Releases: Venafi/vcert-python
Releases · Venafi/vcert-python
Adds retire functionality to TLSPDC and TLSPC
What's Changed
- Adds retire certificate functionality to TLSPDC and TLSPC. Contributed by @Pmaraveyias
- fix(ruamel): upgrades ruamel version on setup.py to 0.18.5
Fixes issue with Entrust CA on VaaS
Fixes an issue whereby requesting a certificate in VaaS to a Certificate Issuing Template that uses Entrust CA throws an error.
Under some conditions Entrust CA may take too long to issue certificate, which causes VaaS to send 201 Created response with no certifcateIds
. This is expected behavior and requires the sdk to poll for the certificate request until the status is ISSUED
or FAILED
Adds certificateType AUTO to TPP certificate request
- Upgraded ruamel.yaml dependency to 0.18.5
- Added certificateType: AUTO to TPP certificate requests (courtesy of @Pmaraveyias)
Upgrade cryptography library to patch security issue
- Fixed #124: Fixed an issue where adding a Certificate Issuing Template to an existing Application failed
- Upgraded cryptography dependency to 40.0.2 to cover a security risk CVE-2023-23931
- Removed orgUnit field from AppDetails, as Venafi as a Service dropped the use of the field
A lot of enhancements!
- Support for contacts/owners when creating a policy on both TPP and VaaS
- Support for legacy PKCS1 format on private keys when requesting a certificate
- Support for SANs: email, IP, URI when creating a policy on VaaS
- Ability to disable Subject fields on VaaS: organizations, org units, localities, states, countries
- Support for EC private keys on VaaS
- Support for Service generated related attributes on VaaS
Dropped support for Python 2
- Dropped for support for Python 2 as it has reached end of life. New baseline is Python 3.6 and higher.
- Added integration with sonarcloud for test coverage.
- Added version history file.
- Added test cases for json/yaml file parsing.
- Minor issues fixed.
Add ability to fill empty request attributes with zone/policy default values
- Added the ability to fill up the empty attributes of the certificate request with the default values of the policy/zone where the certificate is going to be created.
Supported values:organization
,organizational units
,locality
,state
,country
Added missing dependencies for pypi
- Added the missing dependency to pynacl.
Support for Service Generated CSR on VaaS
- Added support for generation of CSR directly on VaaS platform. Renew operation does not include this feature as of now.
SSH CA Public Key Data retrieval
- Added support for retrieving the public key data and principals of an SSH Certificate Authority on TPP.