Release notes for 200408:

The following changes were made to the IPfonix, Inc. 
PacketCable/CableHome Key Distribution Center for this release.

Repeating two changes from release 180531:

0a. Because of lack of interest, this release no longer includes an 
executable for Solaris. If you need a Solaris executable, please 
contact us.

0b. Because of lack of interest, this release no longer includes 
documentation for a CableHome-only KDC. Licenses are still availble 
for combined PacketCable/CableHome operation (as well as 
PacketCable-only operation), but running the KDC in CableHome-only 
mode is no longer supported. If you need to support a CableHome-only 
network, please contact us.  

1. Various improvements to error messages, especially regarding 
certificates and chaining, and failures at startup due to errors 
processing a license file.

2. UTF-8 encoding of strings is now permitted in all SubjectName and 
IssuerName fields in certificates that in the past have been encoded 
as printable strings. If the same information is encoded in more than 
one location, even in different certificates, the encoding is 
permitted to be different in the different strings.

3. Bad MTA Device certificates are now logged in toto to the log file.

4. Bad MTA Manufacturer certificates are now logged in toto to the log 
file.

5. Added more detail to log when encountering bad device certs whose 
first field in Subject Name isn't C [due to CableLabs' erroneous 
issuing of some bad certificates that fail this (required) test]. 
Note: if a user sees this failure, the user needs to contact the 
issuer of the certificate and obtain replacement certificates that 
meet the PacketCable requirements. REQ 2985 and Table 33 together 
require that the first field MUST be C. And this isn't the place to go 
into detail, but there IS a reason for that this requirement is in the 
specification.

6. Added "allowed provisioning server fqdns" command to limit the 
usable provisioning servers to a pre-defined list. See the User Guide 
for more detaiils.

7. [linux] The Linux executables for this release have been built on 
debian 8 (Jessie), which, as of the date of this release, is the 
"oldoldstable" release of debian.