLCSG-2678] - RollingFileAppender not usable (literal) as observation appender

** Stories and improvements for incubation
	* [PSLCSG-2595] - Support AIS MAB remote signing scheme using of RA-X / ETSI protocols
	* [PSLCSG-2676] - Support log creation in XML format
	* [PSLCSG-2688] - Support latest G&D smartcard OS
	* [PSLCSG-2696] - Support DeepSign hash signing for seal creation
	* [PSLCSG-2706] - Support DeepSign hash signing for personal signature


v8.12.1
*****************************************************************************

** Improvements
	* [PSLCSG-2648] - Security improvements

** Fixed bugs
	* [PSLCSG-2644] - Fixed: Passing a fully-qualified timestamp provider factory via signer args leads to exception 


v8.12.0
*****************************************************************************

*** Important notice ***
------------------------
This version requires Apache Tomcat 10. Beyond, it introduces support for
standalone operation without a servlet container. 


Items addressed in this release:
--------------------------------

** New features and stories
	* [PSLCSG-2394] - Introduce a gears-to-gears device which can delegate signature creation to a second gears instance. This allows decentralized document processing with centralized management of signing means.
	* [PSLCSG-2553] - Support signing with A-Trust remote signature service
	* [PSLCSG-2574] - Provide a generic CSC device which allows for signing with remote signing services compliant to CSC v1
	* [PSLCSG-2593] - Use client-provided request components (e.g. header values) in logging, allowing system-overarching log correlation

** Improvements
	* [PSLCSG-2123] - Update 3rd party libraries and upgrade to Tomcat 10 support
	* [PSLCSG-2496] - Improved template resolution by signature decorator
	* [PSLCSG-2591] - Support D-Trust Card v5.x
	* [PSLCSG-2601] - Resume proper operational smartcard state after Windows smartcard service has been shutdown and restarted
	* [PSLCSG-2609] - Expose license infos via JMX and actuator health endpoints.
	* [PSLCSG-2622] - Translate and improve proNEXT error messages
	* [PSLCSG-2623] - Updated supported platforms
	* [PSLCSG-2635] - Updated trusted lists
	* [PSLCSG-2636] - Use standard filter "Adobe.PPKMS" for PDF signatures applying ECDSA algorithm.

** Fixed bugs
	* [PSLCSG-2568] - Fixed: Signature field lock prevents signature creation even if it refers to an empty signature field
	* [PSLCSG-2587] - Fixed: Defining an inline Logback Appender in an Observer with SizeAndTimeBasedRollingPolicy fails

﻿** Stories and improvements for incubation
	* [PSLCSG-2589] - Provide a dedicated deliverable containing the standalone core application
	* [PSLCSG-2611] - Support operation of the standalone core application as a Windows service


﻿﻿﻿﻿﻿﻿﻿﻿v8.11.1
*****************************************************************************

** Improvements
	* [PSL-2884]    - Updated trusted lists (included issuer certificates from Bayern-PKI and Autobahn GmbH)
	* [PSLCSG-2534] - Include certificate path to signatures created via proNEXT by default
	* [PSLCSG-2530] - Provide a more lenient bearer token resolver implementation
	* [PSLCSG-2531] - Support key/value objects in collections within SCIM data
	
	
﻿﻿v8.11.0
*****************************************************************************

*** Important notice ***
------------------------
This is the LAST APPLICATION VERSION supporting
- Tomcat 9
Support for this environment component will be discontinued in the next minor release.

Please be prepared to migrate your gears runtime environment for future versions, using
- Apache Tomcat 10


Items addressed in this release:
--------------------------------

** Major features and improvements
	* [PSLCSG-2413] - Support the creation of HSM-backed, advanced personal signatures using procilon's proNEXT Secure Framework
	* [PSLCSG-2393] - Support qualified remote sealing using the D-Trust seal-me service

** New features and stories
	* [PSLCSG-2488] - Support flow authentication using a bearer token provided by d.velop's ecosystem

** Improvements
	* [PSLCSG-2341] - Only load built-in demo licenses if profile ""demo"" is active
	* [PSLCSG-2356] - Optimized positioning of context menu in viewer on iPad
	* [PSLCSG-2391] - Support custom processing message template when signing from viewer
	* [PSLCSG-2440] - Documented well-known Spring security beans
	* [PSLCSG-2464] - Do not show unnecessary LDAP health endpoint as down
	* [PSLCSG-2492] - Do not unexpectedly change the page while a field is positioned in the viewer
	* [PSLCSG-2493] - Updated crypto dates based on ETSI TS 119 312 1.4.2 from 2022-02 and SOGIS 1.2 from 2020
	* [PSLCSG-2495] - Support RSA key generation with 3072 bit length for the DB-based keystore device
	* [PSLCSG-2502] - Updated 3rd party libraries
	* [PSLCSG-2506] - Log warning if OCSP response is not available for LT-level signature creation
	* [PSLCSG-2510] - Updated trusted lists
	* [PSLCSG-2415] - Internationalize the viewer's progress dialog

** Fixed bugs
	* [PSLCSG-2425] - Fixed: Wrong path reported upon forbidden API access
	* [PSLCSG-2447] - Fixed: Button ""Active operations"" doesn't work
	* [PSLCSG-2390] - Fixed: Cursor state change is inconsistent during blackening
	* [PSLCSG-2402] - Fixed: bridge license for pen tablet is only read when deployed as builtin license


﻿﻿﻿﻿﻿﻿﻿v8.10.1
*****************************************************************************

** Improvements
	* [PSLCSG-2487] - Support ECDSA-based QES with sign-me
	* [PSLCSG-2445] - Make gears default security configuration optional

** Fixed bugs
	* [PSLCSG-2454] - Fixed: Tag detection in viewer is not activated after returning from bridge
	* [PSLCSG-2449] - Fixed: Viewer does not show document properties, although they are not empty
	* [PSLCSG-2456] - Fixed: BridgeSigner does not use embedded license
	
	
﻿﻿v8.10.0
*****************************************************************************

*** Upgrade notice ***
----------------------

This release introduces loadbalancing support and relies on correct processing of the
_links property returned in gears flow creation responses. For backwards compatibility
with Sign Live! CC clients prior to v7.1.11, the Java system property
"de.intarsys.conversation.snapshot.noLinks=true" must be set until all Sign Live! CC
clients are upgraded to v7.1.11 or newer.
When using Sign Live! cloud suite bridge with loadbalanced gears instances, please 
make sure that all bridge installations are upgraded to v7.1.11 or newer.


Items addressed in this release:
--------------------------------

** Major features and improvements
	* [PSLCSG-808] - Support multi-stage conversations in loadbalanced setups (applying stickyness)
	* [PSLCSG-1022] - Support confirmation of Swiss notarial signatures on charters via UPReg service
	* [PSLCSG-2325] - Support signing with keys stored in Microsoft Azure Key Vault

** New features and stories
	* [PSLCSG-1761] - Support Kerberos-based user authentication for core flows
	* [PSLCSG-2272] - Optionally restrict use of signer or viewer configuration based on authentication and authorization
	* [PSLCSG-2327] - Optionally provide Kerberos integration in gears demo
	* [PSLCSG-2359] - Support scheduled updates of trusted lists

** Improvements
	* [PSLCSG-2266] - Password encryption in control panel now supports hidden password
	* [PSLCSG-2281] - Improve error message for user "deny" in context of ACL
	* [PSLCSG-2300] - Fully support Firefox by gears viewer
	* [PSLCSG-2303] - Expect and support non-String types in Spring properties
	* [PSLCSG-2304] - Improve loading of UI components
	* [PSLCSG-2311] - Observe spring security authentication failures.
	* [PSLCSG-2314] - Reject PDF signature creation if FieldMDP reference forbids it
	* [PSLCSG-2328] - Improved variable initialization
	* [PSLCSG-2332] - Enhanced HTTP security, adding referrer-policy header
	* [PSLCSG-2333] - Enhanced HTTP security, adding content-security-policy header
	* [PSLCSG-2338] - Soften restrictions on parallel execution in UI
	* [PSLCSG-2353] - Fixed typo in OpenAPI documentation: redirectUrl --> redirectUri
	* [PSLCSG-2358] - Provide observations for the sign-me identification process
	* [PSLCSG-2360] - Persist CRLs collected during validation
	* [PSLCSG-2383] - Harmonized typographic styles in core user interfaces
	* [PSLCSG-2388] - Disable access to external entities when parsing XMP metadata
	* [PSLCSG-2408] - Application properties and arguments are now logged in sorted order at startup
	* [PSLCSG-2415] - Internationalize the viewer's progress dialog

** Fixed bugs
	* [PSLCSG-2127] - Fixed: Inverse rectangle handles if field definition rectangle is pulled across rectangle sides
	* [PSLCSG-2195] - Secured processing of external XML entities
	* [PSLCSG-2351] - Fixed: Widget properties in path notation are not correctly stored
	* [PSLCSG-2380] - Removed unused gears admin webapp
	* [PSLCSG-2402] - Fixed: bridge license for pen tablet is only read when deployed as builtin license


﻿﻿﻿﻿﻿﻿﻿v8.9.1
*****************************************************************************

** Improvements
	* [PSLCSG-2299] - Ensure that the Firefox UI stays responsive
	* [PSLCSG-2303] - Expect and support non-String types in Spring properties

** Fixed bugs
	* [PSLCSG-2312] - Fixed: Alias not recognized when evaluated after "documentsigner" prefix
	
	
v8.9.0
*****************************************************************************

*** Upgrade notice ***
----------------------

This version requires Java v17 and drops support for Internet Explorer.
Please ensure that Azul Zulu 17 (17.34.19 or newer) is available in your
runtime environment and used by Tomcat 9 when you upgrade to this gears version.

Template-based string evaluation within gears configuration and APIs now applies
access restrictions to certain variable namespaces. In case of issues, please
refer to section 9.13 "String Expansion" of the gears manual for configuration details.


Items addressed in this release:
--------------------------------

** New features and stories
	* [PSLCSG-2289] - Restrict access to sensitive information in template evaluation
	* [PSLCSG-2060] - Provide a drop-down widget offering signature interactions identified by tag detection
	* [PSLCSG-2218] - Viewer action to remove hidden confidential data from document

** Improvements
	* [PSLCSG-1949] - Improved positioning of context menu within the viewer, preventing items from being cut off
	* [PSLCSG-2095] - Document cryptdec algorithm configuration for key wrapping and password encryption
	* [PSLCSG-2117] - Support multiline texts in "CollectInput" and "Prompt" actions
	* [PSLCSG-2124] - Support Java 17 as runtime environment
	* [PSLCSG-2131] - Improve log output quality correlating entries
	* [PSLCSG-2180] - Support deactivation of device providers "signMe" and "yes"
	* [PSLCSG-2223] - Resume previous state after collecting user input on a different page
	* [PSLCSG-2227] - Support "canvas" shape in ShapeDecorator without image
	* [PSLCSG-2246] - Improve responsiveness of UI controls in Firefox

** Fixed bugs
	* [PSLCSG-2128] - Fixed: Blackening: If in edit mode and element is selected, page change leads to error
	* [PSLCSG-2129] - Fixed: signme QES LT batch signature fails
	* [PSLCSG-2138] - Fixed: yes signer fails with NullPointerException if OCSP response is unsuccessful
	* [PSLCSG-2177] - Fixed: An invalid username (not email) hangs the sign-me signature if enrollment is enabled
	* [PSLCSG-2178] - Fixed: Misleading error message when a short username (< 6 characters) is used with sign-me
	* [PSLCSG-2210] - Fixed: Potential deadlock checking out smartcards from a smartcard pool
	* [PSLCSG-2120] - Fixed: Error when resizing a signature field rectangle on tablet device

﻿** Stories and improvements for incubation
	* [PSLCSG-1912] - Capture biometric data with handwritten signature (undocumented)
	* [PSLCSG-1913] - Collect page-by-page endorsement from user before signing (undocumented)
	* [PSLCSG-2211] - Apply role-based access control to seals, deriving authentication state from the the client request (undocumented)
	* [PSLCSG-2213] - Track authorization decisions via log (undocumented)


﻿﻿﻿﻿﻿﻿﻿v8.8.1
*****************************************************************************

*** Important notice ***
------------------------
This is the LAST APPLICATION VERSION supporting
- Java v8
- Internet Explorer
Support for these environment components will be discontinued in the next minor release.

Please be prepared to migrate your gears runtime environment for future versions, using
- Azul Zulu 17 (Java v17)


Items addressed in this release:
--------------------------------

** Fixed bugs
	* [PSLCSG-2129] - Fixed: signme QES LT batch signature fails
	* [PSLCSG-2128] - Fixed: Blackening: If in edit mode and element is selected, page change leads to error
	* [PSLCSG-2138] - Fixed: yes signer fails with NullPointerException if OCSP response is unsuccessful


﻿﻿﻿﻿﻿﻿﻿v8.8.0
*****************************************************************************

*** Upgrade notice ***
----------------------
AIS-based LTV signatures now append the validation data to the PDF itself. For this purpose, it is necessary
to instruct the document signer to achieve a signature of LT conformance level, by adding the argument

documentSigner.args.conformanceLevel=LT

This is the (new) default for any predefined AIS signer configuration (aisOnDemand, aisStatic). In case you
have created your own signer configuration, please make sure to apply this argument.
See the Sign Live! Security Applications Developers Guide, section 2.5.2 for details on conformance levels.

The actuator endpoints for readiness and liveness have changed to:
- /cloudsuite-gears/core/manage/health/readinessState
- /cloudsuite-gears/core/manage/health/livenessState


Items addressed in this release:
--------------------------------

** New features and stories
	* [PSLCSG-1898] - SignForm Processor:Immediately display field content after value is entered
	* [PSLCSG-2007] - Support dynamic toolbar widget that reflects signature annotations identified by tags
	* [PSLCSG-2009] - Support complex action sequences
	* [PSLCSG-1273] - Harmonized signer parameterization addressing AdES formats and levels to create
	* [PSLCSG-2011] - Provide LTV data to client as a complementing result of a digest signing call

** Improvements
	* [PSLCSG-2013] - Improved field definition interaction. It consistently allows for definition from scratch, definition with predefined field dimensions, optional placement and permission control regarding applicable modifications.
	* [PSLCSG-1961] - Support multiple appearances for tagged annotations
	* [PSLCSG-1974] - Control overlay reworked for improved mobile experience.
	* [PSLCSG-1965] - SignForm Editor: Add "fontSize" to editor UI and textual fields
	* [PSLCSG-1968] - SignForm Editor: Support definition using pre-sized fields
	* [PSLCSG-1808] - SignForm Processor: Improve layout of controls
	* [PSLCSG-2081] - SignForm Processor: Deleting a signature image in the wizard immediately effects appearance
	* [PSLCSG-2089] - SignForm Processor: Hide labels during processor flow
	* [PSLCSG-1673] - Fully PAdES-B-LT-compliant AIS OnDemand signatures
	* [PSLCSG-1921] - Standard signer configurations for qualified sign-me signature shall be LTV-enabled
	* [PSLCSG-2042] - Support signing with SHC eHBA 2.1
	* [PSLCSG-1901] - Apply a round robin strategy to smartcard pools with multiple registered smartcards
	* [PSLCSG-2014] - Updated EU trusted lists and added QuoVadis CH TSUs chtsa01, chtsa02, chtsa03 to ZertES-reconized timestamp services	
	* [PSLCSG-2028] - Use more strict argument checks
	* [PSLCSG-2109] - Substitute log4j JARs by version 2.16.0 due to CVE-2021-44228 (Log4Shell). Note: The affected log4j-core library hasn't been included anyway!
	* [PSLCSG-2006] - Ensure that the master password is hidden from the log file
	* [PSLCSG-2000] - Sort presets in drop down box on settings page (demo client)

** Fixed bugs
	* [PSLCSG-1854] - Using the viewer on iPad, not all toolbar icons are displayed in portrait view
	* [PSLCSG-2097] - Fixed: Shape Decorator - vertical rendering with "center" results to "start" in some cases
	* [PSLCSG-2104] - Mitigated possible deadlock when cleaning the OCSP cache.
	* [PSLCSG-1987] - OAuth2 integration into control panel instable with IE, Edge Chromium and Firefox

﻿** Stories and improvements for incubation
	* [PSLCSG-1819] - Optimize page handling for mobile device use (swiping)
	* [PSLCSG-1893] - SignForm Editor: Show fields for all configurations
	* [PSLCSG-1915] - Support blackening of PDF document parts


﻿﻿﻿﻿﻿﻿﻿v8.7.1
*****************************************************************************

** Improvements
	* [PSLCSG-1945] - Use consistent tooltip style
	* [PSLCSG-1960] - Support filtering of "tagged annotations"
	* [PSLCSG-1985] - Updated trusted lists

** Fixed bugs
	* [PSLCSG-1962] - UIs not working with Internet Explorer due to unsported JavaScript function "fetch"
	* [PSLCSG-1946] - Download button does not work in Explorer
	* [PSLCSG-1947] - Next and previous are not translated in table paginators
	* [PSLCSG-1956] - New virtual annotation feature does not handle multi-page documents correctly


﻿﻿﻿﻿﻿﻿﻿v8.7.0
*****************************************************************************

*** Upgrade notice ***
----------------------
The viewer result has slightly changed.
Previously, the resulting document was returned redundantly, once per signature created within the viewer session.
Now, the resulting document is returned only once for all signatures per viewer session. 
Please consider this if your implementation currently relies on the number of signed documents returned. 


Items addressed in this release:
--------------------------------

** Major features and improvements
	* [PSLCSG-1017] - Extensive, consistent support for language customization and use of the gears UIs in environments with multiple user languages
	* [PSLCSG-1734] - Signing in the yes ecosystem, using bank identification data 
	* [PSLCSG-970]  - Remote-sealing with qualified seals operated by Swisscom AIS
	* [PSLCSG-1618] - Extensive application monitoring capabilities and integration features
	
** New features and stories
	* [PSLCSG-531]  - Predefined field size for interactive signature field placement in viewer
	* [PSLCSG-1656] - Present license account balances in gears control UI
	* [PSLCSG-1739] - Provide password encryption tool in gears control panel
	* [PSLCSG-1742] - Support principal PIN entry via control page for transient, session-scoped use
	* [PSLCSG-1886] - Control panel shows principals' certificate details and offers the certificate download

** Improvements
	* [PSLCSG-692]  - Optionally display buttons with text in gears viewer
	* [PSLCSG-743]  - Provide a useful error message if an AIS OnDemand signature is cancelled on the mobile
	* [PSLCSG-1256] - Provide title and message for credential input in demoPin1 signer configuration
	* [PSLCSG-1565] - Improve number handling of PDF glyph widths
	* [PSLCSG-1573] - Save clearing signature fields in gears viewer to the returned result document
	* [PSLCSG-1586] - Write license use data to log
	* [PSLCSG-1600] - Make license activation data accessible for clients
	* [PSLCSG-1615] - Easy handling of annotation widgets
	* [PSLCSG-1642] - Add argument 'password' to signer/viewer API for decryption of encrypted PDF documents
	* [PSLCSG-1653] - Redesigned gears demo pages
	* [PSLCSG-1655] - Documented variables referring to smartcard infos
	* [PSLCSG-1706] - Allow modifications on InfoDict in PDF MDP validation
	* [PSLCSG-1709] - SignForm: add English texts
	* [PSLCSG-1713] - Provide possibility to create one signature field with multiple signature widgets
	* [PSLCSG-1716] - Provide support for encrypted passwords in configuration files
	* [PSLCSG-1726] - SignForm: Lock markup annotations against modification and deletion
	* [PSLCSG-1758] - Support Adobe V5/V6 PDF encryption algorithm in encryption and decryption
	* [PSLCSG-1823] - Do not log stacktrace for cancellations
	* [PSLCSG-1824] - Improved technical batch signing design
	* [PSLCSG-1839] - SignForm: improve check box logic for required field
	* [PSLCSG-1840] - Invalid fontsize (x.y) leads to error instead of default size
	* [PSLCSG-1865] - Provide API allowing the cancellation of a running flow conversation
	* [PSLCSG-1866] - SignForm editor: visual representation of fields should be updated immediately when resized
	* [PSLCSG-1869] - SignForm editor: show "move" cursor when mouse is inside a focused box
	* [PSLCSG-1891] - SignForm: Do not add a counter for field labels
	* [PSLCSG-1934] - Provide configuration support for TLS session timeout with AIS and sign-me
	* [PSLCSG-1638] - Support Red Hat Enterprise Linux as runtime environment
	* [PSLCSG-1648] - Support HBA G2
	* [PSLCSG-1652] - Support differentiated configuration of in-band / out-of-band redirects by sign-me device
	* [PSLCSG-1662] - Support uploading a PNG image without extension
	* [PSLCSG-1668] - Make the internal fallback UIs for the Bridge SPA (/outcome) readable
	* [PSLCSG-1409] - Cut AIS stepUpMessage and adjust AIS default configuration, default to max. 239 characters
	* [PSLCSG-1436] - Support styling of toolbar widgets
	* [PSLCSG-1479] - Updated sign-me library to version 2.7-9310
	* [PSLCSG-1484] - Always associate a PDF signature field to a single annotation
	* [PSLCSG-1537] - Support continuation of previously initiated sign-me registration / verification process
	* [PSLCSG-1538] - Base API documentation on OpenAPI Specification 3.0
	* [PSLCSG-1540] - Added examples to API documentation.
	* [PSLCSG-1542] - Support HTTP Basic Authentication when accessing gears APIs from Swagger UI
	* [PSLCSG-1546] - Support suffix _T for sign-me identityVerificationTypes - allows use of real identification services
	* [PSLCSG-1553] - Support configuration of process URL query suffixes calling the sign-me service
	* [PSLCSG-1563] - Remove spring profile openapi, always exposing the API documentation
	* [PSLCSG-1574] - Wrong overlay configuration in demo view configuration "demoSignature"
	* [PSLCSG-1580] - SignForm processor: value for number field left empty leads to error
	* [PSLCSG-1595] - SignForm editor: Add convenience argument for forwarding "signerCreate" arguments
	* [PSLCSG-1619] - Make "acknowledge" resilient against issues in final stages due to multiple calls.
	* [PSLCSG-1566] - Increased approximated signature size for AIS signatures
	* [PSLCSG-1809] - Restrict maximum AIS step-up message length to a configurable value

** Fixed bugs
	* [PSLCSG-429]  - When applying a handwritten signature, single clicks and points do not result in an image
	* [PSLCSG-1527] - Variable date formatting - character ':' not possible
	* [PSLCSG-1646] - SignForm processor: incompatibilities with Safari browser
	* [PSLCSG-1773] - SignForm: using DEL key while editing field name deletes field
	* [PSLCSG-1778] - capture handwriting: lines are added in signature between pen up and next pen down
	* [PSLCSG-1785] - Flow context not available in callback from TSP
	* [PSLCSG-1825] - sign-me: for batch signing assigning the signature format is not properly processed
	* [PSLCSG-1842] - SignForm processor: max call stack size exceeded and field name is displayed upside down
	* [PSLCSG-1858] - SignForm editor: Error in editor if canvas becomes too small
	* [PSLCSG-1862] - Annotation overlay does not recognize rotation
	* [PSLCSG-1864] - SignForm: Multi annotations on rotatedPage fails
	* [PSLCSG-1868] - SignForm editor: enforce a minimum size in the property view
	* [PSLCSG-1872] - SignForm editor: handle resizing to negative width/height
	* [PSLCSG-1571] - Files with long names influence the gears explorer display
	* [PSLCSG-1588] - TypeError "trimRight" not supported in IE11
	* [PSLCSG-1589] - SignForm processor: Tap on text field overlay to start the process of not working on tablets
	* [PSLCSG-1634] - Fixed: Viewer shows JavaScript error when opening in Internet Explorer if multiple icon plugins are used
	* [PSLCSG-1644] - Signer configuration 'signMeAdvanced' with long file name leads to error
	* [PSLCSG-1663] - SignForm editor: Cannot configure expert mode in XML configuration
	* [PSLCSG-1677] - Documents being distorted when converting TIFF to PDF for printing due to varying image ratios
	* [PSLCSG-1712] - Font entries directly contained in default resources cannot be reused
	* [PSLCSG-1567] - SignForm: Message "Cannot read property 'id' of null" if element is not editable
	* [PSLCSG-1568] - SignForm: Message "Cannot read property 'value' of undefined" if no image is assigned to signature field
	* [PSLCSG-1572] - Using annotation overlay not working on tablets
	* [PSLCSG-1578] - SignForm: Timing issue / JavaScript error - Cannot read property 'clear' of undefined
	* [PSLCSG-1581] - Explorer preview not working correctly
	* [PSLCSG-1616] - Images not selectable via explicit variable binding

﻿** Stories and improvements for incubation
	* [PSLCSG-740]  - Support use of devices and pools in TLS client authentication
	* [PSLCSG-1696] - Possibility to create and delete principals in the DB-backed keystore for use in signature creation and TLS client authentication processes.
	* [PSLCSG-1703] - Allow deferred PDF document certification and analyze behavior in validating applications
	* [PSLCSG-1732] - Support OpenID connect login to gears control page
	* [PSLCSG-1888] - Provide a DB-backed keystore, allowing the integration of dynamically managed certificates into signature- and validation-related processes 
	* [PSLCSG-1889] - Provide built-in keystore for CA use
	* [PSLCSG-788]  - Basic theming support for UIs (specific cases only)


﻿﻿﻿﻿﻿﻿﻿v8.6.1
*****************************************************************************

** New features and stories
	* [PSLCSG-1364] - Provide posibility to prepare comprehensive signature forms and reapply them to arbitrary PDF documents. This allows splitting signature processes into edit-time and sign-time activities.

** Improvements
	* [PSLCSG-1436] - Support styling of toolbar widgets
	* [PSLCSG-1479] - Updated sign-me library to version 2.7-9310
	* [PSLCSG-1537] - Support continuation of previously initiated sign-me registration / verification process
	* [PSLCSG-1538] - Base API documentation on OpenAPI Specification 3.0
	* [PSLCSG-1540] - Added examples to API documentation
	* [PSLCSG-1542] - Support HTTP Basic Authentication when accessing gears APIs from Swagger UI
	* [PSLCSG-1546] - Support suffix _T for sign-me identityVerificationTypes - allows use of real identification services
	* [PSLCSG-1553] - Support configuration of process URL query suffixes calling the sign-me service
	* [PSLCSG-1619] - Make "acknowledge" resilient against issues in final stages due to multiple calls.
	* [PSLCSG-1566] - Increased approximated signature size for AIS signatures
	* [PSLCSG-1431] - Viewer now retains displayed document section after executing a signature process
	* [PSLCSG-1435] - Improved annotation overlay rendering
	* [PSLCSG-1484] - Always associate a PDF signature field to a single annotation
	* [PSLCSG-1424] - Provide jurisdiction in RAS verify call
	* [PSLCSG-1440] - API: TransportItem discriminator is optional now, defaulting to 'd' for TransportDocument type
	* [PSLCSG-1487] - Improved handling of errors during AIS/RAS evidence lookup
	* [PSLCSG-1488] - Improved component API
	* [PSLCSG-1492] - Reduced file path lengths in distribution archive for seamless extraction
	* [PSLCSG-1502] - Use Roboto font in gears UIs
	* [PSLCSG-1515] - gears demo default authentication can be switched off and customized setting property spring.profiles.active=defaultAuthenticationOff
	* [PSLCSG-1516] - Added support for complex signer and viewer configurations
	* [PSLCSG-1517] - General UI technology improvements
	* [PSLCSG-1529] - Log JAX-RS traces if logger "jaxrs" is active even without spring profile "debug".
	* [PSLCSG-1410] - Support D-TRUST smartcards 4.1 / 4.4
	* [PSLCSG-1417] - Updated included trusted lists to state of 2020-02-12
	* [PSLCSG-1432] - Configurable bridge/meeting message loop timeout

** Fixed bugs
	* [PSLCSG-1388] - Ignore changes on XRefObjectStream indirect objects in PDF signature validation (MDP)
	* [PSLCSG-1415] - Generated signature IDs in XML signatures are now schema-compliant
	* [PSLCSG-1437] - Fixed file synchronization
	* [PSLCSG-1477] - Non-blocking dialogs are modal now
	* [PSLCSG-1478] - Cancel in "signature process" now triggers cancel event, not an error
	* [PSLCSG-1491] - Got rid of duplicate JAR files in /SDK/lib folder
	* [PSLCSG-1526] - Improved variable expansion
	* [PSLCSG-1414] - Fixed support of Windows pen tablets
	* [PSLCSG-1416] - Fixed PDF serialization issue in case of specific InfoDict-related document structure
	* [PSLCSG-1420] - Calculate correct digest when embedding documents into XML signatures
	* [PSLCSG-1433] - Improved bridge error handling
	* [PSLCSG-1368] - Fixed: gears viewer closes window / tab upon exit if user is referred to client application in a new tab or window

﻿** Stories and improvements for incubation
	* [PSLCSG-788] - Basic theming support for UIs (specific cases only)
	* [PSLCSG-1401] - Provide action for cancellation of all running child processes in embedded use.
	* [PSLCSG-1402] - Publish events when internal action starts or ends, informing emedding containers of state changes.
	* [PSLCSG-1403] - Improve control as embedded component


﻿﻿﻿﻿﻿v8.5.1
*****************************************************************************

** Fixed bugs
	* [PSLCSG-1371] - Swagger sample requests partly invalid
	* [PSLCSG-1373] - NPE in some complex configuration scenarios
	* [PSLCSG-1379] - XRefStream object id is not recorded as occupied
	* [PSLCSG-1382] - Swagger does not contain "acknowledge" documentation
	* [PSLCSG-1368] - gears viewer closes window / tab upon exit if user is referred to client application in a new tab or window
	* [PSLCSG-1375] - TLS handshake with AIS fails if using Azul Zulu OpenJDK 8.48	
	* [PSLCSG-1396] - gears validation result doesn't show integrity compromise after invalid document changes
	
** Improvements
	* [PSLCSG-1374] - Resist PDF shadow attacks by RUB

** Other
	* [PSLCSG-1029] - Updated built-in demo license


﻿v8.5.0
*****************************************************************************

** New stories
	* [PSLCSG-619] - Integrate RAS evidence query into on-demand signature call to AIS
	* [PSLCSG-741] - Initiate signature process by clicking into a PDF signature field
	* [PSLCSG-851] - Automatically close viewer after signing
	* [PSLCSG-993] - Inline enrollment with sign-me
	* [PSLCSG-1012] - Support easy renaming of application context
	* [PSLCSG-1078] - Combine handwritten signature with predefined field boundaries
	* [PSLCSG-1081] - Enter textual user input just-in-time for display in the field's appearance
	* [PSLCSG-1085] - Creation of PAdES/CAdES -B-T and -B-LT formats with sign-me signature service
	* [PSLCSG-1086] - Display PDF signature field annotations in viewer prior to signing
	* [PSLCSG-1192] - Show pseudonym, given name and surname in validation result if applied
	* [PSLCSG-1202] - Identify and inform about qualified seal (in contrast to qualified signature)
	* [PSLCSG-1212] - Integrated demo timestamp device
	* [PSLCSG-1248] - Support creation of XAdES-LT signatures

** Improvements
	* [PSLCSG-292] - Skip delayed display of page in viewer if user has already navigated to a different page
	* [PSLCSG-617] - Support provision of further material design icons via plugins
	* [PSLCSG-1009] - Add "nickname" to API operations in OpenAPI doc
	* [PSLCSG-1025] - Updated included trusted lists
	* [PSLCSG-1028] - Viewer now offers "Exit" button even if presented PDF is invalid
	* [PSLCSG-1055] - Show 'loading' indicator in viewer while page is being rendered
	* [PSLCSG-1056] - Differentiated CORS rules for public / private gears endpoints
	* [PSLCSG-1068] - Boost PDF rendering performance applying native rendering
	* [PSLCSG-1112] - Improved callback / redirect handling
	* [PSLCSG-1182] - Support document tags for viewer string expansion
	* [PSLCSG-1197] - Improved signer text entry dialog in viewer

** Fixed bugs
	* [PSLCSG-395] - Page number control shows spinner
	* [PSLCSG-935] - Device provider view: "Show all" does not work correctly
	* [PSLCSG-960] - Documents view: "Check all" broken after removal of checked document
	* [PSLCSG-962] - Control Panel: Principals not updated by pressing "Renew Device"
	* [PSLCSG-967] - Viewer's exit button only partially visible in IE
	* [PSLCSG-1002] - Field placement: Area selection is buggy when zoom > 1x
	* [PSLCSG-1023] - Demo source is missing
	* [PSLCSG-1030] - Potential security issue validating signatures
	* [PSLCSG-1034] - Signing an invalid PDF within a batch leads to error message without clues about the causing document
	* [PSLCSG-1204] - XAdES timestamp is created with wrong digest if the current parent node already contains signatures
	* [PSLCSG-1255] - When saving an encrypted PDF document, an existing /Lang entry gets modified, leading to signature rejection by Sign Live! CC
	* [PSLCSG-1261] - user.country is not a required system property, default needed
	* [PSLCSG-1301] - XMLDSig: X509SubjectName should be converted to RFC 2253

﻿** Stories and improvements for incubation
	* [PSLCSG-450] - Define shortcuts for explorer controls
	* [PSLCSG-451] - Define shortcuts for viewer controls
	* [PSLCSG-786] - Define a component interface for the viewer, supporting component-style integration into a UI-based application
	* [PSLCSG-789] - Support "modal" approach for signing in viewer
	* [PSLCSG-1087] - Display to-be-generated PDF signature fields in viewer prior to signing
	* [PSLCSG-1193] - Allow direct viewer control within viewer area via control overlay
	* [PSLCSG-1207] - Provide flexible signature field decoration features based on shape definitions

** Other
	* [PSLCSG-1029] - Updated built-in demo license
	* [PSLCSG-1195] - see https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.2-Release-Notes#health-endpoint-json
	* [PSLCSG-1270] - Establish Azul Zulu JDK 8 as reference JDK	


﻿v8.4.0
*****************************************************************************

** New stories
	* [PSLCSG-307] - Show signature validation result in viewer
	* [PSLCSG-532] - Print PDF documents from viewer
	* [PSLCSG-765] - Print TIFF documents from viewer
	* [PSLCSG-768] - Configure file name display in viewer
	* [PSLCSG-791] - Configure rendering timeout
	* [PSLCSG-811] - Validate signatures using a built-in set of trusted lists
	* [PSLCSG-825] - Configure usage of a console-only logger in cloud environments
	* [PSLCSG-880] - Configure viewer toolbar and sidebar elements to be displayed
	* [PSLCSG-882] - Centrally configure the viewer's default sidebar
	* [PSLCSG-897] - Validate signatures using CRLs

** Improvements
	* [PSLCSG-648] - Localize texts displayed in UI
	* [PSLCSG-672] - Enforce PAdES conformity of PDF signatures created via Swisscom AIS
	* [PSLCSG-767] - Don't use BandMerge to apply mask images
	* [PSLCSG-769] - Sort items in gears control UI
	* [PSLCSG-771] - Configure gears core components solely based on Spring
	* [PSLCSG-773] - Improve error page
	* [PSLCSG-781] - Render TIFF images with unknown tags
	* [PSLCSG-784] - Encode logs in UTF-8
	* [PSLCSG-832] - New toolbar icon for signatures
	* [PSLCSG-863] - Support start without PC/SC access
	* [PSLCSG-911] - Adjust document scale in viewer when the window is resized
	* [PSLCSG-964] - Viewer settings - do not remove defaults from local storage

** Fixed bugs
	* [PSLCSG-757] - Default arguments for signer are polluted with client side arguments
	* [PSLCSG-776] - HTTP timestamp creation components missing in deliverable
	* [PSLCSG-777] - Disable liquibase auto-configuration
	* [PSLCSG-793] - Stacktrace when viewer is exited before thumbnails are rendered


v8.3.0
*****************************************************************************
- Enhanced viewer: Support display of TIFF images
- Increased viewer stability and consistency (e.g. when rapidly requesting multiple signatures in a row)
- sign-me signature: Immediately return to client / viewer page after signature creation
- sign-me signature: Support display of authorization page in separate window / tab
- sign-me signature: Support signature with short-lived certificates
- Internal property "pdfSignatureTimeOffset" created for offsetting	
- Support creation of external XML signatures
- Disable creation of audit data by default
- Added a "cookbook" to ease developers life...
- Fixed: race condition with smartcard devices
- Fixed viewer issue: Improved error handling for rendering
- Fixed: race condition in demo settings / documents page
- Fixed: invalid link to API doc on gears core landing page


v8.2.1
*****************************************************************************
- Fixed: signature fields are misplaced in certain cases
- Fixed: argument textScaleWhen is overwritten when passed from client


v8.2.0
*****************************************************************************
- Added support for signature with smartcard pools
- Added JMX notification for failed signature operations
- Fix table pagination display


v8.1.1
*****************************************************************************
- Configurable rendering quality within the viewer
- Handle session timeout in explorer
- Show page thumb sidebar in viewer when opened from explorer
- Support LTV creation using validation data provided by a CSC signature device
- Fixed viewer issue: viewer page change loads document twice
- Fixed viewer issue: incorrect zoom behaviour
- Fixed viewer issue: scaling interferes with signature appearance creation
- Fixed viewer issue: show scrollbars only if nexessary


v8.1.0
*****************************************************************************
- Introduced new component: gears admin
- Support signature using a remote signature device via CSC v0.1.7.9 protocol
- Support profile-based argument augmentation
- Support client and user authorization


v8.0.0
*****************************************************************************
Initial version
- Support for local signature using cloud suite bridge and smartcard
- Single signature
- Batch signature
- Document viewer
- Batch explorer
