Skip to content

0.7.0 alpha

Pre-release
Pre-release
Compare
Choose a tag to compare
@MatthiasValvekens MatthiasValvekens released this 12 Dec 10:27
· 122 commits to master since this release
0.7.0
6c262af

This update adds the following features:

  • Attribute certificate support.
  • A new subcommand (certomancer seance) to interact with Certomancer's mock OCSP responders from the CLI.

In addition, there are a number of miscellaneous tweaks & bug fixes:

  • Fix OCSP request handling for requests without the nonce extension.
  • Avoid leaving the extensions field in an OCSP response empty when there are no extensions, and just omit it entirely in that case.
  • Improved service merging when using existing PKI architectures as templates.
  • Detect instances of self-referential issuer-cert and throw immediately instead of blowing up the stack.
  • Be more careful not to pollute certificate templates by storing template information before deriving default values for entries that depend on other entries.