Skip to content

Version 0.8.0

Compare
Choose a tag to compare
@aead aead released this 30 Apr 14:32
· 376 commits to master since this release

This release makes some major breaking changes affecting the server configuration and derived data encryption keys.

Changed

  • The KES server supports only HTTP/2. Support for HTTP/1.1 and HTTP/1.0 has been removed. (b74bb38)
  • The KES SDK stabilizes the API for creating a new client (326d8a4)
  • The log configuration does not support log files anymore. Error and Audit logging can only be enabled or disabled (8f259c0)
  • The Vault K/V prefix configuration field has been renamed from name to prefix (8f259c0)
  • Some KES server CLI options have been renamed from --tls-key to --key, --tls-cert to --cert and --mtls-auth to --auth. (8f259c0)

Removed

  • Support for toml configuration files. (8f259c0)
  • Support for toml policy files (3cd0009)
  • Direct support for encrypted secrets via an external KMS configuration (650af34)
  • Support for the insecure AES key derivation based on RFC 8452 (650af34)