CHANGELOG

Changelog

v0.17

New

  • Identity.get_pkix_cd_trust_chain returns a structured trust chain. [Ash Wilson]

  • PKIX-CD authentication supports multi-tier PKI hierarchy. [Ash Wilson]

Changes

  • Refactor, breaking changes. Read the docs before pinning to this release. [Ash Wilson]

  • Resolver override available or applied throughout. [Ash Wilson]

    Close #70

Other

v0.16 (2021-06-08)

New

  • Establish compatibility with Python 3.6, 3.7, and 3.8. [Ash Wilson]

v0.15 (2021-06-05)

Fix

  • Correct issue with CLI scripts being excluded from package. [Ash Wilson]

v0.14 (2021-06-04)

Changes

  • Increment minor version, update CHANGELOG.rst. [Ash Wilson]

  • Include /.well-known/ in CA URL. [Ash Wilson]

    Close #62

v0.13 (2021-06-04)

Changes

  • Incerement minor version, update CHANGELOG.rst. [Ash Wilson]

  • Retrieving invalid TLSA record from DNS throws TLSAError. [Ash Wilson]

    Close #59

  • Update pattern for generating authority server URL. [Ash Wilson]

    Close #58

v0.12 (2021-05-28)

New

  • Implement new method for Identity to retrieve first entity certificate. [Ash Wilson]

    Close #56

Other

v0.11 (2021-05-18)

v0.10 (2021-05-11)

Changes

  • Generate DER certificates, include as a control in testing when changing representations between PEM, TLSA, DER. [Ash Wilson]

Other

v0.9 (2021-03-02)

Changes

  • Add filtering to certificate retrieval tool. [Ash Wilson]

    Close #39

  • Rename CLI sc8ripts to align with package name. [Ash Wilson]

    Close #38

v0.8 (2021-02-27)

New

  • Add dane_pkix_cd_get_ca_certificates. [Ash Wilson]

    Close #32

  • Add dane_pkix_cd_get_certificates. [Ash Wilson]

    Close #31

  • Add authenticate_pkix_cd script. [Ash Wilson]

    Close #29

  • Add PKIX-CD validation for local certificates. [Ash Wilson]

    Close #28

v0.7 (2021-02-18)

New

  • Add certificate_object to output from Identity.process_tlsa() [Ash Wilson]

    Close #23

  • Add support for EC certificates and keys. [Ash Wilson]

    Close #24

v0.6 (2020-11-10)

New

  • Add support for PKIX-CD. [Ash Wilson]

    Breaking changes! Test thoroughly before updating to this version!

    Close #20

  • Add Identity.get_ca_certificate_for_identity() [Ash Wilson]

    Close #18

  • Add Identity.verify_certificate_signature(). [Ash Wilson]

v0.5 (2020-10-15)

Fix

  • Clean up parsing of TLSA records when DNSSEC is in use. [Ash Wilson]

v0.4 (2020-10-15)

Fix

  • Fix parsing of full DNS response message. [Ash Wilson]

v0.3 (2020-10-15)

New

  • Identity __repr__() indicates request context and x509 extensions. [Ash Wilson]

Changes

  • DANE.get_tlsa_records() returns request context. [Ash Wilson]

v0.2 (2020-08-13)

New

  • Support generating TLSA records for matching type 1, 2. [Ash Wilson]

    Closes #3

v0.1 (2020-08-04)

New

  • Add certificate_association_to_der() and der_to_pem() for formatting certs from TLSA RRs. [Ash Wilson]