Stream 2.1.0 release notes

Here are the release notes for EverTrust Stream v2.1.0, released on 2025-04-30.

For the installation and upgrade procedure, please refer to the Installation and Upgrade guide.

The Akka framework has been replaced by Pekko. It can lead to configuration changes if you manually manage the Stream configuration.

1. New Features

  • [STM-772] - Added support for MLDSA and hybrid certificates (Catalyst / Chimera / AltPubKey)

  • [STM-378] - Introduced support for SSH certificates

  • [STM-919] - Implemented keystore health checks. Status can now be used to influence readiness in HA environments. Learn more …​

2. Enhancements

  • [STM-896] - Reorganized technical configuration parameters for improved structure and clarity. Learn more …​

  • [STM-842] - A description can now be added on Certificate Authorities

  • [STM-890] - Enabled notifications on CRL Sync Error

  • [STM-1053] - Added support for the Title RDN attribute

  • [STM-782] - Changed database driver. Stream Mongo URI can now be used with mongosh.

Some connection options in Mongo URI are no longer available: keyStore, keyStorePassword, keyStoreType. If these are used, please contact the EVERTRUST support for migration steps.

3. Bug Fixes

  • [STM-592] - Available dynamic attributes on RL Storages are now properly displayed

  • [STM-893] - Stream RL Storage now correctly updates nextRefresh when using lazy CRL generation

  • [STM-921] - Fixed an issue where DN elements had to be capitalized in notification dynamic attributes and RL storage configurations

  • [STM-1131] - Resolved a bug that prevented authorizations containing a / from opening in the Web UI

  • [STM-1154] - Fixed an issue where DN elements with trailing spaces could not be enrolled correctly

4. Known Defects

[None]

5. API Modifications

  • [STM-772] - The description field in a PrivateKey object (returned from keystore list operations) is now a string enum instead of an object