<commit_before>DigiDoc C library 3.10 release notes
-----------------------------------
Changes compared to ver 3.9.1

- Changed validation process of OCSP response so that the responder’s certificate reference is taken from the response instead of the signature’s XML. 
- Improved DDOC document validation. It is now checked that the issuance time of the OCSP response would be in the validity period of the signer's certificate.
- Removed duplicate configuration file entry CA_CERT_6 to fix KLASS3-SK 2010 (KLASS3-SK 2010 EECCRCA.crt) certificate's configuration settings.
- Removed Finnish CA certificates from digidoc.ini default configuration file. It is recommended to use BDOC format and relevant software instead.
- Development of the software can now be monitored in GitHub environment: https://github.com/open-eid/libdigidoc
- ddoc 1.0 format validation fails on ubuntu LTS upgrade 14.4.1 and newer.
Problem does not exist on ubuntu 14.4, osx or windows.
If openssl is upgraded to openssl_1.0.1f-1ubuntu2.8 then prolem appares.
Validation still works with openssl_1.0.1f-1ubuntu2.7.
This concerns only ddoc 1.0 signatures and not newer formats.



DigiDoc C library 3.9.1 release notes
-----------------------------------
Changes compared to ver 3.9

- DDOC security fixes:
	- Improved XML structure validation for DDOC files. This is a highly relevant security fix having an effect on the validation of DDOC files. The unfixed library can mistakenly give positive results on validation of invalid DDOC files with incorrect XML elements' ordering.



DigiDoc C library 3.9 release notes
-----------------------------------<commit_msg>v3.10 release notes update (#IB-3704 documenting ddoc 1.0 validation problem)<commit_after>DigiDoc C library 3.10 release notes
-----------------------------------
Changes compared to ver 3.9.1

- Changed validation process of OCSP response so that the responder’s certificate reference is taken from the response instead of the signature’s XML. 
- Improved DDOC document validation. It is now checked that the issuance time of the OCSP response would be in the validity period of the signer's certificate.
- Removed duplicate configuration file entry CA_CERT_6 to fix KLASS3-SK 2010 (KLASS3-SK 2010 EECCRCA.crt) certificate's configuration settings.
- Removed Finnish CA certificates from digidoc.ini default configuration file. It is recommended to use BDOC format and relevant software instead.
- Development of the software can now be monitored in GitHub environment: https://github.com/open-eid/libdigidoc

Known issues:
- Validation of documents in DDOC 1.0 format fails on Ubuntu LTS upgrade 14.4.1 and newer due to incompatibility in OpenSSL base library openssl_1.0.1f-1ubuntu2.8. The problem does not occur on Ubuntu 14.4 with openssl_1.0.1f-1ubuntu2.7, OSX and Windows platforms.



DigiDoc C library 3.9.1 release notes
-----------------------------------
Changes compared to ver 3.9

- DDOC security fixes:
	- Improved XML structure validation for DDOC files. This is a highly relevant security fix having an effect on the validation of DDOC files. The unfixed library can mistakenly give positive results on validation of invalid DDOC files with incorrect XML elements' ordering.



DigiDoc C library 3.9 release notes
-----------------------------------
{'fraction_non_alphanumeric': 0.10416666666666667, 'fraction_numerical': 0.030495169082125604, 'mean_word_length': 3.209656925031766, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 2, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 2, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '1499430', 'n_tokens_mistral': 936, 'n_tokens_neox': 811, 'n_words': 432}