...

The Direct Certificate Discovery Tool (DCDT or Tool) v3.0 1 is an entirely a new release that contains many improvements for the end user. For example, the installation and setup of DCDT has been vastly simplified. DCDT is no longer dependent on the Direct Java RI for underlying Direct functionality. Setup of DCDT's certificates is now fully automated and invisible to the end user.In fact, the entire DCDT setup now only requires two values – its domain and IP address. The new DCDT release also provides much more detailed feedback to the user whenever a test is run. Details of each step of every test case are displayed to the user, and it is easy to pinpoint the problem when a test fails.to meet version 1.2 of the Applicability Statement for Secure Health Transport. 

New Features in v3.

...

1

There are two new Discovery test cases in DCDT, D17 and D18. 

Test case D17 checks a system's ability to utilize Certificate Revocation List information in order to check if a certificate has been revoked.

Test case D18 checks a system's ability to utilize Authority Information Access extensions in order to verify a certificate's chain of trust

Independence from Java RI

DCDT is no longer dependent on the Direct Java RI. Previously, a full Java RI installation was required to provide underlying Direct functionality to DCDT, such as LDAP, DNS, email, and cryptography. DCDT now natively handles this functionality, so the installation process is much simpler.

Automatic Setup

DCDT now automatically configures itself via a web-accessible admin console. Two values – domain and IP address – are all that are needed to configure DCDT. When these values are set in the admin console, DCDT's certificates and internal DNS and LDAP servers are automatically reconfigured without any need to even restart the application.

Improved Feedback

DCDT now provides detailed feedback to the user for every step of every test case. Whether a test passes or fails, all parameters and results are displayed to the user. Subsequent results are added to the web page as test cases are run, and previous results are minimized in accordion-like fashion.

Other Improvements

Error Handling

Errors of all types are now surfaced in a consistent and informative way to the user.

Input Validation

All inputs into DCDT are validated to ensure that they meet basic syntax and other requirement. Email addresses are verified to both be syntactically correct email addresses and to have valid MX records for their domain. IP addresses are validated to ensure numbers are in the proper range.