Skip to content

v/0.100.0

Compare
Choose a tag to compare
@ctz ctz released this 26 Jul 12:15
· 505 commits to main since this release

Release notes

First release of rustls-webpki crate.

  • Allow verification of certificates with IP address subjectAltNames.
    EndEntityCert::verify_is_valid_for_subject_name was added, and
    EndEntityCert::verify_is_valid_for_dns_name was removed.
  • Make Error type non-exhaustive.
  • Reject non-contiguous netmasks in IP address name constraints.
  • Name constraints of type dNSName and iPAddress now work and are tested.
    directoryName name constraints are not implemented and will prevent
    path building where they appear.
  • Relax requirement that serial numbers are positive to deal with issuers
    that cannot generate correct ASN.1 but nevertheless persist in doing so.

What's Changed

  • Modernize and update metadata for rustls fork by @djc in #1
  • Add critical extensions test by @stormshield-guillaumed in #13
  • Appease clippy explicit-auto-deref by @ctz in #15
  • Use tarpaulin llvm-cov for coverage by @ctz in #16
  • Defend --no-default-features by @ctz in #17
  • IP address support by @ctz in #5
  • Enforce unreachable_pub to clarify visibility by @djc in #22
  • Prepare README and fork versions by @ctz in #25
  • Improve name constraints testing and fix bugs found by @ctz in #18
  • Restore webpki-0.22 naming and enact deprecations by @ctz in #27
  • Declare MSRV for Clippy by @xfix in #32
  • Allow validating V3 certificates that have no extensions by @fspreiss in #34
  • Update GitHub Actions by @nickelc in #33
  • cert: relax enforcing positive serial numbers. by @cpu in #36
  • Prepare 0.100.0 by @ctz in #37

New Contributors

Full Changelog: 0.17.0...v/0.100.0