241 lines
6.7 KiB
Markdown
241 lines
6.7 KiB
Markdown
# Change Log
|
|
|
|
## [Unreleased][unreleased]
|
|
|
|
### Added/Changed/Fixed
|
|
|
|
### Thanks
|
|
|
|
## 0.12.0
|
|
|
|
### Added/Changed/Fixed
|
|
|
|
- Upgrade to nom 7
|
|
|
|
## 0.11.0
|
|
|
|
### Added
|
|
|
|
- Add SubjectPublicKeyInfo::raw field
|
|
|
|
### Changed/Fixed
|
|
|
|
- Fix der-parser dependency (#102)
|
|
- Update oid-registry dependency (#77)
|
|
- Set MSRV to 1.46 (indirect dependency on lexical-core and bitvec)
|
|
- Extend the lifetimes exposed on TbsCertificate (#104)
|
|
- Add missing test assets (#103)
|
|
|
|
### Thanks
|
|
|
|
- @jgalenson, @g2p, @kpp
|
|
|
|
## 0.10.0
|
|
|
|
### Added
|
|
|
|
- Add the `Validate` trait to run post-parsing validations of X.509 structure
|
|
- Add the `FromDer` trait to unify parsing methods and visibility (#85)
|
|
- Add method to format X509Name using a given registry
|
|
- Add `X509Certificate::public_key()` method
|
|
- Add ED25519 as a signature algorithm (#95)
|
|
- Add support for extensions (#86):
|
|
- CRL Distribution Points
|
|
- Add `X509CertificateParser` builder to allow specifying parsing options
|
|
|
|
### Changed/Fixed
|
|
|
|
- Extensions are now stored in order of appearance in the certificate/CRL (#80)
|
|
- `.extensions` field is not public anymore, but methods `.extensions()` and `.extensions_map()`
|
|
have been added
|
|
- Store CRI attributes in order
|
|
- Fix parsing of CertificatePolicies, and use named types (closes #82)
|
|
- Allow specifying registry in oid2sn and similar functions (closes #88)
|
|
- Mark X509Extension::new as const fn + inline
|
|
- Allow leading zeroes in serial number
|
|
- Derive `Clone` for all types (when possible) (#89)
|
|
- Fix certificate validity period check to be inclusive (#90)
|
|
- Do not fail GeneralName parsing for x400Address and ediPartyName, read it as unparsed objects (#87)
|
|
- Change visibility of fields in `X509Name` (replaced by accessors)
|
|
|
|
### Thanks
|
|
|
|
- @lilyball for numerous issues, ideas and comments
|
|
- @SergioBenitez for lifetimes fixes (#93) and validity period check fixes (#90)
|
|
- @rappet for Ed25519 signature verification support (#95)
|
|
- @xonatius for the work on CRLDistributionPoints (#96, #98)
|
|
|
|
## 0.9.3
|
|
|
|
### Added/Changed/Fixed
|
|
|
|
- Add functions oid2description() and oid_registry() (closes #79)
|
|
- Fix typo 'ocsp_signing' (closes #84)
|
|
- Extension: use specific variant if unsupported or failed to parse (closes #83)
|
|
- Relax constrains on parsing to accept certificates that do not strictly respect
|
|
DER encoding, but are widely accepted by other X.509 libraries:
|
|
- SubjectAltName: accept non-ia5string characters
|
|
- Extensions: accept boolean values not enoded as `00` or `ff`
|
|
- Serial: build BigUint from raw bytes (do not check sign)
|
|
|
|
## 0.9.2
|
|
|
|
### Added/Changed/Fixed
|
|
|
|
- Remove der-oid-macro from dependencies, not used directly
|
|
- Use der_parser::num_bigint, remove it from direct dependencies
|
|
- Add methods to iterate all blocks from a PEM file (#75)
|
|
- Update MSRV to 1.45.0
|
|
|
|
## 0.9.1
|
|
|
|
### Added/Changed/Fixed
|
|
|
|
- Fix: X509Name::iter_state_or_province OID value
|
|
- Re-export oid-registry, and add doc to show how to access OID
|
|
|
|
### Thanks
|
|
|
|
- @0xazure for fixing X509Name::iter_state_or_province
|
|
|
|
## 0.9.0
|
|
|
|
### Added/Changed/Fixed
|
|
|
|
- Upgrade to `nom` 6.0
|
|
- Upgrade to `der-parser` 5.0
|
|
- Upgrade MSRV to 1.44.0
|
|
- Re-export crates so crate users do not have to import them
|
|
|
|
- Add function parse_x509_pem and deprecate pem_to_der (#53)
|
|
- Add helper methods to X509Name and simplify accessing values
|
|
- Add support for ReasonCode extension
|
|
- Add support for InvalidityDate extension
|
|
- Add support for CRL Number extension
|
|
- Add support for Certificate Signing Request (#58)
|
|
|
|
- Change type of X509Version (now directly using the u32 value)
|
|
- X509Name: relax check, allow some non-rfc compliant strings (#50)
|
|
- Relax some constraints for invalid dates
|
|
- CRL: extract raw serial, and add methods to access it
|
|
- CRL: add method to iterate revoked certificates
|
|
- RevokedCertificate: convert extensions list to hashmap
|
|
|
|
- Refactor crate modules and visibility
|
|
- Rename top-level functions to `parse_x509_certificate` and parse_x509_crl`
|
|
|
|
- Refactor error handling, return meaningful errors when possible
|
|
- Make many more functions public (parse_tbs_certificate, etc.)
|
|
|
|
### Thanks
|
|
|
|
- Dirkjan Ochtman (@djc): support for Certificate Signing Request (CSR), code refactoring, etc.
|
|
|
|
## 0.8.0
|
|
|
|
### Added/Changed
|
|
|
|
- Upgrade to `der-parser` 4.0
|
|
- Move from `time` to `chrono`
|
|
- `time 0.1 is very old, and time 0.2 broke compatibility and cannot parse timezones
|
|
- Add public type `ASN1Time` object to abstract implementation
|
|
- *this breaks API for direct access to `not_before`, `not_after` etc.*
|
|
- Fix clippy warnings
|
|
- `nid2obj` argument is now passed by copy, not reference
|
|
- Add method to get a formatted string of the certificate serial number
|
|
- Add method to get decoded version
|
|
- Add convenience methods to access the most common fields (subject, issuer, etc.)
|
|
- Expose the raw DER of an X509Name
|
|
- Make `parse_x509_name` public, for parsing distinguished names
|
|
- Make OID objects public
|
|
- Implement parsing for some extensions
|
|
- Support for extensions is not complete, support for more types will be added later
|
|
- Add example to decode and print certificates
|
|
- Add `verify` feature to verify cryptographic signature by a public key
|
|
|
|
### Fixed
|
|
|
|
- Fix parsing of types not representable by string in X509Name (#36)
|
|
- Fix parsing of certificates with empty subject (#37)
|
|
|
|
### Thanks
|
|
|
|
- @jannschu, @g2p for the extensions parsing
|
|
- @wayofthepie for the tests and contributions
|
|
- @nicholasbishop for contributions
|
|
|
|
## 0.7.0
|
|
|
|
- Expose raw bytes of the certificate serial number
|
|
- Set edition to 2018
|
|
|
|
## 0.6.4
|
|
|
|
- Fix infinite loop when certificate has no END mark
|
|
|
|
## 0.6.3
|
|
|
|
- Fix infinite loop when reading non-pem data (#28)
|
|
|
|
## 0.6.2
|
|
|
|
- Remove debug code left in `Pem::read`
|
|
|
|
## 0.6.1
|
|
|
|
- Add CRL parser
|
|
- Expose CRL tbs bytes
|
|
- PEM: ignore lines before BEGIN label (#21)
|
|
- Fix parsing default values for TbsCertificate version field (#24)
|
|
- Use BerResult from der-parser for simpler function signatures
|
|
- Expose tbsCertificate bytes
|
|
- Upgrade dependencies (base64)
|
|
|
|
## 0.6.0
|
|
|
|
- Update to der-parser 3.0 and nom 5
|
|
- Breaks API, cleaner error types
|
|
|
|
## 0.5.1
|
|
|
|
- Add `time_to_expiration` to `Validity` object
|
|
- Add method to read a `Pem` object from `BufRead + Seek`
|
|
- Add method to `Pem` to decode and extract certificate
|
|
|
|
## 0.5.0
|
|
|
|
- Update to der-parser 2.0
|
|
|
|
## 0.4.3
|
|
|
|
- Make `parse_subject_public_key_info` public
|
|
- Add function `sn2oid` (get an OID by short name)
|
|
|
|
## 0.4.2
|
|
|
|
- Support GeneralizedTime conversion
|
|
|
|
## 0.4.1
|
|
|
|
- Fix case where certificate has no extensions
|
|
|
|
## 0.4.0
|
|
|
|
- Upgrade to der-parser 1.1, and Use num-bigint over num
|
|
- Rename x509_parser to parse_x509_der
|
|
- Do not export subparsers
|
|
- Improve documentation
|
|
|
|
## 0.3.0
|
|
|
|
- Upgrade to nom 4
|
|
|
|
## 0.2.0
|
|
|
|
- Rewrite X.509 structures and parsing code to work in one pass
|
|
**Warning: this is a breaking change**
|
|
- Add support for PEM-encoded certificates
|
|
- Add some documentation
|
|
|
|
|