Skip to content

Latest commit

 

History

History
557 lines (321 loc) · 30.6 KB

CHANGELOG.md

File metadata and controls

557 lines (321 loc) · 30.6 KB
Raw

Changelog

All notable changes to this project will be documented in this file. Each new release typically also includes the latest modulesync defaults. These should not affect the functionality of the module.

v4.1.0 (2024-10-01)

Full Changelog

Implemented enhancements:

  • Pass openssl commands as an array #225 (ekohl)

Fixed bugs:

  • Correctly pass secrets via environment variables to avoid them being visible in process lists #228 (ekohl)

v4.0.0 (2024-07-19)

Full Changelog

Breaking changes:

Implemented enhancements:

Fixed bugs:

v3.2.0 (2024-07-18)

Full Changelog

Implemented enhancements:

v3.1.1 (2024-07-11)

Full Changelog

Fixed bugs:

  • r10k generate types fails #197
  • export/{pem_cert,pem_key,pkcs12}: passin, passout: use shellquote() instead of single quotation marks #199 (pavelkovtunov)
  • Add missing require so that generate types works. #198 (ncstate-daniel)
  • fix logic bug with extkeyusage and altnames #195 (rtib)

v3.1.0 (2024-05-02)

Full Changelog

Implemented enhancements:

Fixed bugs:

  • Release 3.0.0 broken #178
  • Fix handling of request extensions in x509_cert type and provider #180 (rtib)
  • Fix config template issues and add some improvements #179 (rtib)

v3.0.0 (2024-03-19)

Full Changelog

Breaking changes:

  • Require puppetlabs-stdlib 9.x #165 (smortex)
  • moves config management to config provider for X509 certificate; moves certificate from v1 to v3 #164 (zilchms)
  • Drop Puppet 6 support #163 (zilchms)
  • add puppet7 support; namespace all functions #162 (zilchms)
  • enable single config file support #159 (zilchms)
  • Enlarge key size based on new security requirement #143 (Vampouille)

Implemented enhancements:

  • move from own regex to stdlib ip type adding ipv6 support for SANS #166 (zilchms)
  • refactor x509_request to be consistent with x509_cert provider #155 (zilchms)
  • add ability to certificate provider to get signed against a CA cert #153 (zilchms)
  • Allow cert_file to download certificates via https #146 (rtib)

Fixed bugs:

Closed issues:

  • Move on from puppet6 #161
  • Bug/Maintenance in/for configuration templates #158

Merged pull requests:

v2.0.1 (2022-03-09)

Full Changelog

Fixed bugs:

  • incorrect behaviour of cert_aia_caissuers if file does not exists #126 (rtib)

Closed issues:

  • openssl_version fact resolves to nil #134

Merged pull requests:

2.0.0 (2021-05-04)

Full Changelog

Breaking changes:

  • update pdk, dependencies and requirements #125 (rtib)

Implemented enhancements:

  • add cert_file type #124 (rtib)
  • Allow DER certificates to be converted to PEM format #122 (n3mawashi)
  • function to extract caIssuers URL from authorityInfoAccess extension #120 (rtib)
  • Allow openssl_version regex to match more FIPS versions #112 (runejuhl)

Closed issues:

  • Parameters for openssl.cnf #41

Merged pull requests:

  • readd dependencies to class to generate configs #119 (trefzer)
  • add autorequire for file path to all defined types #117 (trefzer)
  • add class to generate configs #116 (trefzer)
  • add support for OpenBSD #115 (trefzer)
  • fix spec test, failing Time.now is not executed in same second #114 (trefzer)
  • allow for numeric owner and group IDs for file resources #113 (kenyon)

1.14.0 (2020-03-05)

Full Changelog

Breaking changes:

  • in_pass, out_pass and chaincert params to Optional[String] #111 (raphink)

Implemented enhancements:

Closed issues:

  • 1.13.0 introduced bug in openssl::export::pkcs12 #110

1.13.0 (2020-01-07)

Full Changelog

Implemented enhancements:

1.12.0 (2019-04-17)

Full Changelog

Implemented enhancements:

  • Add ability to generate Elliptic Curve key pairs #99 (fabbks)

1.11.0 (2019-03-01)

Full Changelog

Implemented enhancements:

  • Ability to generate x509 certificates with extKeyUsage #96 (madchap)
  • Add the x509_extensions directive to support SAN in certificate #89 (johnbillion)
  • Changes to support unencrypted CSRs #84 (WetHippie)

Closed issues:

  • dhparam doesn't work without 'ensure' #90
  • Request for ability to create unencrypted private key #83
  • Can't add SAN records #44

Merged pull requests:

1.10.0 (2017-04-18)

Full Changelog

Breaking changes:

  • Make the $fastmode parameter for openssl::dhparam default to false. #86 (rpasing)
  • Fastmode, Default Keysize increased, path defaults to name #80 (c33s)

Implemented enhancements:

Closed issues:

  • Add "fastmode" for dhparam generation #79
  • Readme for dhparam wrong? #78

1.9.0 (2017-01-10)

Full Changelog

Implemented enhancements:

  • handle refresh (RE: #71) #75 (gaima8)
  • Check if there are matches before returning #74 (raphink)

Closed issues:

  • x509_request doesn't handle refresh #71

Merged pull requests:

  • Error: Unknown authentication type 'dsa' when setting authentication #72 (christophelec)

1.8.2 (2016-08-19)

Full Changelog

1.8.1 (2016-08-19)

Full Changelog

Closed issues:

  • Error "failure to load inifile" resulting in failed Puppet run #63

Merged pull requests:

  • Use Puppet::Util::Inifile instead of Inifile #73 (raphink)

1.8.0 (2016-08-18)

Full Changelog

Merged pull requests:

1.7.2 (2016-06-29)

Full Changelog

Closed issues:

  • dhparam generation fails #58

Merged pull requests:

1.7.1 (2016-03-30)

Full Changelog

Closed issues:

  • Error: Facter: error while resolving custom fact "openssl_version" #62

Merged pull requests:

1.7.0 (2016-03-18)

Full Changelog

Closed issues:

  • Add openssl_version fact #57

Merged pull requests:

1.6.1 (2016-02-22)

Full Changelog

Merged pull requests:

  • Fix failure to load inifile causing Puppet agent to fail. #56 (olavmrk)

1.6.0 (2016-02-18)

Full Changelog

Implemented enhancements:

1.5.1 (2015-11-17)

Full Changelog

Implemented enhancements:

  • packages: switch to stlib ensure_packages() to play nice with other modules which install ca-certificates #52 (josephholsten)
  • Manage ca-certificates package on redhat too #49 (edestecd)

Closed issues:

  • ca-certificates package is available in redhat also #47

1.5.0 (2015-09-23)

Full Changelog

Implemented enhancements:

  • Make it easy to customize cnf/crt/csr/key paths #46 (robbat2)

1.4.0 (2015-09-15)

Full Changelog

Merged pull requests:

1.3.10 (2015-08-21)

Full Changelog

Closed issues:

  • No way to set desired openssl package version #35

Merged pull requests:

1.3.9 (2015-06-26)

Full Changelog

1.3.8 (2015-05-28)

Full Changelog

1.3.7 (2015-05-26)

Full Changelog

1.3.6 (2015-05-26)

Full Changelog

Merged pull requests:

  • Add key_mode/group/owner parameters #45 (robbat2)

1.3.5 (2015-05-25)

Full Changelog

1.3.4 (2015-05-13)

Full Changelog

1.3.3 (2015-05-12)

Full Changelog

1.3.2 (2015-04-27)

Full Changelog

1.3.1 (2015-04-17)

Full Changelog

1.3.0 (2015-04-03)

Full Changelog

Closed issues:

  • Google has depreciated sha1 for certs #36

Merged pull requests:

  • templates/cert.cnf.erb: Use sha256 instead of sha1 by default #43 (lathiat)

1.2.8 (2015-03-24)

Full Changelog

1.2.7 (2015-03-10)

Full Changelog

Merged pull requests:

  • Remove useless ca-certificates file management #38 (ckaenzig)

1.2.6 (2015-02-18)

Full Changelog

1.2.5 (2015-01-19)

Full Changelog

1.2.4 (2015-01-07)

Full Changelog

1.2.3 (2015-01-05)

Full Changelog

1.2.2 (2014-12-18)

Full Changelog

1.2.1 (2014-12-18)

Full Changelog

1.2.0 (2014-12-09)

Full Changelog

1.1.0 (2014-11-25)

Full Changelog

Closed issues:

  • Generating pkcs12 Certificate #33

Merged pull requests:

1.0.1 (2014-11-17)

Full Changelog

1.0.0 (2014-10-20)

Full Changelog

Closed issues:

  • Improve doc to show how to generate password-free certs #30

Merged pull requests:

  • Improvement in doc to show how to generate password-free certs #32 (atxulo)

0.3.2 (2014-09-23)

Full Changelog

0.3.1 (2014-07-04)

Full Changelog

Merged pull requests:

0.3.0 (2014-07-02)

Full Changelog

Closed issues:

  • RANDFILE not correct on ubuntu 12.04.04 #29
  • Add the ability to specify the version of openssl that you want installed #24
  • Push new version to the Forge #22
  • Fix dependency issue with puppetlabs-stdlib (version number wrong) #17
  • creating a cert doesn't include altnames #13

0.2.0 (2014-03-03)

Full Changelog

Closed issues:

  • Replace has_variable? test with simple if @var test in templates/cert.cnf.erb #16
  • incorrect check against undef in default template #15
  • Wrong command called #1

Merged pull requests:

  • Fix bug with x509_Request not having the cnf template present #28 (jrnt30)
  • Document 'group' parameter #27 (pataquets)
  • Add 'group' parameter to x509 certificate. #26 (pataquets)
  • Added certificate signing request dependency on configuration template #25 (tylerwalts)
  • Fix for issue 16 #21 (ghost)
  • Ignore Gemfile.lock #20 (ghost)
  • Deprecation warnings when running rake spec #19 (ghost)
  • Deprecation warning when running bundle install #18 (ghost)
  • Add cnf_tpl param to openssl::certificate::x509. #12 (Sliim)
  • Fix puppet-lint link in README.md #11 (Sliim)
  • Update Modulefile to work with other modules requiring stdlib #10 (LarsFronius)
  • Add x509_cert and x509_csr types and providers #9 (raphink)
  • Export pkcs12 without password #8 (raphink)
  • openssl: added support for various distributions. #5 (mfournier)
  • openssl::export::pkcs12 - new definition. name says it all #3 (cjeanneret)
  • openssl::certificate::x509 - corrected call to script #2 (cjeanneret)

* This Changelog was automatically generated by github_changelog_generator