v/0.100.0
Release notes
First release of rustls-webpki
crate.
- Allow verification of certificates with IP address subjectAltNames.
EndEntityCert::verify_is_valid_for_subject_name
was added, and
EndEntityCert::verify_is_valid_for_dns_name
was removed. - Make
Error
type non-exhaustive. - Reject non-contiguous netmasks in IP address name constraints.
- Name constraints of type dNSName and iPAddress now work and are tested.
directoryName name constraints are not implemented and will prevent
path building where they appear. - Relax requirement that serial numbers are positive to deal with issuers
that cannot generate correct ASN.1 but nevertheless persist in doing so.
What's Changed
- Modernize and update metadata for rustls fork by @djc in #1
- Add critical extensions test by @stormshield-guillaumed in #13
- Appease clippy explicit-auto-deref by @ctz in #15
- Use
tarpaulinllvm-cov for coverage by @ctz in #16 - Defend --no-default-features by @ctz in #17
- IP address support by @ctz in #5
- Enforce unreachable_pub to clarify visibility by @djc in #22
- Prepare README and fork versions by @ctz in #25
- Improve name constraints testing and fix bugs found by @ctz in #18
- Restore webpki-0.22 naming and enact deprecations by @ctz in #27
- Declare MSRV for Clippy by @xfix in #32
- Allow validating V3 certificates that have no extensions by @fspreiss in #34
- Update GitHub Actions by @nickelc in #33
- cert: relax enforcing positive serial numbers. by @cpu in #36
- Prepare 0.100.0 by @ctz in #37
New Contributors
- @stormshield-guillaumed made their first contribution in #13
- @xfix made their first contribution in #32
- @fspreiss made their first contribution in #34
- @nickelc made their first contribution in #33
Full Changelog: 0.17.0...v/0.100.0