I have released qpdf version 9.1.rc1, a release candidate for 9.1.0. For a
full list of changes, please see the release notes
<http://qpdf.sourceforge.net/files/qpdf-manual.html#ref.release-notes>.
*If you package qpdf for an OS distribution, there are changes that matter
to you. Please read this carefully.*
This version of qpdf requires a C++-11 compiler. Additionally, the crypto
provider can be selected at build time and run time, and a gnutls-based
crypto provider is included. If possible, you should have gnutls available
when build qpdf so that you can use the gnutls provider. However, if gnutls
is not an option in your environment, qpdf will work as it always has using
the native crypto provider. Some source files have been added or renamed,
which only matters if you are doing your own build with qpdf's Makefiles.
The manual has details on these changes.
My recommendation for packagers is that, if you have gnutls available, you
add the configure options "--enable-crypto-gnutls
--disable-implicit-crypto" to your configure invocation. This will build
qpdf with only the gnutls crypto provider and omit the native provider
entirely. I am building the packages in this way for Debian, and
RedHat/Fedora are also going to do this. For the foreseeable future, I have
no intention of removing qpdf's native crypto, but this could change for
either of two reasons: I need to add some additional crypto beyond what is
already there (e.g. to support digital signature), or a problem is
discovered in the native crypto. If gnutls is not to your liking, I believe
it would be reasonably straightforward to create crypto providers using
openssl, gcrypt, or nettle, and I would consider adding one or more of
these if necessary.
In addition to the configurable crypto providers, qpdf 9.1 adds some new
methods to facilitate manipulation of the PDF file by file offset, useful
for tools that may want to manipulate the file in ways that go beyond the
basic semantics of PDF objects. These changes were contributed by a user
who has created a digital signature tool for PDF files.
This release candidate is provided primarily for people who want to test
their build or packaging of qpdf with the new crypto providers. A 9.1.0
release will follow in about a week if all goes well. I have already
noticed that I neglected to update the manual to describe the new third
party dependencies and C++-11 requirement, though these changes are noted
in the README.
I'll plan on giving this RC about a week to bake in and will plan on
releasing rc2 or 9.1.0 next week, depending on what happens this week.
--Jay
|