Fixed SFTP Server handling for keys that do not use the RSA algorithm.
Fixed directory formatting handling in SFTP for download operations.
Fixed remote file name formatting in SFTP, FTP and Object Storage communications.
Added Windows resource information to the executable file properties.
Version 8.1.3 (released March 2026)
Fixed an issue where console message timestamps did not display timezone information.
Fixed an issue with first-access identification for new users.
Fixed FTP client behavior that removed files from the remote server even when the delete option was disabled.
Fixed a file upload failure via SFTP Client to AWS Transfer.
Fixed an issue where the application did not terminate correctly when using CTRL-C or the exit command in console mode.
Fixed a memory error when executing CTRL-C.
Implemented FTP/FTPS communication module.
Integrated the FTP/FTPS module into STCP DirectLink.
Implemented OpenTelemetry integration with support for configuring traces, metrics and logs at application startup.
Implemented 2FA authentication for the SFTP protocol.
Implemented MFA handling in the SFTP Server service.
Version 8.0.10 (released December 2025)
Fixed authentication behavior to block access when the domain is not configured in LDAP, preventing improper fallback to database authentication.
Fixed login failure when using LDAP authentication.
Version 8.0.9 (released October 2025)
Fixed an issue causing application crashes in scenarios with multiple SFTP communications.
Fixed an issue causing application crashes on simultaneous access to the transfer control map.
Fixed an issue with email link delivery in portal transfers (upload).
Implemented an option to store debug events in a file, replacing console or Event Viewer output.
Implemented a configuration option to enable or disable bucket existence verification in S3 communication.
Implemented a configuration option to remove files from the input folder on API reception (upload) when the destination user is specified in implicit routing.
Version 8.0.0 (released June 2025)
Fixed a session lock issue that returned “locked” status even when sessions were available.
Fixed connection mode handling in the AS2 protocol.
Implemented user configuration parameters for the AS2 protocol.
Implemented handling of BER-encoded messages.
Implemented asynchronous MDN support including sending, receiving and error handling.
Implemented MIC handling in AS2 messages (encrypted and compressed reception).
Implemented control of supported algorithms for signing, encryption and MIC calculation in AS2.
Implemented TLS certificate validation (client and server) for AS2 connections.
Implemented reading of user settings when receiving AS2 messages.
Implemented parameters for defining required options in document reception (signature, encryption and compression).
Implemented custom header sending per connection and per file type in AS2.
Implemented local address and proxy handling for outbound connections.
Implemented notification events for session start/end, document reception start/end and log events.
Implemented HTTP/HTTPS request logging with response status.
Implemented timeout handling for client and server connections.
Implemented full support for receiving files in AS2, covering different encryption, signature and MDN scenarios.
Integrated AS2 Server and AS2 Client modules into the main core.
Adjusted AS2 Server error log messages.
Changed the signing parameter from SIGN to SIGN_MULTIPART in send settings and document requirement configurations.
Version 7.1.8 (released May 2025)
Fixed SecureLink download notification message that incorrectly reported 0 days to expiration.
Fixed handling of video-type messages in the WhatsApp webhook interface.
Fixed a formatting issue in the command to send data for recording in the sandbox or keystore area when the content is not text.
Fixed WhatsApp message sending in SecureLink mode with PIN.
Implemented a supervision interface command to upload certificates and keys.
Implemented a supervision interface command to list certificates and keys.
Implemented a supervision interface command to list sandbox areas.
Implemented a supervision interface command to remove files from sandbox areas.
Implemented a supervision interface command to remove certificates and keys.
Implemented a supervision interface command to add files to sandbox areas.
Implemented a parameter for configuring the keystore storage directory.
Implemented location sending via WhatsApp.
Implemented log messages for errors in sending templates via WhatsApp webhook.
Implemented recording of the operator name in logs for sandbox and keystore operations.
Implemented recording of the phone number/source ID in messages sent via SMS/WhatsApp.
Implemented logs for file addition and removal operations in the transfer sandbox.
Implemented logs for file addition and removal operations in the keystore.
Implemented keystore area (certs/keys) creation in the installation script.
Implemented regular expression filtering in keystore listings.
Adjusted SFTP message codes from MSG0149 to MSG0180 and from MSG0151 to MSG0181.
Version 7.1.5 (released April 2025)
Fixed an issue with message MSG0035 that displayed an extra parameter in its output.
Version 7.1.4 (released April 2025)
Fixed an issue causing application startup failure on Windows.
Fixed an issue with directory creation for transfer sandboxes.
Fixed an issue with upload and download report display.
Fixed an issue with SFTP communication through proxies that use special characters.
Fixed hash information sent by the client.
Implemented automatic folder creation on first access.
Implemented an error message for destination user not found.
Implemented file hash calculation for log recording.
Implemented password change exclusively via portal.
Implemented a PIN-free download page integrated with WhatsApp.
Implemented a WhatsApp transfer client.
Implemented MFA and Secure Link notifications via WhatsApp using Zendesk and META APIs.
Improved connection for users configured as “sender” only.
Improvements to SecureLink transfer handling.
Updated database access libraries.
Defined a default algorithm for key authentication, avoiding authentication errors.
Adjustments in control message generation for outbound connections.
Created a parameter for LINK directory configuration.
Created a WhatsApp transfer hub using the META API.
Added a mobile phone number field to the user configuration.
Implemented local address configuration in the SFTP Client call.
Version 6.9.10 (released October 2024)
Fixed an issue when processing parameters with double and single quotes, ensuring correct command-line parsing.
Improved the regular expression for command-line parsing.
Version 6.9.9 (released October 2024)
Fixed the name of the control field LOGIN_TOTP_SECRET to LOGIN_OTP_SECRET in the AUTHENTICATIONS table of the STCP Gemini configuration database.
Fixed an issue with the TCPSSLCipher parameter that prevented connection to the server when using the SFTP protocol.
Fixed a reception failure via SFTP Client using DirectLink on Linux, where the connection was terminated when a file was blocked by the file filter.
Improved handling of whitespace in authorized keys.
Fixed an issue with password-protected keys in the API interface.
Fixed the certificate display issue in TLS handshake when testing supervision network connectivity.
Version 6.9.5 (released August 2024)
Fixed a log message issue in the API service (HTTP/HTTPS) that did not display the connection type.
Improved argon2id string formatting for compatibility with STCP Gemini.
Version 6.9.3 (released June 2024)
Fixed an issue with the SFTP transfer filter using an external file (whitelist and blacklist).
Fixed the display of the error code for the “Blocked by filter” message.
Improved the function to mask sensitive information in logs.
Improved structured log message structure.
Improved the key derivation algorithm following OWASP recommendations in validation token generation.
Implemented parameters for LDAP authentication control.
Implemented support for the SSO SAML2 authentication protocol.
Version 6.5.16 (released April 2024)
Fixed an issue that generated a validation error on file upload (API) when more than one email was used with whitespace.
Version 6.5.12 (released January 2024)
Fixed SSH Terrapin Truncation Weakness vulnerability (CVE-2023-48795) in the SFTP interface.
Implemented the ability to configure encryption and MAC algorithms in the SFTP interface.
Version 6.5.8 (released September 2023)
Fixed SSH Weak MAC Algorithms vulnerability in the SFTP interface.
Fixed an issue that hid the submit button when form options were disabled on the portal.
Version 6.5.7 (released August 2023)
Implemented HTTP/S request validation that checks whether the configured host and URI match (Unvalidated Redirection).
Improved host handling in the static directory.
Fixed an issue with SecureLink becoming invalid when the timezone was referenced with +XXX.
Version 6.5.6 (released August 2023)
Fixed an issue generating a 400 error when sending SecureLink.
Implemented AWS S3 bucket authentication via RolesAnywhere.
Fixed an AWS S3 connection error message that showed ClientAzBlobConnection instead of ClientBlobConnection.
Fixed an issue with the endpoint parameter on an AWS S3 bucket that caused access problems when using a private S3.
Implemented backup in the blob client interface.
Improved handling of scheduling parameters when a schedule is awaiting execution.
Version 6.5.4 (released April 2023)
Fixed an issue causing the application to crash when run in noservice mode (Windows).
Improved synchronization of access to STCP configuration files on Windows.
Fixed the configuration parameter name MaxReadirEntries to MaxReadDirEntries.
Fixed an issue where a file was created even when a reception filter blocked reception (SFTP).
Improved file lock control (STCPGemini standard).
Implemented in-memory lock control.
Improved handling of URL query string escaping in the SSO logout interface.
Improved handling of the OSType operating system type that caused issues on Windows.
Improved the scheduling process when schedule parameters are changed while a schedule is running.
Fixed the date and interval scheduling process that produced errors when the day of the week was not set (Windows only).
Version 6.3.0 (released March 2023)
Implemented native support for Oracle Cloud Bucket (object_storage).
Implemented supervision command for reading user information.
Implemented monitoring interface in the STCPGemini standard.
Created configuration parameters (config.json) for ApplDir and ApplLockDir.
Created configuration parameter (config.json) ApplPidFile.
Renamed the configuration parameter (config.json) AppSecret to ApplSecret.
Support for accessing keys (secrets) in the OCI KMS vault (Secrets Manager).
Support for accessing keys (secrets) in the Azure KMS vault (Key Vault).
Support for accessing keys (secrets) in the AWS KMS vault (Secrets Manager).
Support for accessing keys (secrets) in the GCP KMS vault (Secrets Manager).
Version 5.0.1 (released November 2022)
Fixed handling of the idCodeProfile parameter that produced an error when blank in the user configuration (Windows).
Adjustments to the token expiration message for PIN reading.
Version 5.0.0 (released October 2022)
Fixed an issue where transfer did not start when scheduling was set to Transmission with reception (Windows).
Fixed an issue with the log message recording for transfer end via API.
Implemented support for the Azure Blob storage service module.
Version 4.0.4 (released October 2022)
Fixed the log message at transfer end with API error that was not being recorded.
Fixed the file name in SFTP that contained two directory separators (e.g. D:\STCPODT\DADOS/USER1/ENTRADA/TESTE.TXT).
Layout improvements and adjustments for Mobile [Flutter].
Fixed notification templates/pages that were not being accessed correctly.
Improved the return message display for error events without problem details. For more detail, the STCP Admin portal should be accessed to identify the cause of the error [PENTEST].
Obfuscation of JavaScript files [PENTEST].
Fixed an issue causing the application to crash when global and user file types were not found.
Fixed external command execution parameters.
Version 3.7.6 (released October 2022)
Layout improvements and adjustments for Mobile [Flutter].
Fixed notification templates/pages that were not being accessed correctly.
Fixed an issue causing the application to crash when global and user file types were not found.