1.3.0

Notice

• Flag --skip-tls-validation is now deprecated. Please use --ca-cert to provide trusted CA(s) if API and/or UAA certificate is signed by an untrusted authority.

New Features

• Values of CA certificates provided when targeting with api or login are now cached. Deleting or updating a referenced file will not affect validation by the CLI.
• TLS trust is now validated for both CredHub and UAA connections on api command. UAA connection trust was previously only validated on login.
• Flag --ca-cert now accepts values in addition to file references [issue #4]
• Flag --ca-cert for commands api and login can now be set via CREDHUB_CA_CERT environment variable [issue #4]
• Flag --server for commands api and login can now be set via CREDHUB_SERVER environment variable

1.2.0

Notice

• Flag --skip-tls-validation is now deprecated. Please use --ca-cert to provide trusted CA(s) if API and/or UAA certificate is signed by an untrusted authority.

New Features

• Ability to import credentials from a file
• CLI now authenticates automatically if targeted and client credentials exist in the environment

1.1.0

Compatibility

• Please note that CredHub CLI will no longer release in tandem with CredHub server. CLI features that depend upon a specific server version number will be referenced in the release notes. If you encounter an error like The request includes an unrecognized parameter..., this most likely indicates that you are attempting to exercise a feature that is not supported in your targeted server version.

Notice

• Flag --skip-tls-validation is now deprecated. Please use --ca-cert to provide trusted CA(s) if API and/or UAA certificate is signed by an untrusted authority.

New Features

• Ability to set stored CA by name for user-provided certificates [requires server v1.0.2]
• --token flag now refreshed the token value to ensure a valid token is provided

1.0.0

Compatibility

• CLI version 1.0.0 is only compatible with server version 1.0.0+

Notice

• Set and generate commands no longer contain a default type. You must now explicitly set a type for clarity.
• Flag --skip-tls-validation is now deprecated. Please use --ca-cert to provide trusted CA(s) if API and/or UAA certificate is signed by an untrusted authority.

New Features

• Credentials can now be retrieved by ID
• Trusted CA can be provided with flag --ca-cert with commands api and login
• Request lacking command or with invalid command now returns help menu

0.8.0

Compatibility

• CLI version 0.8.0 is only compatible with server version 0.7.0+

Notice

• 'Password' type value is now set with --password flag (previously used --value)

New Features

• 'User' type credentials can now be set, generated and retrieved
• Full API response is now returned in yaml format in CLI response
• Authentication via client credential grants now supported

Bug fix

• Extended key usage 'timestamping' no longer provides error

0.7.0

CLI version 0.7.0 is only compatible with server version 0.6.x+

Notice -

• Password generation parameter 'hex-only' has been removed

Known Issues -

• Management of 'user' type credentials is not supported

0.6.0

CLI version 0.6.0 is only compatible with server version 0.6.x

New Features -

• Ability to set JSON-type credentials
• Responses now returned in yaml-like format to support unstructured data of JSON-type credentials

Known Issues -

• Credential values containing non-yaml formant special characters are returned in single quotes. The quotes are a formatting concern and not part of the credential value. For example, *jJs^%So will return as '*jJs^%So'

0.5.1

Bug fix -

• Invalid type specification provides appropriate error

0.5.0

CLI version 0.5.0 is only compatible with server version 0.5.0

New Features -

• CA set and generate operations are now done in same namespace as credentials
• Ability to generate intermediate CA certificates
• Ability to define key usage extension values
• Update password generation defaults - length: 30, special characters: excluded

Breaking changes -

• Due to the change in special character default, an error will occur when regenerating previously generated credentials that used the exclude_special=true setting. You may generate the value again with the desired parameters to resolve this issue.

0.4.0

CLI version 0.4.0 is only compatible with server version 0.4.0

New Features -

• Regenerate credentials in same form as previously generated
• Define extended key usage extension values when generating certificates
• Accurately reflects CLI and targeted server version
• Modified to conform to new CredHub credentials API