Release 2024-11-25T13-44-31Z

Changelog

• 2e4e7be Re-read JWT file for every authentication (#491)
• 60e5ae2 update goreleaser check complaints

Release 2024-10-31T07-42-41Z

Changelog

• 60e5ae2 update goreleaser check complaints
• d3b6494 vault: delay the usage of renewed auth tokens (#488)

Release 2024-09-11T07-22-50Z

Changelog

• db17a10 vault: do not reuse TCP connections (#486)

Release 2024-09-03T10-39-51Z

Changelog

• 1da59a0 entrust: Close body to avoid some conn leaks (#485)
• bc4783a fix: remove tab character from example yaml config as it is invalid (#479)
• c07d23a vault: renew token earlier (#481)

Release 2024-08-16T14-39-28Z

Changelog

• c1fa6dc Fix name of application (#475)
• 0d1464e entrust: use reasonable defaults for HTTP transport (#477)
• ca6a5b9 update go.mod dependencies (#473)
• ef3f85c vault: clone client TLS config and headers for status checks (#476)

Release 2024-06-17T15-47-05Z

Changelog

• f111da8 Fix identity new --ip example (#467)
• 4b6f9dc Upgrade to non-legacy Azure SDK (#459)
• e9f73b9 cmd/kes: add support for migrating keys to minkms (#465)
• fe54489 cmd: add kes ls command (#464)
• 802ce81 cmd: support private keys in kes identity (#461)
• 12195cc fix goroutine leak when reloading server config (#469)
• e06e710 update dependencies (#462)

Release 2024-04-12T13-50-00Z

Release Notes

Release 2024-04-12T13-50-00Z is a bugfix that fixes bugs cache garbage collection.
Before, the KES server did not expiry cache entries correctly when offline caching was enabled. In particular, it did not honor the
offline expiry in all cases.

What's Changed

• fix: typos, upgrade linter and CI go-version by @harshavardhana in #456
• vault: improve Vault API interaction by @aead in #458
• Remove 'rm' from list by @ramondeklein in #457
• set cache default values as documented by @aead in #460

New Contributors

• @ramondeklein made their first contribution in #457

Full Changelog: 2024-03-28T12-56-37Z...2024-04-12T13-50-00Z

Release 2024-03-28T12-56-37Z

Release Notes

Release 2024-03-13T17-52-13Z is a bugfix release that fixes bugs in the Gemalto/Thales and Fortanix backend.

What's Changed

• Update client.go (#454)
• keystore: use pre-configured client for {Gemalto,Fortanix} status check (#455)

Full Changelog: 2024-04-12T13-50-00Z...2024-03-28T12-56-37Z

Release 2024-03-13T17-52-13Z

Release Notes

Release 2024-03-13T17-52-13Z is a bugfix release that fixes two issues:

• PR #451 fixes a resource leak in the AWS, GCP, Fortanix and Gemalto backend that can cause OOM issues.
• PR #453 fixes an authentication issue that can cause connection failures since the server "just" requested, but not demanded a client certificate. Hence, clients might not send one causing authentication to fail. Now, the KES server requires a client certificate.

---

What's Changed

• keystore: fix conn leak in {AWS,GCP,Fortanx,Gemalto} backend by @aead in #451
• require a TLS client certificate by default by @aead in #453

Full Changelog: 2024-03-01T18-06-46Z...2024-03-13T17-52-13Z

Release 2024-03-01T18-06-46Z

Changelog

• 8ecd396 azure: Close http response body (#450)