Stormshield KMaaS 4.4.0 fixes

The Stormshield KMaaS now displays an error at startup if the private key format entered in the migration section of the configuration file is not in base 64 format. This check prevents migration operations from failing afterwards.


The reception log for an HTTP request is now displayed, even if the body format of the request is incorrect. This correction only concerns the log in the new V2 format.


The Stormshield KMaaS now displays an error at startup when the authorization section of the configuration file is empty.


The following deprecated cryptographic suites are no longer supported to connect to the KMS via KMIP.

  • TLS_RSA_WITH_AES_256_CBC_SHA256(0x003d)

  • TLS_RSA_WITH_AES_256_CBC_SHA(0x0035)

  • TLS_RSA_WITH_AES_256_GCM_SHA384(0x009d)

  • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384(0xc02c)

  • TLS_RSA_WITH_AES_128_CBC_SHA256(0x003c)