rcgen
has joined the umbrella of the rustls organization.- Support for retrieving signature algorithm from
KeyPair
s. Contributed by tindzk. - Fix for writing certificate signing requests (CSRs) with custom extensions from parameters without subject alternative names.
- Support for certificate CRL distribution points extension.
- Corrected OID for
ExtendedKeyUsagePurpose::Any
. Contributed by jgallagher. - Support for creating certificate revocation lists (CRLs).
- Make botan a dev-dependency again. Contributed by mbrubeck.
- Parse IP-address subject alternative names. Contributed by iamjpotts.
- Emit platform-apropriate line endings. Contributed by frjonsen.
- Support larger serial numbers. Contributed by andrenth.
- Parse more certificate parameters. Contributed by andrenth.
- Output
SanType::IpAddress
when callingCertificateParams::new
orgenerate_simple_self_signed
. Contributed by rukai. - Update pem to 2.0. Contributed by koushiro.
- Update x509-parser to 0.14.
- Increase minimum supported Rust version to 1.58.1.
- Update edition to 2021.
- Change
IsCa
enum to haveNoCa
andExplicitNoCa
andCa(...)
. Contributed by doraneko94.
- yanked due to breaking API changes, see 0.10.0 instead.
- Add a
KeyPair::serialized_der
function. Contributed by jean-airoldie.
- Update x509-parser to 0.13. Contributed by matze.
- Change edition to 2018 in order to support Rust 1.53.0.
- Add RemoteKeyError for usage by remote keys.
- Support non utf8 strings. Contributed by omjadas.
- Switch from chrono to time. Contributed by connec.
- Update edition to 2021.
- Update pem to 1.0.
- Update x509-parser to 0.12.
- Bugfix release to make Certificate
Send
andSync
again.
- Use public key as default serial number. Contributed by jpastuszek.
- Add support for
PKCS_RSA_SHA512
andPKCS_RSA_SHA384
signature algorithms. - Add support for the keyUsage extension. Contributed by jaredwolff.
- Ability to use remote keys. Contributed by daxpedda.
- Add getters for the criticality, content, and
oid_components
of aCustomExtension
- Update yasna to 0.4
- Implement some additional traits for some of the types. Contributed by zurborg.
- Adoption of intra-doc-links
- Addition of the ability to zero key pairs. Contributed by didier-wenzek.
- Switch CI to Github Actions.
- Strip nanos from
DateTime
as well. Contributed by @trevor-crypto.
- Turn
botan
back into a dev-dependency. Contributed by @nthuemmel. - Fix signing when CA uses different signing algorithm . Contributed by @nthuemmel.
- Add
KeyPair::from_der
- Add botan based test to the testsuite
- Update x509-parser to 0.9. Contributed by @djc.
- Ability to create certificates from CSRs. Contributed by @djc.
- Add some more
DnType
s:OrganizationalUnitName
,LocalityName
,StateOrProvinceName
- Add
remove
function toDistinguishedName
- Add ability to specify
NameConstraints
- Improve spec compliance in the
notBefore
/notAfter
fields generated by usingUTCTime
if needed
- Fix regression of
0.8.1
that generated standards non compliant CSRs and broke Go toolchain parsers. Contributed by @thomastaylor312.
- Disable
chrono
default features to get rid of time crate - Improve
openssl
tests to do a full handshake with the generated cert
- Fix non-standard-compliant SubjectKeyIdentifier X.509v3 extension format
- BasicConstraints X.509v3 extension is now marked as critical
- Use RFC 7093 to calculate calculate subject key identifiers
- Add option to insert AuthorityKeyIdentifier X.509v3 extension into non-self-signed certificates
- Update to x509-parser 0.7
- Update to pem 0.7
- Correct number of nanoseconds per second. Contributed by @samlich.
- Adoption of the
non_exhaustive
feature in the API
- Bugfix release for ip address subject alternative names. Turns out they aren't CIDR subnets after all :)
- Support for email and cidr subnet (ip address) subject alternative names
- Support for the extended key usage extension
- Update to x509-parser 0.6
- Update to ring 0.16 and webpki 0.21
- Update to x509-parser 0.5
- Expose an API to get the raw public key of a key pair
- Allow inspection of
DistinguishedName
via iterators and get functions - Fix a bug in
is_compatible
not saying false. Contributed by @fzgregor. - Extend the public interface of
KeyPair
. Contributed by @fzgregor.
- Support for user supplied keypairs. Contributed by @fzgregor.
- Support for signing with user supplied CA certificates. Contributed by @fzgregor.
- Correct a bug with distinguished name serialization (PR link). Contributed by @fzgregor.
- Addition of limited (no key generation) RSA support
- Proper error handling with
Result
and our own Error type - Improvements of the testsuite
- Ability to disable the dependency on the
pem
crate - Support for creating CSRs (Certificate Signing Requests). Contributed by @djc.
- Ability to specify custom extensions for certificates
- Ability to craft
acmeIdentifier
extensions - Update yasna to 0.3.0
- Support for CA certificate generation. Contributed by @djc.
- Support for certificate signing. Contributed by @djc.
- Support for ED25519 certificates
- Support for SHA-384 certificates
- API cleanups (Future proofing CertificateParams, public constant renames)
- Updated to pem 0.6
- Updated to ring 0.14.0
Initial release. Ability to generate self-signed ECDSA keys.