v0.4.29

Changelog

Other Work

• 21b0d3c: accept any key usages (@johnabass)

v0.4.28

Changelog

Other Work

• a879f70: Mark time before the notBefore time as expired as well as after the notAfter time. (@schmidtw)
• 356930f: log trust values from configuration on startup (@johnabass)

v0.4.27

Changelog

Other Work

• c3ad63e: moved zap-x509 integration to its own package; log individual certificate verification errors (@johnabass)
• 039fc7b: reordered fields for more easy reading (@johnabass)
• 491e51d: updated trust defaults (@johnabass)

v0.4.26

Changelog

Other Work

• a7d30e0: add clientCertificates section to sample configuration (@johnabass)
• dbb2661: added tlsState to every log message (@johnabass)
• b35e293: added trust output to new token generation (@johnabass)
• 70bbdb3: always create a certificate claim builder (@johnabass)

v0.4.25

Changelog

Other Work

• eb6a4f9: allow sane default trust levels (@johnabass)
• 51222e0: custom trust levels based on the disposition of client certificates (@johnabass)
• 4a1ff44: remove trust from these configurations (@johnabass)
• c1a4a10: take the highest trust level in situations where a trusted cert isn't found (@johnabass)

v0.4.24

Changelog

Other Work

• 8dd765d: refactored tls configuration to better support client auth types (@johnabass)
• 2072500: removed PeerVerifier; added Mtls as a configuration section (@johnabass)

v0.4.23

Changelog

Other Work

• 40ab59f: change cert logic to set a trust of 1000 if any parseable peer certificates are presented (@johnabass)

v0.4.22

Changelog

Other Work

• 9e63a67: added user-agent and the sallust default fields to the request logger (@johnabass)

v0.4.21

Changelog

Other Work

• 7497e40: added a Logger to the token Request (@johnabass)
• 5a66612: added basic TLS logging to all servers (@johnabass)
• f8584d9: fixed the TLS logic (@johnabass)
• 97777d1: fixed the logging configuration (@johnabass)
• 0ac3ec9: log the raw binary certificate in DER format (@johnabass)
• f0b0516: patch: get tls ConnectionState directly from request (@denopink)
• 2538767: use TLS from the http.Request (@johnabass)
• 322c5ff: wire the logger from the server into the Request (@johnabass)

v0.4.20

Changelog

Other Work

• e0c50d5: added certificate chain verification (@johnabass)