What's new in KeyBox 2.83.01
May 18, 2015
- Fixed so theme settings is shown for LDAP users. Updated Struts 2 to latest due to vulnerability: Wrong excludeParams overrides those defined in DefaultExcludedPatternsChecker
New in KeyBox 2.83.00 (Apr 25, 2015)
- Fixed issues and enhanced VT key mappings. Small UI/UX fixes and enhancements. Updated jquery, bootstrap, and other dependencies.
New in KeyBox 2.82.00 (Mar 14, 2015)
- Added option to connect to any host and to create duplicate sessions from open terminals. Added theme and terminal color configuration. Also, moved password regular expressions to configuration properties.
New in KeyBox 2.80.00 (Mar 4, 2015)
- Added LDAP integration support via the Java Authentication and Authorization Service (JAAS) . If enabled, administrators will be added as they are authenticated and profiles of systems may be assigned by full-privileged users. To enable see https://github.com/skavanagh/KeyBox#external-authentication
New in KeyBox 2.76.00 (Feb 26, 2015)
- Upgraded jetty to latest version (9.2.9.v20150224) due to JetLeak Vulnerability: Remote Leakage of Shared Buffers in Jetty Web Server [CVE-2015-2080].
New in KeyBox 2.75.00 (Feb 14, 2015)
- Updated to enforce strong passwords. Modified so SSH keys are generated by default when managing keys. Users are forced to set a strong passphrase and download the private key.
New in KeyBox 2.73.02 (Feb 7, 2015)
- Added check to prevent current logged in user from being deleted. And validation to prevent duplicate profile keys.
New in KeyBox 2.73.01 (Jan 26, 2015)
- Upgraded h2 database. Swapped default manage keys page for "Full Access" users. Some cosmetic UI and text changes.
New in KeyBox 2.73.00 (Jan 23, 2015)
- Added ability for "Full Access" users to disable any user's public SSH key in order to force rotation.
- Disabling a key removes it from all host systems and additional SSH keys with the same fingerprint can no longer be set.
- Added fingerprint and key type. Updated project dependencies.
New in KeyBox 2.70.01 (Jan 19, 2015)
- Added terminal resize capabilities. Double-clicking will set the terminal to the original size. Fixed so all form submits happen when enter/return is pressed.
New in KeyBox 2.70.00 (Jan 14, 2015)
- Added terminal resize capabilities. Double-clicking will set the terminal to the original size. Fixed so all form submits happen when enter/return is pressed.
New in KeyBox 2.60.00 (Dec 22, 2014)
- Modifed to allow users to add their own public SSH keys (closes #23). Added task to refresh keys on systems based on interval defined in properties. Modified to use a generic auth fail message. Fixed close buttons for dialogs on terminal screen. Updated project dependencies.
New in KeyBox 2.50.02 (Dec 15, 2014)
- Updated project dependencies. Fixed cosmetic issues.
New in KeyBox 2.50.01 (Nov 27, 2014)
- Fixed missing jquery-ui include on audit sessions screen.
New in KeyBox 2.50.00 (Nov 24, 2014)
- Added two-factor authentication that works with FreeOTP or Google Authenticator. Modified to use bootstrap dialogs and added salts to user password hashes.
New in KeyBox 2.17.01 (Nov 14, 2014)
- Fixed issues with terminal focus, cursor blinks, and missing icons
New in KeyBox 2.17.00 (Nov 11, 2014)
- Changed pty type to xterm. Added support for term colors and updated project dependencies.
New in KeyBox 2.16.00 (Oct 6, 2014)
- Added profile filter to select systems screen. Also, added user and system filter to select audit screen.
New in KeyBox 2.15.27 (Sep 9, 2014)
- Fixed Authentication Filter to check context path.
New in KeyBox 2.15.26 (Aug 28, 2014)
- Fixed websocket path to support different contexts.
New in KeyBox 2.15.25 (Aug 21, 2014)
- Modified DEL key-mapping to send \033[3~ and fixed to append application key to authorized key file. (ie. fixes issues #14 and #15).
New in KeyBox 2.15.20 (Aug 18, 2014)
- Fixes websocket timeout and the delete key mapping. Changed to prevent browser default when using unix-ctrl commands.
New in KeyBox 2.15.10 (Aug 5, 2014)
- Updated project dependences. Made cosmetic changes/fixes.
New in KeyBox 2.15.00 (Jul 25, 2014)
- Added cut & paste from terminal windows.
- Updated UI for terminal windows.
New in KeyBox 2.12.00 (Jul 1, 2014)
- Changed to use JSch for key pair generation.
- Updated/Removed project dependencies.
New in KeyBox 2.11.05 (Jun 14, 2014)
- Fixed high CPU utilization due to busy loop.
- Simplified how custom SSH keys are defined.
- Updated project dependencies.
New in KeyBox 2.11.00 (May 13, 2014)
- Modified to allow users to have the option to specify the SSH key pair used by the application instead of auto-generating upon startup.
- Updated project dependencies.
New in KeyBox 2.10.03 (May 2, 2014)
- Upgraded all project dependencies including Struts2 to address ClassLoader vulnerabilities (CVE-2014-0112, CVE-2014-0113).
New in KeyBox 2.10.02 (Mar 27, 2014)
- Fixed issue preventing connection error messages from displaying when last term connection fails.
New in KeyBox 2.10.01 (Mar 11, 2014)
- Upgraded project dependencies
- Took out unused javascript
New in KeyBox 2.10.00 (Mar 1, 2014)
- Improved terminal performance.
- Turned session audits off by default.
- Added regular expression sort to move matched terminals to top.
New in KeyBox 2.06.00 (Feb 20, 2014)
- Added terminal disconnect option when dragged to navbar.
New in KeyBox 2.05.02 (Feb 18, 2014)
- Added access check when users open SSH sessions
New in KeyBox 2.05.01 (Feb 18, 2014)
- Mapped js key event 8 to DEL instead of BS
- Made terminal refresh rate configurablea
New in KeyBox 2.05.00 (Feb 15, 2014)
- Modified to use Bootstrap UI/UX templates
- Updated project dependencies
New in KeyBox 2.02.02 (Jan 21, 2014)
- Fixed issue that prevented terminal output from displaying when keypress / keydown events were called at the same time as the output event.
New in KeyBox 2.02.01 (Jan 16, 2014)
- To keep CPU utilization in check, modified web sockets to display output every 500ms. Updated project dependencies.
New in KeyBox 2.02.00 (Jan 9, 2014)
- Modified to use WebSockets in place of AJAX polling.
New in KeyBox 2.01.00 (Jan 7, 2014)
- Modified so that public keys can be distributed after they have been defined.
- Added DB connection pooling.
- Upgraded project dependencies.
New in KeyBox 2.00.00 (Nov 25, 2013)
- Modified users and profiles so that additional logins can be created for the web-console.
- Modified to support multiple simultaneous users.
- Modified so application private key is kept in DB instead of filesystem.
- Added public SSH key management.
- Added auditing of SSH sessions.
- Added copy and paste.
- Fixed issue with IE caching.
- Updated project dependencies.
New in KeyBox 1.08.50 (Jul 30, 2013)
- Migrated from SQLite to an H2 embedded database.
- Upgraded jetty to v8.1.12
New in KeyBox 1.08.40 (Jul 16, 2013)
- Added tab fix - so tab then enter does not cause page to reload
New in KeyBox 1.08.30 (Jul 16, 2013)
- Added CMD-Click or CTRL-Click to select multiple individual terminals.
- Fixed concurrency issues with collections used to track ssh connections.
New in KeyBox 1.08.20 (Jul 16, 2013)
- Modified js so terminals are draggable.
- Fixed display issues with script dialog
- Made composite terminal selection simpler