http://open-source-security-software.net/project/cfssl/releases.atom 2025-05-02T14:23:35.833852+00:00 python-feedgen cfssl 1.3.1 2018-02-24T00:45:34+00:00 Fix Go 1.10 build errors 2018-02-24T00:45:34+00:00 cfssl 1.3.2 2018-05-10T05:52:27+00:00 - Add ability to return precerts from `Signer.Sign` and create certs from precerts with new API 2018-05-10T05:52:27+00:00 cfssl 1.3.3 2019-04-09T03:41:28+00:00 2019-04-09T03:41:28+00:00 cfssl 1.3.4 2019-07-16T00:53:06+00:00 - Support for pre-issuance linting with [zlint](https://github.com/zmap/zlint) - Support for Subject Alternative Names in selfsign - Support for staged auth key rotation 2019-07-16T00:53:06+00:00 cfssl v1.4.0-rc1 2019-10-31T02:52:25+00:00 ## Changelog 9f1008d Drop the slow macOS build ac360f2 Fix bug causing selfsign to ignore the default profile c4ed0e4 Fix formatted logging calls. 27c56f6 Fix typo of genkey to gencsr db14316 Gopkg: update zlint/zcrypto to latest. 5fc50ce Merge pull request #1018 from cloudflare/cbroglie/1.3.4 633726f Merge pull request #1022 from QuLogic/log-format b1ec8c5 Merge pull request #1025 from cpu/cpu-bump-zlint-dep d4e8552 Merge pull request #1027 from cpu/cpu-go-one-dot-twelve-plus 1a911ca Merge pull request #1030 from ashemedai/master 40f4f51 Merge pull request #1044 from cloudflare/cbroglie/selfsign 2318616 Merge pull request #1047 from cloudflare/cbroglie/modules aa34253 Merge remote-tracking branch 'cf/master' into cpu-bump-zlint-dep ee73190 Migrate to Go modules ce0e294 Support building/releasing binaries with goreleaser 0338350 project: require Go 1.12.x df5c37b review: fix local signer TestLint unit test. 2019-10-31T02:52:25+00:00 cfssl v1.4.0 2019-10-31T16:53:55+00:00 ## Changelog 9f1008d Drop the slow macOS build ac360f2 Fix bug causing selfsign to ignore the default profile c4ed0e4 Fix formatted logging calls. 27c56f6 Fix typo of genkey to gencsr db14316 Gopkg: update zlint/zcrypto to latest. 5fc50ce Merge pull request #1018 from cloudflare/cbroglie/1.3.4 633726f Merge pull request #1022 from QuLogic/log-format b1ec8c5 Merge pull request #1025 from cpu/cpu-bump-zlint-dep d4e8552 Merge pull request #1027 from cpu/cpu-go-one-dot-twelve-plus 1a911ca Merge pull request #1030 from ashemedai/master 40f4f51 Merge pull request #1044 from cloudflare/cbroglie/selfsign 2318616 Merge pull request #1047 from cloudflare/cbroglie/modules d9af611 Merge pull request #1048 from cloudflare/cbroglie/goreleaser aa34253 Merge remote-tracking branch 'cf/master' into cpu-bump-zlint-dep ee73190 Migrate to Go modules ce0e294 Support building/releasing binaries with goreleaser 0338350 project: require Go 1.12.x df5c37b review: fix local signer TestLint unit test. 2019-10-31T16:53:55+00:00 cfssl v1.4.1 2019-11-13T10:22:43+00:00 ## Changelog acbed0a Add make targets for building .deb and .rpm packages 7c2aa53 Add missing sqlite import 49924c4 Build staticly with musl for better compatibility 1bfc946 Merge pull request #1 from cloudflare/master 358fd07 Merge pull request #1052 from cloudflare/cbroglie/pkg-deb-rpm ebe0199 Merge pull request #1054 from dsix-work/musl-builds 67aae94 Merge pull request #966 from andrewheberle/patch-1 69fa54a Update goreleaser tag to musl version 2019-11-13T10:22:43+00:00 cfssl v1.5.0 2020-10-23T00:15:45+00:00 ## Breaking Changes Users of the [certdb](https://github.com/cloudflare/cfssl/tree/master/certdb) functionality *must* run database `002` migrate prior to upgrading to v1.5.0 or earlier. Migrates are available for all 3 supported databases: [PostgreSQL](https://github.com/cloudflare/cfssl/blob/master/certdb/pg/migrations/002_AddMetadataToCertificates.sql), [MySQL](https://github.com/cloudflare/cfssl/blob/master/certdb/mysql/migrations/002_AddMetadataToCertificates.sql), and [SQLite](https://github.com/cloudflare/cfssl/blob/master/certdb/sqlite/migrations/002_AddMetadataToCertificates.sql) ## Changelog f30ae6a Add go 1.14 to the CI (#1092) c7e13ae Add support for s390x in travis.yml beeced8 Allowing CSR to take CRL url as input which can then be used on a certificate 44db4a7 Cloud_f_lare (#1070) 10ed8da Correctly check for different golang versions #1076 (#1083) 34885de Document revocation parameter formats 7c8e501 Fix 'TestNewMutualTLSServer' test for go1.14 #1075 (#1091) 1b44b48 Fix race condition in revoke 4468af6 Fix readme still referencing deleted doc file 1fb9b90 Fix typo and go fmt this file 87a2fe7 Ignore EC parameters when parsing private keys 828c23c Merge pull request #1065 from linux-on-ibm-z/test-s390x-pr 6449172 Merge pull request #1073 from PeterLincsafe/master ca392c0 Merge pull request #1100 from gzzchh/patch-1 2916a1f Merge pull request #1111 from cpu/cpu-temp-fix-bundle-test 8fb5413 Merge pull request #1112 from RocketPuppy/patch-1 efd6a76 Merge pull request #1128 from huiyifyj/fix-typo 046b174 Merge pull request #1129 from mitalirawat/mitali/SECENG-8092 8e907d3 Merge pull request #1132 from asayyah/master d1be3c2 Merge pull request #1135 from nickysemenza/fix-null-commonname d6ad84e Merge pull request #1136 from nickysemenza/fix-null-commonname e905e91 Merge pull request #1137 from hugoboos/update-zlint e9f28f7 Replace pkg.cfssl.org with 'Packages' tab (#1050) f1bc990 Updated github.com/lib/pq to v1.3.0 (#1086) 6b49bea add copy_extensions configuration to local signer to allow (#1082) d384631 bundler: temporarily remove `leafRSA3072` testcases. e45ead2 deps: update /x/crypto, fix Go 1.13 test breakage. (#1081) 8090bce feat(authsign): store additional metadata/fields in `certdb` (#1126) e8f9337 fix(certdb): allow reading other null columns (part 2 of #1135) c7426df fix(certdb): use `sql.NullString` for CertificateRecord.CommonName abef926 local/signer: use zmap/zlint v2.0.0, add filtering. (#1080) ff9470e typo fix of json a0fb609 update dependency zlint to 2.2.1 2020-10-23T00:15:45+00:00 cfssl 1.2.0 2021-04-16T19:18:27+00:00 2021-04-16T19:18:27+00:00 cfssl 1.1.0 2021-04-16T19:20:30+00:00 2021-04-16T19:20:30+00:00 cfssl v1.6.0 2021-06-04T17:10:34+00:00 ## Changelog 9f1ff97 Add Power Support ppc64le 7f46009 Add documentation for API health endpoint 152fb8b Add http response close in client post function 38b8240 Added support for general OID names in CSRs 7a59a7d Allow users to use custom HTTP client a22fd94 Fix spelling b156a8c Fix tests and add OID test 5628e97 Merge pull request #1 from benbuzbee/benbuz/tests c1bf7b9 Merge pull request #1119 from jbampton/fix-spelling 816bb92 Merge pull request #1141 from nickysemenza/add-docker-push aebbc13 Merge pull request #1143 from nickysemenza/add-go-1.15 9ccff9a Merge pull request #1145 from AshleyPoole/ash/add-health-api-doc a538700 Merge pull request #1151 from nagesh4193/master c75db4f Merge pull request #1156 from mayocream/master 6dd12c2 Merge pull request #1157 from mayocream/patch-1 23b638f Merge pull request #1160 from orangepizza/zlint_upgrade 9f7129a Merge pull request #1163 from akgmartin/master 3cc617f Merge pull request #1164 from grongor/dont-use-default-http-client 57882e0 Merge pull request #1170 from qinghai5060/fixErrorCheck b1512a1 Merge pull request #1172 from aklyachkin/master 6eb1640 Merge pull request #1173 from iguanesolutions/revoke_leak c6f04ed Merge pull request #1174 from nickysemenza/go-metrics-prometheus 2215630 Merge pull request #1175 from chienfuchen32/patch-1 0707dc7 Merge pull request #1181 from myokoyama28/fix-certadd 6152bbb add Docker Hub push to release make target 84e7ff5 chore(multirootca): replace deprecated go-metrics with prometheus 5c037eb chore: add go 1.15 to travis f712ad9 copy over ca-bundle and int-bundle testdata from cloudflare/cfssl_trust 1c75260 fix error check when check signature ea20c62 fix lint errors 6b41bfc fix serve_test.go 763faa7 fix: cfssl provider support SAN URI d103ea1 format json indent 9af9204 make certadd available f247e5b revoke: fix connection leak 9b27d0d support for E attribute in CSR 57d4044 trigger c90849d update zlint to v3.0.0 2021-06-04T17:10:34+00:00 cfssl v1.6.1 2021-09-03T15:28:11+00:00 ## Changelog 87f86f1 Add loglevel flag for multiroot-ca 29ae05f Merge pull request #1189 from cloudflare/nicky/fix-coreos-mod-rename 1f29b04 Merge pull request #1191 from Rutori/loglevel-multiroot-ca f4208c6 Merge pull request #1195 from BowonY/bowon/avoid-select-all b2552ca fix upgrading transitive coreos dependency breakage 19c09ff pick columns to get revoked/unexpired certs e582ed4 remove -u flag from readme, link to releases bea2d3d remove old go versions from travis 2021-09-03T15:28:11+00:00 cfssl v1.6.2 2022-08-26T21:31:23+00:00 ## Changelog * 503b4d7 Merge pull request #1205 from cloudflare/watson/fix-delegation-support * 81f1f19 Merge pull request #1213 from akamac/patch-1 * e6502bb Merge pull request #1224 from romantomjak/master * 04def84 Merge pull request #1231 from boranx/readme-go1.18-install * 7614d6c Merge pull request #1236 from blotus/use-go-embed * a3eea0c Merge pull request #1239 from cloudflare/nicky/add-gh-actions * cacf170 Merge pull request #1241 from cloudflare/nicky/bump-crypto * a8591c3 Support for DelegationUsage extension * 23c92b0 add github Actions to replace travis * f1e6594 add health endpoint to docs * 34ce3de add support for m1 macs * 7364593 chore: bump golang.org/x/crypto * 547d051 docs: add go install * 33661a2 min go version is now 1.16 * 33ed562 remove go.rice dependency * 3d2d3b5 update Dockerfiles to use go 1.16 * bba3a20 update release make target to use go 1.18 * 9ca1d0a use go:embed 2022-08-26T21:31:23+00:00 cfssl v1.6.3 2022-10-04T17:41:22+00:00 ## Changelog * ffddf3a Merge pull request #1244 from sevan/patch-1 * d4be5f5 Merge pull request #1245 from sevan/patch-2 * 4e654dd Merge pull request #1246 from sevan/patch-3 * 079aed0 Merge pull request #1249 from cloudflare/nicky/new-db-accessor * d4488a8 add DB accessor to get unexpired certs by one or more labels * a9a2c2e add postgres and mysql tests back to CI * e0c522a add test for GetUnexpiredCertificatesByLabel * 97e7ff2 doc/api/intro.txt: there are 13 endpoints * 40209b1 doc/cmd/cfssl.txt: grammar * d9b0432 doc/cmd/multiroot.txt: Add dbconfig to example 2022-10-04T17:41:22+00:00 cfssl v1.6.4 2023-04-10T19:07:12+00:00 ## Changelog * b37103e Add support to multi architecture docker image using a github action * fa8441a Binary enablement for s390x * 00a28f6 Improve IPv6 address handling in ocspserve * 51a7fa8 Make api intro.txt references links * 123abe0 Merge pull request #1187 from jonathanio/improve-ocspserve-ipv6-handling * b553d93 Merge pull request #1254 from thaJeztah/remove_go1.12_support * cfd0e9a Merge pull request #1255 from thaJeztah/update_gomod * a4a432b Merge pull request #1257 from thaJeztah/remove_goutils * c71f9f6 Merge pull request #1258 from thaJeztah/remove_ioutils * 37715e7 Merge pull request #1259 from sonork/master * 2ac5c8a Merge pull request #1260 from linux-on-ibm-z/s390x-binary-enablement * c5e40da Merge pull request #1262 from thaJeztah/remove_go_net * 6b3f233 Merge pull request #1267 from shahidhs-ibm/s390x-multiarch * a8697b2 Merge pull request #1273 from ehershey/patch-2 * 4db924a Merge pull request #1274 from cloudflare/dependabot/go_modules/golang.org/x/net-0.7.0 * b4d0d87 Merge pull request #1277 from cloudflare/nicky/docker * cf63dcb Update Dockerfile * 8467879 Update Makefile * 39c4590 add arm64 on all linux binaries * d90536d all: gofmt for go1.18 (fixes missing build-tags) * 941a1cd api: replace uses of deprecated io/ioutil * 2bc4f21 auth: replace uses of deprecated io/ioutil * fcde786 build(deps): bump golang.org/x/net from 0.2.0 to 0.7.0 * 6f34ba0 bundler: replace uses of deprecated io/ioutil * 7025962 certdb: replace uses of deprecated io/ioutil * 7c1b358 certinfo: replace uses of deprecated io/ioutil * 45225c2 cli: replace uses of deprecated io/ioutil * fc8619e cmd: replace uses of deprecated io/ioutil * 77a52e7 config: replace uses of deprecated io/ioutil * 31652f3 crl: replace uses of deprecated io/ioutil * 62ebbe3 csr: replace uses of deprecated io/ioutil * 68b96f8 doc: remove mention of deprecated io/ioutil * 59534b3 go.mod: github.com/cloudflare/redoctober v0.0.0-20211013234631-6a74ccc611f6 * 0cb76ce go.mod: github.com/google/certificate-transparency-go v1.1.4 * 1ddff47 go.mod: github.com/jmhodges/clock v1.2.0 * 052932c go.mod: github.com/matttproud/golang_protobuf_extensions v1.0.2 * 3eb1f29 go.mod: golang.org/x/crypto v0.3.0 * 706ae75 go.mod: golang.org/x/net v0.2.0 * 28c127e go.mod: tidy and vendor with go1.18 * 879b1d3 helpers/derhelpers: remove support for go1.12 * b27c723 helpers: replace uses of deprecated io/ioutil * 188cfa4 include linux/arm64 in builds * df5893e initca: replace uses of deprecated io/ioutil * 9d4d8c6 multiroot: replace uses of deprecated io/ioutil * 5b8919c ocsp: replace uses of deprecated io/ioutil * 6e8b031 push images to github/docker container registry * 1c31e68 remove deprecated golint (golang.org/x/lint) * c094402 remove docker socket volume mount * 540aeaf remove external linker in linux builds * 4dd587d remove privileged argument from docker runs * 1382f3b remove use of obsolete golang.org/x/net/context package * f98ae4a revoke: replace uses of deprecated io/ioutil * 6a932bb scan: replace uses of deprecated io/ioutil * f277884 selfsign: replace uses of deprecated io/ioutil * e7d48f1 signer: replace uses of deprecated io/ioutil * 4607ace transport/ca/localca: New(): return error instead of calling os.Exit(1) * b069c86 transport/ca/localca: remove unused testGenerateKeypair utility * 0eecfe2 transport/ca/localca: remove uses of deprecated io/ioutil * 5937a3f transport/ca/localca: remove uses of github.com/kisom/goutils/assert * 8bd4af2 transport: replace uses of deprecated io/ioutil * d7e9e5f ubiquity: replace uses of deprecated io/ioutil * c383f2a use cgo only in darwin builds * 24b3ec5 use gythialy/golang-cross for snapshot builds * c9e5b44 whitelist: replace uses of deprecated io/ioutil 2023-04-10T19:07:12+00:00