1.6.0 (2024-10-08)
- add mTLS support and ensure backward compatibility (87fe565)
- provider: patch CA URL handling in LetsEncrypt Tune function (d8f697c)
- provider: patch type assertion in LetsEncrypt.Tune method (f7988aa)
1.5.1 (2024-07-02)
- security: patch for a session middleware injection vulnerability in gofiber (CVE-2024-38513) (1aaa0ce)
1.5.0 (2024-06-12)
- docs: introduce a documentation for the configuration yaml (b371587)
- deps: manually bump the baseline - security patches (95a05ca)
1.4.1 (2024-03-08)
- storage: missing validation for s3 bucket names (b5a0dcc)
1.4.0 (2024-02-07)
- ci: introduce a conventional commits linter (e851834)
- provider: trim whitespaces in SAN fields [letsencrypt] (11575d9)
1.3.0 (2024-01-08)
- test: switch the path for unit testing to an absolute one (65492c5)
1.2.0 (2024-01-05)
- ci: generate release from github action and update changelog (e19e433)
- ci: introduce an automatic dependency managament based on dependabot (ae4d919)
- ci: action release now it's ready to run (4e1bd37)
1.1.1 (2023-12-19)
- ci: remove platform to test publish (bda6273)
1.1.0 (2023-12-19)
- General Project Maintenance: dependency updates and test fixes
- test: remove the expired embedded x509 keypair (5fe8366)
- ci: add platforms also in tests (c62354c)
1.0.8 (2023-12-19)
- ci: try new publish release (a6073f9)
1.0.7 (2023-12-19)
- ci: remove new tag env (22f84dc)
1.0.6 (2023-12-19)
- server: add keypair download button (be81761)
- ensure SANs is filled with Subject CN too (63012c1)
1.0.4 (2022-10-11)
1.0.3 (2022-10-11)
- pki: add support for parsing RSA-encoded keys (56e0ec8)
1.0.2 (2022-10-11)
1.0.1 (2022-10-10)
- server: enable certificate autorenew on get (96dcd46)
- web: do not include session flows in non-acl mode (e18e572)
1.0.0 (2022-10-07)
- acl: authorization-based API access plus token based web session (3fb84c3)
- acl: implement target-based authorization scheme (9a69969)
- acl: unprotect on empty ACLs (9f61dd8)
- add certificate revocation at the provider level (j#IS-3039) (0423171), closes j#IS-3039
- add not-logged health endpoint (bc45cb5)
- add support for querying same-type CAs (76216dc)
- docker: switch to entrypoint from cmd (757bafe)
- gen: add support for stdout/compress CA generation (9c11195)
- gen: replace
compressflag withencodeand add json support (6f41950) - letsencrypt: first dump (af36645)
- local: add support for certificates alt names (deb9677)
- local: add support for custom key algorithm (ed70157)
- merge alt names into existing certificates (j#IS-2865) (a35b89d), closes j#IS-2865
- pki: add support for parsing EC-encoded keys (66d98f1)
- pki: switch to ECDSA with SHA-256 (5678544)
- rework config parsing to make it stateful (j#IS-2874) (be04f9f), closes j#IS-2874
- sentry: first dump (0af58a6)
- server: add certificate show endpoint (959b4a3)
- server: add compression middleware (c2d7c2d)
- server: expose endpoint for certificates enumeration (j#IS-2824) (c43b530), closes j#IS-2824
- server: support JSON encoding as an option (02ad193)
- storage: add support for S3 (5f1bcd9)
- storage: treat assets as unicum (6c70f2e)
- webgui: first dump (ee3df98)
- ca: properly bundle CA certificate (e839bfd)
- debrand hardcoded certificates defaults (j#IS-2853) (cc88f5a), closes j#IS-2853
- docker: copy static assets (d7aaaf9)
- gen: use first name as CN (17f0fae)
- gen: use unix-like flag names (c2560ac)
- letsencrypt: proxy CA certificate retrieval (cbfe75e)
- local: check suffix match on CN too (0252d14)
- pki: properly check CN as domain name (26d7708)
- pki: reduce default crt duration to 397 days (j#IS-2964) (36ff40b), closes j#IS-2964
- pki: support 4+ level domain names (1eb80be)
- pki: use default algo constant in request generator (996eb4c)
- pki: use url-compliant variable names for crt parameters (e2a763f)
- s3: do not wait for bucket (3d54fee)
- s3: rework S3 logic (9becb58)
- server: API already ACL-protected at the handler-level (038cdf6)
- server: prefer using c.JSON where returning a JSON-encoded responses (j#IS-2863) (ab7fe23), closes j#IS-2863
- server: use InternalServerError instead of BadRequest when suitable (j#IS-2864) (ebb3ba1), closes j#IS-2864
- zstdlogger: restore correct default output fd (f30ab18)
0.1.0 (2022-07-15)
- add certificates storing/returning to/from storage (62b2ecd)
- add support for certificates removal (c6fb40c)
- add support for docker (0c91463)
- expose configurable providers and add certficate parsing (d47d358)
- expose endpoint for CA certificate (624ff6d)
- get a basic functional crt/key pair generation logic (5834028)
- server: add support for certificates creation plus ECDSA algo (95a4fd4)