v1.21.12

Gauntlet Plugins

Bifrost CA's Gauntlet can optionally load Go plugins.
Read more about it on the docs website.
We also use a single global configurable logger.

Switched to Goreleaser for all builds and releases.

What's Changed

• feat: bf ca loads Gauntlets from plugins by @ananthb in #18
• feat: Use a global logger by @ananthb in #19

Full Changelog: v1.21.8...v1.21.12

v1.21.8

Web UI

A new web UI that can create private keys and request certificates from Bifrost Servers.
Deployed to GitHub Pages.

What's Changed

• feat: New command to request a cert from a CA server by @ananthb in #14
• feat: CA creates a http.ServeMux with its routes by @ananthb in #15
• fix: Close output files by @ananthb in #16
• Web UI by @ananthb in #17

Full Changelog: v1.20.0...v1.21.8

v1.20.1

CA ServeMux

CA returns a properly set up http.ServeMux.
It responds to "POST /issue" with CA.ServeHTTP and "GET /namespace" with the namespace string.

v1.20.0

CA Gauntlet

The tinyca.Gauntlet func allows users to customise issued certificates.

What's Changed

• build(deps): bump golang.org/x/net from 0.18.0 to 0.23.0 by @dependabot in #10
• CA Issue templates by @ananthb in #11
• feat: RequestCertificate returns bifrost errors by @ananthb in #12
• feat: Gauntlet func now takes a context by @ananthb in #13

Full Changelog: v1.18.2...v1.20.0

v1.18.0

Standard Key Serialisation Formats

Bifrost private keys will be read and written in PKCS#8, ASN.1 DER form and public keys in PKIX, ASN.1 DER form.

Implemented marshalers and unmarshalers for binary, text, JSON, and DynamoDB.

Binary formats are the ASN.1 DER form and text forms are their PEM encoded representations.
DynamoDB uses binary forms and JSON uses text forms.

Note that SEC.1 EC PRIVATE KEY private keys are still read from in the bf CLI and in the cafiles package for backwards compatibility.

Full Changelog: v1.17.1...v1.18.0

v1.16.10

What's Changed

• Decode url-encoded mtls leaf certificate header from AWS ALB by @PeaceRebel in #9

New Contributors

• @PeaceRebel made their first contribution in #9

Full Changelog: v1.16.9...v1.16.10

v1.16.9

HTTP Error Logs

Log HTTP errors so that we actually know what's going on if things go belly up.

v1.16.8

Local Certificate Issue

Issue certificates locally.

Parse certificate validities from timestamps or offsets from the current time.

Full Changelog: v1.16.7...v1.16.8

v1.16.7

CA Validation

Make CA the default command to better support AWS Lambda zip file deploy.

Create and validate CA cert key usages and basic constraints.

Full Changelog: v1.16.5...v1.16.7

v1.16.5

Tweak flags

CA Configuration