Update changelog for v0.13.0
Update changelog
@@ -10,6 +10,26 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
[Unreleased][Unreleased_log]
--------------
+[v0.13.0][v0.13.0_log]
+--------------
+
+### Added
+- OpenSSL version 1.1.1 libraries are now available for an enclave to use. See the [attested_tls sample](samples/attested_tls#build-and-run) for an example of building enclaves with OpenSSL.
+- Enabled oe_verify_evidence() with a NULL format id to verify the legacy report generated by oe_get_report().
+- Added the following SGX attestation claims from oe_verify_evidence():
+ - OE_CLAIM_SGX_PF_GP_EXINFO_ENABLED
+ - OE_CLAIM_SGX_ISV_EXTENDED_PRODUCT_ID
+ - OE_CLAIM_SGX_IS_MODE64BIT
+ - OE_CLAIM_SGX_HAS_PROVISION_KEY
+ - OE_CLAIM_SGX_HAS_EINITTOKEN_KEY
+ - OE_CLAIM_SGX_USES_KSS
+ - OE_CLAIM_SGX_CONFIG_ID
+ - OE_CLAIM_SGX_CONFIG_SVN
+ - OE_CLAIM_SGX_ISV_FAMILY_ID
+- Added the following fields for SGX KSS (Key Separation and Sharing) support:
+ - FamilyID
+ - ExtendedProductID
+
## Breaking Changes
- liboecryptombed is now called liboecryptombedtls and will no longer be automatically included as a link dependency when linking liboeenclave in CMake.
- The `openenclave-config.cmake` and `openenclave-lvi-mitigation-config.cmake` will not specify the renamed liboecryptombedtls as a `PUBLIC` link requirement for liboeenclave.
@@ -24,6 +44,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
The command `objdump -t enclave-filename | grep oe_SYS_` can be used to figure out the list of syscalls invoked by
code within the enclave. While most syscall implementations make OCALLs, some may be implemented entirely within
the enclave or may be noops (e.g SYS_futex).
+- Changed the attestation evidence extension OIDs for certificates generated by the following APIs. Verifiers must call oe_verify_attestation_certificate APIs from v.0.11.0 or above.
+ - oe_generate_attestation_certificate(): "1.3.6.1.4.1.311.105.1"
+ - oe_get_attestation_certificate_with_evidnece(): "1.3.6.1.4.1.311.105.2"
[v0.12.0][v0.12.0_log]
--------------
@@ -535,7 +558,9 @@ as listed below.
Initial private preview release, no longer supported.
-[Unreleased_log]:https://github.com/openenclave/openenclave/compare/v0.12.0...HEAD
+[Unreleased_log]:https://github.com/openenclave/openenclave/compare/v0.13.0...HEAD
+
+[v0.13.0_log]:https://github.com/openenclave/openenclave/compare/v0.12.0...v0.13.0
[v0.12.0_log]:https://github.com/openenclave/openenclave/compare/v0.11.0...v0.12.0
