Changelog

• 6619c79 Add DER support for gernerating and parsing CSR
• 9a0778d Add support for generating ed25519 keys and certs (#1061)
• 5ac7cd9 Add unit test for custom extension supt
• 7f58e9c Build images on base image for target platform
• 6ea8605 Merge pull request #1063 from izolight/sha256-digest
• 0f0664a Merge pull request #1256 from thaJeztah/remove_testify
• 02d4045 Merge pull request #1281 from sthussey/fix/selfsign-extensions
• 415a59e Merge pull request #1282 from patrickelectric/arm
• 908df50 Merge pull request #1285 from cloudflare/nicky/goreleaser-action-snapshot
• 88bfcbf Merge pull request #1288 from kbdharun/master
• 58b12e7 Merge pull request #1289 from cloudflare/nicky/docker-arch
• b2e0b85 Merge pull request #1290 from cloudflare/nicky/golang-cross-latest
• 11796e1 Merge pull request #1291 from ahrtr/bump_zlint_20230512
• 214bd57 Merge pull request #1292 from ahrtr/configure_dependabot_20230512
• 3e4a060 Merge pull request #1293 from cloudflare/dependabot/github_actions/docker/build-push-action-4
• f37a685 Merge pull request #1294 from cloudflare/dependabot/go_modules/github.com/prometheus/client_golang-1.15.1
• 9618eba Merge pull request #1295 from cloudflare/dependabot/go_modules/github.com/google/certificate-transparency-go-1.1.6
• c1cdc1b Merge pull request #1296 from cloudflare/dependabot/go_modules/github.com/jmoiron/sqlx-1.3.5
• 7bcbc6d Merge pull request #1297 from cloudflare/dependabot/go_modules/github.com/go-sql-driver/mysql-1.7.1
• 0d872f6 Merge pull request #1298 from cloudflare/dependabot/go_modules/github.com/lib/pq-1.10.9
• ce41e38 Merge pull request #1299 from cloudflare/dependabot/go_modules/github.com/stretchr/testify-1.8.2
• e1165bb Merge pull request #1300 from cloudflare/dependabot/go_modules/golang.org/x/crypto-0.9.0
• 68e04e2 Merge pull request #1302 from cloudflare/nicky/release-with-vcs
• c21e85d Merge pull request #1303 from cloudflare/dependabot/go_modules/github.com/stretchr/testify-1.8.3
• 50f8789 Merge pull request #1304 from testwill/master
• b447c47 Merge pull request #1305 from cloudflare/dependabot/go_modules/github.com/stretchr/testify-1.8.4
• 3513646 Merge pull request #1306 from cloudflare/dependabot/go_modules/github.com/mattn/go-sqlite3-1.14.17
• d042e64 Merge pull request #1309 from cloudflare/dependabot/go_modules/github.com/zmap/zlint/v3-3.5.0
• 277c524 Merge pull request #1310 from cloudflare/dependabot/go_modules/golang.org/x/crypto-0.10.0
• 707f415 Merge pull request #1311 from cloudflare/dependabot/go_modules/github.com/prometheus/client_golang-1.16.0
• f0549e3 Merge pull request #1312 from kongweiguo/add-csr-der
• f4c7545 Merge pull request #1316 from cloudflare/dependabot/go_modules/golang.org/x/crypto-0.12.0
• 2a88d0c Merge pull request #1321 from cloudflare/dependabot/go_modules/golang.org/x/crypto-0.13.0
• 465384f Merge pull request #1322 from cloudflare/dependabot/github_actions/actions/checkout-4
• 947f651 Merge pull request #1323 from cloudflare/dependabot/github_actions/docker/metadata-action-5
• 7fc015e Merge pull request #1324 from cloudflare/dependabot/github_actions/docker/build-push-action-5
• 73cd6b5 Merge pull request #1325 from cloudflare/dependabot/github_actions/docker/login-action-3
• 78df137 Merge pull request #1326 from cloudflare/dependabot/github_actions/docker/setup-qemu-action-3
• e95f50e Merge pull request #1327 from cloudflare/dependabot/github_actions/docker/setup-buildx-action-3
• e33630c Merge pull request #1330 from cloudflare/dependabot/go_modules/github.com/prometheus/client_golang-1.17.0
• 00ef5b9 Merge pull request #1332 from cloudflare/dependabot/go_modules/golang.org/x/crypto-0.14.0
• 0784631 Merge pull request #1333 from cloudflare/dependabot/go_modules/golang.org/x/net-0.17.0
• 8b0d1b8 Merge pull request #1336 from cloudflare/dependabot/go_modules/github.com/mattn/go-sqlite3-1.14.18
• 86cf475 Merge pull request #1337 from cloudflare/dependabot/go_modules/github.com/google/certificate-transparency-go-1.1.7
• f47ec3b Merge pull request #1338 from cloudflare/dependabot/go_modules/golang.org/x/crypto-0.15.0
• bbcbbe3 Merge pull request #1344 from cloudflare/dependabot/github_actions/actions/setup-go-5
• 319a111 Merge pull request #1345 from cloudflare/dependabot/go_modules/github.com/mattn/go-sqlite3-1.14.19
• 7e1c6cc Merge pull request #1346 from cloudflare/dependabot/github_actions/actions/upload-artifact-4
• 6d4e660 Merge pull request #1347 from cloudflare/dependabot/go_modules/golang.org/x/crypto-0.17.0
• dac37af Merge pull request #1350 from cloudflare/dependabot/go_modules/github.com/prometheus/client_golang-1.18.0
• 8af55f6 Merge pull request #1352 from cloudflare/dependabot/go_modules/golang.org/x/crypto-0.18.0
• aa40f70 Merge pull request #1353 from cloudflare/dependabot/go_modules/github.com/mattn/go-sqlite3-1.14.20
• ad3f22f Merge pull request #1354 from cloudflare/dependabot/github_actions/codecov/codecov-action-4
• c53e678 Merge pull request #1355 from cloudflare/dependabot/go_modules/github.com/mattn/go-sqlite3-1.14.22
• 4b17f8c Merge pull request #1356 from cloudflare/dependabot/github_actions/golangci/golangci-lint-action-4
• b7c3094 Merge pull request #1358 from cloudflare/dependabot/go_modules/golang.org/x/crypto-0.19.0
• 44b96cf Merge pull request #1360 from killianmuldoon/pr-fix-docker-build
• 96259aa Merge pull request #1363 from cloudflare/dependabot/go_modules/github.com/prometheus/client_golang-1.19.0
• f7af124 Respect custom x509 ext in selfsign
• 2fab338 add workflow to run goreleaser snapshot
• 6f10f22 also output sha256 digest when generating certificate
• f6cb3e8 build pacakges with latest go
• ff634d9 build(deps): bump actions/checkout from 3 to 4
• 3d88142 build(deps): bump actions/setup-go from 4 to 5
• 15955d7 build(deps): bump actions/upload-artifact from 3 to 4
• 71dd338 build(deps): bump codecov/codecov-action from 3 to 4
• e1d1777 build(deps): bump docker/build-push-action from 3 to 4
• 47aa9b7 build(deps): bump docker/build-push-action from 4 to 5
• 4452a0e build(deps): bump docker/login-action from 2 to 3
• c448632 build(deps): bump docker/metadata-action from 4 to 5
• 8a40f98 build(deps): bump docker/setup-buildx-action from 2 to 3
• 4adaa6a build(deps): bump docker/setup-qemu-action from 2 to 3
• 04f6d3e build(deps): bump github.com/go-sql-driver/mysql from 1.6.0 to 1.7.1
• 372ef3d build(deps): bump github.com/google/certificate-transparency-go
• df32d88 build(deps): bump github.com/google/certificate-transparency-go
• 03a86ea build(deps): bump github.com/jmoiron/sqlx from 1.3.3 to 1.3.5
• be9f3a3 build(deps): bump github.com/lib/pq from 1.10.1 to 1.10.9
• 1ba4686 build(deps): bump github.com/mattn/go-sqlite3 from 1.14.16 to 1.14.17
• 5690a91 build(deps): bump github.com/mattn/go-sqlite3 from 1.14.17 to 1.14.18
• 7af0669 build(deps): bump github.com/mattn/go-sqlite3 from 1.14.18 to 1.14.19
• 753132f build(deps): bump github.com/mattn/go-sqlite3 from 1.14.19 to 1.14.20
• 710546a build(deps): bump github.com/mattn/go-sqlite3 from 1.14.20 to 1.14.22
• e246148 build(deps): bump github.com/prometheus/client_golang
• f930541 build(deps): bump github.com/prometheus/client_golang
• c6ac238 build(deps): bump github.com/prometheus/client_golang
• 2e59ba1 build(deps): bump github.com/prometheus/client_golang
• 0f5c14c build(deps): bump github.com/prometheus/client_golang
• 7479ed6 build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.2
• 726dc22 build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3
• c1a100a build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4
• c46cc2b build(deps): bump github.com/zmap/zlint/v3 from 3.4.1 to 3.5.0
• 48e8f99 build(deps): bump golang.org/x/crypto from 0.10.0 to 0.12.0
• b97dede build(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0
• 33c9f30 build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0
• d124eca build(deps): bump golang.org/x/crypto from 0.14.0 to 0.15.0
• 9243529 build(deps): bump golang.org/x/crypto from 0.15.0 to 0.17.0
• 6410467 build(deps): bump golang.org/x/crypto from 0.17.0 to 0.18.0
• ca7fd50 build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0
• 21c13ab build(deps): bump golang.org/x/crypto from 0.8.0 to 0.9.0
• 682fa4a build(deps): bump golang.org/x/crypto from 0.9.0 to 0.10.0
• 73b6dc9 build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0
• f19cf51 build(deps): bump golangci/golangci-lint-action from 3 to 4
• 4a5a64d bump github.com/zmap/zlint/v3 from 3.1.0 to 3.4.1
• 8d25f25 certdb/sql: remove uses of github.com/stretchr/testify/require
• 5e37590 code optimization
• 2b2dd1a configure dependabot
• 5f34df7 fix architecture for docker builds
• e9d0790 go.yml: update actions/checkout to v3, actions/setup-go to v4
• 636ddf8 goreleaser: Add ARMv7 binaries
• b946db1 reenable vcs stamping with docker image that supports it
• 76629b5 snapshot.yml: update actions/checkout to v3
• b41fd33 update documentation with sha256 hashes
• bf9636a update lint test for bumped zlint

Changelog

• b37103e Add support to multi architecture docker image using a github action
• fa8441a Binary enablement for s390x
• 00a28f6 Improve IPv6 address handling in ocspserve
• 51a7fa8 Make api intro.txt references links
• 123abe0 Merge pull request #1187 from jonathanio/improve-ocspserve-ipv6-handling
• b553d93 Merge pull request #1254 from thaJeztah/remove_go1.12_support
• cfd0e9a Merge pull request #1255 from thaJeztah/update_gomod
• a4a432b Merge pull request #1257 from thaJeztah/remove_goutils
• c71f9f6 Merge pull request #1258 from thaJeztah/remove_ioutils
• 37715e7 Merge pull request #1259 from sonork/master
• 2ac5c8a Merge pull request #1260 from linux-on-ibm-z/s390x-binary-enablement
• c5e40da Merge pull request #1262 from thaJeztah/remove_go_net
• 6b3f233 Merge pull request #1267 from shahidhs-ibm/s390x-multiarch
• a8697b2 Merge pull request #1273 from ehershey/patch-2
• 4db924a Merge pull request #1274 from cloudflare/dependabot/go_modules/golang.org/x/net-0.7.0
• b4d0d87 Merge pull request #1277 from cloudflare/nicky/docker
• cf63dcb Update Dockerfile
• 8467879 Update Makefile
• 39c4590 add arm64 on all linux binaries
• d90536d all: gofmt for go1.18 (fixes missing build-tags)
• 941a1cd api: replace uses of deprecated io/ioutil
• 2bc4f21 auth: replace uses of deprecated io/ioutil
• fcde786 build(deps): bump golang.org/x/net from 0.2.0 to 0.7.0
• 6f34ba0 bundler: replace uses of deprecated io/ioutil
• 7025962 certdb: replace uses of deprecated io/ioutil
• 7c1b358 certinfo: replace uses of deprecated io/ioutil
• 45225c2 cli: replace uses of deprecated io/ioutil
• fc8619e cmd: replace uses of deprecated io/ioutil
• 77a52e7 config: replace uses of deprecated io/ioutil
• 31652f3 crl: replace uses of deprecated io/ioutil
• 62ebbe3 csr: replace uses of deprecated io/ioutil
• 68b96f8 doc: remove mention of deprecated io/ioutil
• 59534b3 go.mod: github.com/cloudflare/redoctober v0.0.0-20211013234631-6a74ccc611f6
• 0cb76ce go.mod: github.com/google/certificate-transparency-go v1.1.4
• 1ddff47 go.mod: github.com/jmhodges/clock v1.2.0
• 052932c go.mod: github.com/matttproud/golang_protobuf_extensions v1.0.2
• 3eb1f29 go.mod: golang.org/x/crypto v0.3.0
• 706ae75 go.mod: golang.org/x/net v0.2.0
• 28c127e go.mod: tidy and vendor with go1.18
• 879b1d3 helpers/derhelpers: remove support for go1.12
• b27c723 helpers: replace uses of deprecated io/ioutil
• 188cfa4 include linux/arm64 in builds
• df5893e initca: replace uses of deprecated io/ioutil
• 9d4d8c6 multiroot: replace uses of deprecated io/ioutil
• 5b8919c ocsp: replace uses of deprecated io/ioutil
• 6e8b031 push images to github/docker container registry
• 1c31e68 remove deprecated golint (golang.org/x/lint)
• c094402 remove docker socket volume mount
• 540aeaf remove external linker in linux builds
• 4dd587d remove privileged argument from docker runs
• 1382f3b remove use of obsolete golang.org/x/net/context package
• f98ae4a revoke: replace uses of deprecated io/ioutil
• 6a932bb scan: replace uses of deprecated io/ioutil
• f277884 selfsign: replace uses of deprecated io/ioutil
• e7d48f1 signer: replace uses of deprecated io/ioutil
• 4607ace transport/ca/localca: New(): return error instead of calling os.Exit(1)
• b069c86 transport/ca/localca: remove unused testGenerateKeypair utility
• 0eecfe2 transport/ca/localca: remove uses of deprecated io/ioutil
• 5937a3f transport/ca/localca: remove uses of github.com/kisom/goutils/assert
• 8bd4af2 transport: replace uses of deprecated io/ioutil
• d7e9e5f ubiquity: replace uses of deprecated io/ioutil
• c383f2a use cgo only in darwin builds
• 24b3ec5 use gythialy/golang-cross for snapshot builds
• c9e5b44 whitelist: replace uses of deprecated io/ioutil

Changelog

• ffddf3a Merge pull request #1244 from sevan/patch-1
• d4be5f5 Merge pull request #1245 from sevan/patch-2
• 4e654dd Merge pull request #1246 from sevan/patch-3
• 079aed0 Merge pull request #1249 from cloudflare/nicky/new-db-accessor
• d4488a8 add DB accessor to get unexpired certs by one or more labels
• a9a2c2e add postgres and mysql tests back to CI
• e0c522a add test for GetUnexpiredCertificatesByLabel
• 97e7ff2 doc/api/intro.txt: there are 13 endpoints
• 40209b1 doc/cmd/cfssl.txt: grammar
• d9b0432 doc/cmd/multiroot.txt: Add dbconfig to example

Changelog

• 503b4d7 Merge pull request #1205 from cloudflare/watson/fix-delegation-support
• 81f1f19 Merge pull request #1213 from akamac/patch-1
• e6502bb Merge pull request #1224 from romantomjak/master
• 04def84 Merge pull request #1231 from boranx/readme-go1.18-install
• 7614d6c Merge pull request #1236 from blotus/use-go-embed
• a3eea0c Merge pull request #1239 from cloudflare/nicky/add-gh-actions
• cacf170 Merge pull request #1241 from cloudflare/nicky/bump-crypto
• a8591c3 Support for DelegationUsage extension
• 23c92b0 add github Actions to replace travis
• f1e6594 add health endpoint to docs
• 34ce3de add support for m1 macs
• 7364593 chore: bump golang.org/x/crypto
• 547d051 docs: add go install
• 33661a2 min go version is now 1.16
• 33ed562 remove go.rice dependency
• 3d2d3b5 update Dockerfiles to use go 1.16
• bba3a20 update release make target to use go 1.18
• 9ca1d0a use go:embed

Changelog

87f86f1 Add loglevel flag for multiroot-ca
29ae05f Merge pull request #1189 from cloudflare/nicky/fix-coreos-mod-rename
1f29b04 Merge pull request #1191 from Rutori/loglevel-multiroot-ca
f4208c6 Merge pull request #1195 from BowonY/bowon/avoid-select-all
b2552ca fix upgrading transitive coreos dependency breakage
19c09ff pick columns to get revoked/unexpired certs
e582ed4 remove -u flag from readme, link to releases
bea2d3d remove old go versions from travis

Changelog

9f1ff97 Add Power Support ppc64le
7f46009 Add documentation for API health endpoint
152fb8b Add http response close in client post function
38b8240 Added support for general OID names in CSRs
7a59a7d Allow users to use custom HTTP client
a22fd94 Fix spelling
b156a8c Fix tests and add OID test
5628e97 Merge pull request #1 from benbuzbee/benbuz/tests
c1bf7b9 Merge pull request #1119 from jbampton/fix-spelling
816bb92 Merge pull request #1141 from nickysemenza/add-docker-push
aebbc13 Merge pull request #1143 from nickysemenza/add-go-1.15
9ccff9a Merge pull request #1145 from AshleyPoole/ash/add-health-api-doc
a538700 Merge pull request #1151 from nagesh4193/master
c75db4f Merge pull request #1156 from mayocream/master
6dd12c2 Merge pull request #1157 from mayocream/patch-1
23b638f Merge pull request #1160 from orangepizza/zlint_upgrade
9f7129a Merge pull request #1163 from akgmartin/master
3cc617f Merge pull request #1164 from grongor/dont-use-default-http-client
57882e0 Merge pull request #1170 from qinghai5060/fixErrorCheck
b1512a1 Merge pull request #1172 from aklyachkin/master
6eb1640 Merge pull request #1173 from iguanesolutions/revoke_leak
c6f04ed Merge pull request #1174 from nickysemenza/go-metrics-prometheus
2215630 Merge pull request #1175 from chienfuchen32/patch-1
0707dc7 Merge pull request #1181 from myokoyama28/fix-certadd
6152bbb add Docker Hub push to release make target
84e7ff5 chore(multirootca): replace deprecated go-metrics with prometheus
5c037eb chore: add go 1.15 to travis
f712ad9 copy over ca-bundle and int-bundle testdata from cloudflare/cfssl_trust
1c75260 fix error check when check signature
ea20c62 fix lint errors
6b41bfc fix serve_test.go
763faa7 fix: cfssl provider support SAN URI
d103ea1 format json indent
9af9204 make certadd available
f247e5b revoke: fix connection leak
9b27d0d support for E attribute in CSR
57d4044 trigger
c90849d update zlint to v3.0.0

Breaking Changes

Users of the certdb functionality must run database 002 migrate prior to upgrading to v1.5.0 or earlier. Migrates are available for all 3 supported databases: PostgreSQL, MySQL, and SQLite

Changelog

f30ae6a Add go 1.14 to the CI (#1092)
c7e13ae Add support for s390x in travis.yml
beeced8 Allowing CSR to take CRL url as input which can then be used on a certificate
44db4a7 Cloud_f_lare (#1070)
10ed8da Correctly check for different golang versions #1076 (#1083)
34885de Document revocation parameter formats
7c8e501 Fix 'TestNewMutualTLSServer' test for go1.14 #1075 (#1091)
1b44b48 Fix race condition in revoke
4468af6 Fix readme still referencing deleted doc file
1fb9b90 Fix typo and go fmt this file
87a2fe7 Ignore EC parameters when parsing private keys
828c23c Merge pull request #1065 from linux-on-ibm-z/test-s390x-pr
6449172 Merge pull request #1073 from PeterLincsafe/master
ca392c0 Merge pull request #1100 from gzzchh/patch-1
2916a1f Merge pull request #1111 from cpu/cpu-temp-fix-bundle-test
8fb5413 Merge pull request #1112 from RocketPuppy/patch-1
efd6a76 Merge pull request #1128 from huiyifyj/fix-typo
046b174 Merge pull request #1129 from mitalirawat/mitali/SECENG-8092
8e907d3 Merge pull request #1132 from asayyah/master
d1be3c2 Merge pull request #1135 from nickysemenza/fix-null-commonname
d6ad84e Merge pull request #1136 from nickysemenza/fix-null-commonname
e905e91 Merge pull request #1137 from hugoboos/update-zlint
e9f28f7 Replace pkg.cfssl.org with 'Packages' tab (#1050)
f1bc990 Updated github.com/lib/pq to v1.3.0 (#1086)
6b49bea add copy_extensions configuration to local signer to allow (#1082)
d384631 bundler: temporarily remove leafRSA3072 testcases.
e45ead2 deps: update /x/crypto, fix Go 1.13 test breakage. (#1081)
8090bce feat(authsign): store additional metadata/fields in certdb (#1126)
e8f9337 fix(certdb): allow reading other null columns (part 2 of #1135)
c7426df fix(certdb): use sql.NullString for CertificateRecord.CommonName
abef926 local/signer: use zmap/zlint v2.0.0, add filtering. (#1080)
ff9470e typo fix of json
a0fb609 update dependency zlint to 2.2.1

Changelog

acbed0a Add make targets for building .deb and .rpm packages
7c2aa53 Add missing sqlite import
49924c4 Build staticly with musl for better compatibility
1bfc946 Merge pull request #1 from cloudflare/master
358fd07 Merge pull request #1052 from cloudflare/cbroglie/pkg-deb-rpm
ebe0199 Merge pull request #1054 from dsix-work/musl-builds
67aae94 Merge pull request #966 from andrewheberle/patch-1
69fa54a Update goreleaser tag to musl version

Changelog

9f1008d Drop the slow macOS build
ac360f2 Fix bug causing selfsign to ignore the default profile
c4ed0e4 Fix formatted logging calls.
27c56f6 Fix typo of genkey to gencsr
db14316 Gopkg: update zlint/zcrypto to latest.
5fc50ce Merge pull request #1018 from cloudflare/cbroglie/1.3.4
633726f Merge pull request #1022 from QuLogic/log-format
b1ec8c5 Merge pull request #1025 from cpu/cpu-bump-zlint-dep
d4e8552 Merge pull request #1027 from cpu/cpu-go-one-dot-twelve-plus
1a911ca Merge pull request #1030 from ashemedai/master
40f4f51 Merge pull request #1044 from cloudflare/cbroglie/selfsign
2318616 Merge pull request #1047 from cloudflare/cbroglie/modules
d9af611 Merge pull request #1048 from cloudflare/cbroglie/goreleaser
aa34253 Merge remote-tracking branch 'cf/master' into cpu-bump-zlint-dep
ee73190 Migrate to Go modules
ce0e294 Support building/releasing binaries with goreleaser
0338350 project: require Go 1.12.x
df5c37b review: fix local signer TestLint unit test.

Changelog

9f1008d Drop the slow macOS build
ac360f2 Fix bug causing selfsign to ignore the default profile
c4ed0e4 Fix formatted logging calls.
27c56f6 Fix typo of genkey to gencsr
db14316 Gopkg: update zlint/zcrypto to latest.
5fc50ce Merge pull request #1018 from cloudflare/cbroglie/1.3.4
633726f Merge pull request #1022 from QuLogic/log-format
b1ec8c5 Merge pull request #1025 from cpu/cpu-bump-zlint-dep
d4e8552 Merge pull request #1027 from cpu/cpu-go-one-dot-twelve-plus
1a911ca Merge pull request #1030 from ashemedai/master
40f4f51 Merge pull request #1044 from cloudflare/cbroglie/selfsign
2318616 Merge pull request #1047 from cloudflare/cbroglie/modules
aa34253 Merge remote-tracking branch 'cf/master' into cpu-bump-zlint-dep
ee73190 Migrate to Go modules
ce0e294 Support building/releasing binaries with goreleaser
0338350 project: require Go 1.12.x
df5c37b review: fix local signer TestLint unit test.