v0.10.0

What's Changed

New Functionality

• Added support for generating Ed25519 certs by @tsaarni in #66
• Added support for setting CRL distribution point URI by @tsaarni in #67
• Added convenience getters for certificate and private key for single-value use by @tsaarni in #71

Bug Fixes

• Fix certificate manifest state calculation by @tsaarni in #51

Other Updates

• Bump github.com/stretchr/testify from 1.8.2 to 1.9.0 by @dependabot in #39, #40, #58
• Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 by @dependabot in #44
• Bump github.com/go-asn1-ber/asn1-ber from v1.5.4 to v1.5.5 by @tsaarni in #49
• Replace deprecated CRL methods by @tsaarni in #50

Full Changelog: v0.9.2...v0.10.0
certyaml-linux-amd64.tar.gz

v0.9.3

What's Changed

• Bump golang.org/x/mod from 0.9.0 to 0.10.0 by @dependabot in #38
• Bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by @dependabot in #39
• Bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by @dependabot in #40
• Bump golang.org/x/mod from 0.10.0 to 0.11.0 by @dependabot in #41
• Bump golang.org/x/mod from 0.11.0 to 0.12.0 by @dependabot in #42
• bump trivy-action by @tsaarni in #46
• Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 by @dependabot in #44
• Bump golang.org/x/mod from 0.12.0 to 0.14.0 by @dependabot in #45
• Fix race when generation of certificate or CRL can be called from multiple goroutines by @tsaarni in #48

Full Changelog: v0.9.2...v0.9.3

v0.9.2

What's Changed

• update x500dn module to a versioned release by @tsaarni in #31
• remove deprecated CRL api calls by @tsaarni in #35, #36
• Add arm64 MacOS binary to release artifacts by @tsaarni in #37

Full Changelog: v0.9.1...v0.9.2

v0.9.1

What's Changed

• Use filename as key in the hashes map by @nsimons in #28
• Replaced deprecated ioutil calls by @tsaarni in #24

New Contributors

• @nsimons made their first contribution in #28 🥳

Full Changelog: v0.9.0...v0.9.1

v0.9.0

What's Changed

• Allow empty CRLs to be created by @tsaarni in #22

Full Changelog: v0.8.0...v0.9.0

v0.8.0

Changes in this release:

• End-entity certificates now include certificate chain. Chain is appended when certificate is issued by sub-CA and it includes CA certificates up to, but not including root CA. The chains are included in certificate PEM files and tls.Certificate structs when using the Go API.

v0.7.0

Changes in this release:

• Use strict YAML parsing to bail out early when manifest contains unknown fields.
• Added support for certificate fields: extended key usage and serial number.
• Added support for revoking certificates by generating CRL file with serial numbers of revoked certificates.

v0.6.3

Updated gopkg.in/yaml.v3 to fix CVE-2022-28948.

v0.6.2

Added go API for certyaml.

v0.5.0

could not use DC component in subject name (#7)

fixes #6