Chilkat v10.0.0 Release Notes

Previous Version: Chilkat v9.5.0.99 Release Notes/

• Semantic Versioning: Chilkat finally moves to standard semantic versioning. See the information about Chilkat Semantic Versioning starting in v10.0.0.
• Apple Keychain Integration: Chilkat is fully integrated with the Apple Keychain, including HSMs (USB tokens and smartcards).  This includes both MacOS and iOS.  Documentation and examples will be forthcoming and this release notes entry will link to another post with more information.
• ActiveX Registration Changes: No changes are required for this version, but changes will be required in the future, starting with the next major version release (11.0.0).  See Chilkat v10.0.0 ActiveX Registration and Object Creation.
• OAuth2: Version 9.5.0.99 introduced a problem where the ClientSecret became required.  This is fixed.  The ClientSecret is optional.  If there is no client secret, then you are doing OAuth2 PKCE Authentication ( OAuth2 PKCE (Proof Key for Code Exchange) is an enhancement to the OAuth 2.0 authorization code flow, specifically designed to improve security for public clients such as mobile apps or single-page applications (SPAs), which can’t securely store client secrets. PKCE ensures that the authorization code exchanged during OAuth2 authentication can only be used by the same client that initiated the request. )
• OAuth2: The RefreshAccessToken method will by default omit the scope parameter rather than send an scope=”” param.  Technically, servers should treat both the same, but some servers choke on the empty scope.  (When the scope is missing or empty for an OAuth2 refresh, the new token will use the same scopes as the original token.)
• SFTP: Added the GetSyncedFiles method.
• Ftp2: Also added the GetSyncedFiles method.
• Zip: Fixed: When unzipping on Windows, filenames beginning with “.” would unzip with the “.” removed.  Thus, “.xyz”  would become the file named “xyz”.
• Zip: Fixed: The UncompressedLengthStr and CompressedLengthStr were missing from the .NET API.
• Zip: Added the AppendSb method.
• Zip: Added the MinDate and MaxDate properties.
• Zip: The following methods and properties are now deprecated:
  AppendBase64
  AppendCompressed
  AddEmbedded
  AppendHex
  AppendMultiple
  OpenMyEmbedded
  RemoveEmbedded
  ReplaceEmbedded
  TextFlag (property)
• PDF: Fixed: Did not recognize some occurrences of embedded files contained within a PDF.
• PDF: Fixed case where LoadFile fails with pdfParseError: 3221
• PDF: Fixed visual appearance for signatures in landscape oriented PDFs.
• OCSP: Fixed a problem having to do with sending OCSP requests for ECDSA based certificates.
• CertStore:  Fixed: The LoadPfxFile method would result in 2 entries per certificate being listed within the CertStore object.
• Email: Added the GetRelatedHeader method.
• Email: Added the ability to provide a list of email addresses in the ReplyTo property.
• JsonObject/JsonArray: Fixed a problem having to do with emoji chars JSON encoded with high + low surrogate pairs in hex.  When returning utf-8, we fixed so the single utf-8 char is returned rather than 2 utf-8 surrogate pair “chars”.
• JsonObject: Added the Sort method.
• Jwt: Added support for the PS256, PS384, PS512 algorithms.
• DNS: Regarding MX lookups, Chilkat now correctly follows the rule stated in RFC5321, Section 5: The lookup first attempts to locate an MX record associated with the name.  If a CNAME record is found, the resulting name is processed as if it were the initial name.   If an empty list of MXs is returned, the address is treated as if it was associated with an implicit MX RR, with a preference of 0, pointing to that host.
• PKCS7:  Added the ability to create and verify AES-GCM authEnvelopedData.  This applies to anything doing CMS/PKCS7 encryption, but was needed for S/MIME email.
• Global: Added the AutoQbDecode property.  One should avoid putting non-usascii literal strings in source code.  Instead, you can insert Q or B encoded literal strings and pass them to any Chilkat function.  If AutoQbDecode is true, then Chilkat will automatically decode the Q/B encoded string that is passed in.
• Perl 5.40 is now supported.
• Go Programming Language: Fixed Chilkat to always return utf-8 strings.
• .NET Framework: Added a download for the .NET 4.8 ARM64.
• General: Internally, when binding a socket for listening (such as listening for the OAuth2 callback), Chilkat now binds to 127.0.0.1 instead of 0.0.0.0.