What's Changed

Note: Minimum Go version bumped to 1.27. ML-DSA support requires the crypto/mldsa package introduced in Go 1.27.

Functionality

• Added ML-DSA support by @tsaarni in #171
• Ed25519 key usage must not default to keyEncipherment. by @tsaarni in #172, #174
• Allow key type and key usages to be case-insensitive in yaml manifest by @tsaarni in #175

Version bumps

• Bump the codeql-action group with 3 updates by @dependabot[bot] in #168
• Bump softprops/action-gh-release from 3.0.2 to 3.0.3 by @dependabot[bot] in #169

Full Changelog: v0.12.0...v0.13.0

What's Changed

Functionality

• Allow Certificate.WritePEM with empty filename to skip writing either key or cert by @tsaarni in #129
• Add certyaml -help-yaml for built-in syntax reference by @tsaarni in #163
• Bump min required version to Go 1.26 track and remove deprecated Go API usage by @tsaarni in #167

Version bumps

• Bump github/codeql-action from 4.32.4 to 4.32.5 by @dependabot[bot] in #124
• Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #125
• Bump github/codeql-action from 4.32.5 to 4.32.6 by @dependabot[bot] in #126
• Bump softprops/action-gh-release from 2.5.0 to 2.6.1 by @dependabot[bot] in #128
• Bump github/codeql-action from 4.32.6 to 4.34.1 by @dependabot[bot] in #130
• Bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot[bot] in #131
• Bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot[bot] in #132
• Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #134
• Bump softprops/action-gh-release from 2.6.1 to 3.0.0 by @dependabot[bot] in #133
• Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #139
• Bump github/codeql-action from 4.35.2 to 4.36.1 by @dependabot[bot] in #140
• Bump github/codeql-action from 4.36.1 to 4.36.2 by @dependabot[bot] in #141
• Bump softprops/action-gh-release from 3.0.0 to 3.0.1 by @dependabot[bot] in #142
• Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #143
• Bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in #144
• Bump softprops/action-gh-release from 3.0.1 to 3.0.2 by @dependabot[bot] in #151
• Bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #152
• Bump github/codeql-action/autobuild from 4.36.2 to 4.37.1 by @dependabot[bot] in #153
• Bump github/codeql-action/analyze from 4.36.2 to 4.37.1 by @dependabot[bot] in #154
• Bump github/codeql-action/init from 4.36.2 to 4.37.1 by @dependabot[bot] in #155
• Bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #159
• Have dependabot update codeql-action in a group to avoid errors by @tsaarni in #160
• Bump the codeql-action group with 3 updates by @dependabot[bot] in #161
• Bump the codeql-action group with 3 updates by @dependabot[bot] in #162
• Bump the codeql-action group with 3 updates by @dependabot[bot] in #165
• Bump github.com/stretchr/testify from 1.11.1 to 1.12.0 by @dependabot[bot] in #164
• Bump github.com/stretchr/testify from 1.12.0 to 1.12.1 by @dependabot[bot] in #166

Full Changelog: v0.11.0...v0.12.0

What's Changed

New Functionality:

• Add support for email SAN by @tsaarni in #119
• Add support for adding custom extensions in Go API by @tsaarni in #121
• Add OCSP server URI by @tsaarni in #123

Other Updates

• Remove trivy scan due to frequent errors by @tsaarni in #73
• Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot[bot] in #74
• Update go, golangci-lint and deps by @tsaarni in #78
• Bump github/codeql-action from 2 to 3 by @dependabot[bot] in #79
• Bump actions/checkout from 4 to 5 by @dependabot[bot] in #80
• Bump github/codeql-action from 3.29.8 to 3.29.10 by @dependabot[bot] in #81
• Bump github/codeql-action from 3.29.10 to 3.29.11 by @dependabot[bot] in #82
• Bump github.com/stretchr/testify from 1.10.0 to 1.11.0 by @dependabot[bot] in #83
• Bump github/codeql-action from 3.29.11 to 3.30.0 by @dependabot[bot] in #84
• Bump github.com/stretchr/testify from 1.11.0 to 1.11.1 by @dependabot[bot] in #85
• Bump softprops/action-gh-release from 2.3.2 to 2.3.3 by @dependabot[bot] in #86
• Bump github/codeql-action from 3.30.0 to 3.30.1 by @dependabot[bot] in #87
• Bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in #88
• Bump github/codeql-action from 3.30.1 to 3.30.3 by @dependabot[bot] in #89
• Bump softprops/action-gh-release from 2.3.3 to 2.3.4 by @dependabot[bot] in #92
• Bump github/codeql-action from 3.30.3 to 3.30.6 by @dependabot[bot] in #91
• Bump github/codeql-action from 3.30.6 to 4.30.8 by @dependabot[bot] in #93
• Bump softprops/action-gh-release from 2.3.4 to 2.4.1 by @dependabot[bot] in #94
• Bump github/codeql-action from 4.30.8 to 4.31.0 by @dependabot[bot] in #96
• Bump github/codeql-action from 4.31.0 to 4.31.2 by @dependabot[bot] in #97
• Bump actions/checkout from ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 to 71cf2267d89c5cb81562390fa70a37fa40b1305e by @dependabot[bot] in #98
• Bump softprops/action-gh-release from 2.4.1 to 2.4.2 by @dependabot[bot] in #99
• Bump github/codeql-action from 4.31.2 to 4.31.3 by @dependabot[bot] in #100
• Bump actions/setup-go from 6.0.0 to 6.1.0 by @dependabot[bot] in #101
• Bump softprops/action-gh-release from 2.4.2 to 2.5.0 by @dependabot[bot] in #102
• Bump github/codeql-action from 4.31.3 to 4.31.6 by @dependabot[bot] in #103
• Bump actions/checkout from 6.pre.beta to 6.0.0 by @dependabot[bot] in #104
• Bump github/codeql-action from 4.31.6 to 4.31.7 by @dependabot[bot] in #105
• Bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #106
• Fix pinned action hashes by @tsaarni in #109
• Bump github/codeql-action from 4.31.9 to 4.31.10 by @dependabot[bot] in #110
• Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #111
• Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #112
• Bump github/codeql-action from 4.31.10 to 4.32.0 by @dependabot[bot] in #113
• Bump github/codeql-action from 4.32.0 to 4.32.1 by @dependabot[bot] in #114
• Bump github/codeql-action from 4.32.1 to 4.32.2 by @dependabot[bot] in #115
• Bump github/codeql-action from 4.32.2 to 4.32.3 by @dependabot[bot] in #116
• Bump github/codeql-action from 4.32.3 to 4.32.4 by @dependabot[bot] in #117

Full Changelog: v0.10.0...v0.11.0

What's Changed

New Functionality

• Added support for generating Ed25519 certs by @tsaarni in #66
• Added support for setting CRL distribution point URI by @tsaarni in #67
• Added convenience getters for certificate and private key for single-value use by @tsaarni in #71

Bug Fixes

• Fix certificate manifest state calculation by @tsaarni in #51

Other Updates

• Bump github.com/stretchr/testify from 1.8.2 to 1.9.0 by @dependabot in #39, #40, #58
• Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 by @dependabot in #44
• Bump github.com/go-asn1-ber/asn1-ber from v1.5.4 to v1.5.5 by @tsaarni in #49
• Replace deprecated CRL methods by @tsaarni in #50

Full Changelog: v0.9.2...v0.10.0
certyaml-linux-amd64.tar.gz

What's Changed

• Bump golang.org/x/mod from 0.9.0 to 0.10.0 by @dependabot in #38
• Bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by @dependabot in #39
• Bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by @dependabot in #40
• Bump golang.org/x/mod from 0.10.0 to 0.11.0 by @dependabot in #41
• Bump golang.org/x/mod from 0.11.0 to 0.12.0 by @dependabot in #42
• bump trivy-action by @tsaarni in #46
• Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 by @dependabot in #44
• Bump golang.org/x/mod from 0.12.0 to 0.14.0 by @dependabot in #45
• Fix race when generation of certificate or CRL can be called from multiple goroutines by @tsaarni in #48

Full Changelog: v0.9.2...v0.9.3

What's Changed

• update x500dn module to a versioned release by @tsaarni in #31
• remove deprecated CRL api calls by @tsaarni in #35, #36
• Add arm64 MacOS binary to release artifacts by @tsaarni in #37

Full Changelog: v0.9.1...v0.9.2

What's Changed

• Use filename as key in the hashes map by @nsimons in #28
• Replaced deprecated ioutil calls by @tsaarni in #24

New Contributors

• @nsimons made their first contribution in #28 🥳

Full Changelog: v0.9.0...v0.9.1

What's Changed

• Allow empty CRLs to be created by @tsaarni in #22

Full Changelog: v0.8.0...v0.9.0

Changes in this release:

• End-entity certificates now include certificate chain. Chain is appended when certificate is issued by sub-CA and it includes CA certificates up to, but not including root CA. The chains are included in certificate PEM files and tls.Certificate structs when using the Go API.

Changes in this release:

• Use strict YAML parsing to bail out early when manifest contains unknown fields.
• Added support for certificate fields: extended key usage and serial number.
• Added support for revoking certificates by generating CRL file with serial numbers of revoked certificates.