v4.2.0

What's Changed

New Features 🎉

• add user/group/mode parameter to custom types by @trefzer in #129
• file mode: Use type from stdlib by @bastelfreak in #237

Bug Fixes 🐛

• Fix expression that looks like boolish logic by @rtib in #231
• fix default configs file ownership by @trefzer in #235
• fix: remove nokeys option and set default empty import/export passwords by @bastelfreak in #233

Other Changes

• Add acceptance test for PKCS#12 generation with password by @bastelfreak in #239
• openssl::certificate::pkcs12: Add test for x509 without password by @bastelfreak in #242
• openssl::export::pkcs12: cleanup if condition by @bastelfreak in #240
• openssl::export::pem_key: Add acceptance tests by @bastelfreak in #243
• openssl::export::pkcs12: Enhance acceptance tests with openssl validation by @marcusdots in #244

New Contributors

• @marcusdots made their first contribution in #244
• @pccibot made their first contribution in #246

Full Changelog: v4.1.0...v4.2.0

v4.1.0

What's Changed

New Features 🎉

• Pass openssl commands as an array by @ekohl in #225

Bug Fixes 🐛

• Correctly pass secrets via environment variables to avoid them being visible in process lists by @ekohl in #228

Full Changelog: v4.0.0...v4.1.0

v4.0.0

What's Changed

Breaking Changes 🛠

• Drop EoL Debian 8,9,10 support by @bastelfreak in #207
• Drop EoL Ubuntu 14.04,16.04,18.04 by @bastelfreak in #208
• Drop EoL CentOS 6,7,8 support by @bastelfreak in #212
• Drop EoL RedHat 6 and 7 support by @bastelfreak in #211
• Use OpenSSL::PKey.read to read private keys by @ekohl in #190
• password encryption: switch from des3->aes-256-cbc by @bastelfreak in #221
• Drop DSA key support by @ekohl in #222

New Features 🎉

• Add Debian 11 support by @bastelfreak in #205
• Add Debian 12 support by @bastelfreak in #206
• Add Ubuntu 22.04 support by @bastelfreak in #209
• Add EL9 support by @bastelfreak in #210
• Add Ubuntu 24.04 support by @ekohl in #191
• Add AlmaLinux 8 & 9 support by @bastelfreak in #213
• Add basic acceptance tests for the existing examples by @ekohl in #192
• Add OracleLinux 8 & 9 support by @bastelfreak in #216
• Allow passing a CA key password when signing a cert by @bastelfreak in #214
• Add Rocky Linux 8 & 9 support by @bastelfreak in #215
• Add Archlinux support by @bastelfreak in #217
• Support OpenSSL 3 by @ekohl in #223
• Add Puppet 8 support by @bastelfreak in #167

Bug Fixes 🐛

• Use private_key parameter when creating certificate by @vasilevalex in #186

New Contributors

• @ekohl made their first contribution in #191
• @vasilevalex made their first contribution in #186

Full Changelog: v3.2.0...v4.0.0

v3.2.0

What's Changed

New Features 🎉

• feat: refreshable exports by @pavelkovtunov in #202

Full Changelog: v3.1.1...v3.2.0

v3.1.1

What's Changed

Bug Fixes 🐛

• fix logic bug with extkeyusage and altnames by @rtib in #195
• Add missing require so that generate types works. by @ncstate-daniel in #198
• export/{pem_cert,pem_key,pkcs12}: passin, passout: use shellquote() instead of single quotation marks by @pavelkovtunov in #199

New Contributors

• @ncstate-daniel made their first contribution in #198
• @pavelkovtunov made their first contribution in #199

Full Changelog: v3.1.0...v3.1.1