Stream 2.1.1 release notes

Here are the release notes for EverTrust Stream v2.1.1, released on 2025-06-17.

For the installation and upgrade procedure, please refer to the Installation and Upgrade guide.

The Akka framework has been replaced by Pekko. It can lead to configuration changes if you manually manage the Stream configuration.

1. New Features

[None]

[STM-1214] - Added support for the SLH DSA PQC algorithm
[STM-1174] - S3 RL storages now include an option to specify the expected checksum verification
[STM-1205] - Revoking an expired certificate is now treated as a successful operation via the API
[STM-1208] - Added a default configuration for Mongo lease settings

[STM-1229] - Fixed an issue that caused crashes when interacting with the PKCS#11 library
[STM-1233] - Fixed a bug where NTP requests failed when maxOffset was set and a 0 ms offset was returned
[STM-1207] - lifecycle:* permissions are now correctly migrated
[STM-1211] - Aligned signature algorithm format with industry standards when signing RSA certificates using PKCS#11
[STM-1227] - stream-upgrade now properly ignores commented lines in the /etc/default file
[STM-1231] - Properly handles migration of the Mongo URI during RPM upgrades
[STM-1175] - Fixed missing fields during SSH CA creation
[STM-1190] - Fixed missing fields when editing templates

[STM-1302] - RSA-1024 keys are no longer available for software keystores
[STM-1320] - After migrating to 2.1.x some CRL can no longer be downloaded, a workaround is available here

[None]