Skip to content

Latest commit

 

History

History
193 lines (150 loc) · 4.4 KB

CHANGELOG.md

File metadata and controls

193 lines (150 loc) · 4.4 KB

Changelog

2.2.10

  • Cache Hashicorp connection for same host/port

2.2.9

  • Azure bulk map secrets can now be filtered based on tags.

2.2.8

  • AWS/Azure Secret mapping results reporting error count. This can be used as part of healthcheck service.

2.2.7

  • Update Azure SDK versions

2.2.6

  • Updating jackson and aws sdk versions

2.2.5

  • AWS Secrets Manager - multiple values can be parsed from single secret name (line terminated values).

2.2.4

  • Various dependency upgrades

2.2.3

  • Added support for prefix filter for AWS secrets manager

2.2.2

Features Added

  • Added support for bulk loading of secrets from AWS Secrets Manager

Bugs Fixed

  • AWS secrets manager using environment config didn't work when using web identity tokens due to missing sts library.

2.2.1

Features Added

  • Update various dependent libraries versions

2.2.0

Features Added

  • Performance improvements for AWS Secrets Manager

2.1.0

Features Added

  • Added support for AWS Secrets Manager

2.0.0

Features Added

  • Update various dependencies.
  • Adding Vertx 4 which makes signers backward incompatible.

1.0.25

Features Added

  • Update Tuweni libraries to 2.0.0
  • Add ALLOWLIST as Hashicorp TrustStore type.

1.0.24

Bugs Fixed

  • Updated to log4j 2.17.1. Resolves two potential vulnerabilities which are only exploitable when using custom log4j configurations that are either writable by untrusted users or log data from the ThreadContext.

1.0.23

Bugs Fixed

  • Updated log4j to 2.17.0 to mitigate potential DOS vulnerability when the logging configuration uses a non-default Pattern Layout with a Context Lookup.

1.0.22

Bugs Fixed

  • Updated log4j to 2.16.0 to mitigate JNDI attack via thread context.

1.0.21

Features Added

  • Allow BLS key store data to be loaded from string.

1.0.20

Features Added

  • SignerProvider to use SignerIdentifier instead of ECPublicKey to obtain Signers.

1.0.19

Features Added

  • Allow empty password files to be read when creating a Signer

1.0.18

Breaking Changes

  • Upgrade to Azure Key Vault 4.3.3 removes support for previously deprecated SECP256K1 curve.

1.0.17

Features Added

  • Azure remote signing - add support for keys using curve name P-256K and signature algorithm name ES256K. Curve name SECP256K and signature algorithm name ECDSA256 are deprecated by Azure.

1.0.16

Features Added

  • Upgrade gradle version
  • test-fixtures jars are handled by cloudsmith

1.0.15

Features Added

  • Publish artifacts to Cloudsmith
  • Move to tag based release

1.0.14

Features Added

  • Managed Identity credentials support in Azure Key Vault

Bugs fixes

  • NA

1.0.13

Features Added

  • BLS keystore file (EIP-2335) parsing - make path and UUID fields optional

Bugs fixes

  • NA

1.10.12

Features Added

  • Change Interlock keystore API fetchKey argument type

Bugs fixed

  • NA

1.0.11

Features Added

  • YubiHSM2 as keystore using PKCS11 module.
  • yubihsm-shell integration has been removed.

Bugs Fixed

  • N/A

1.0.10

Features Added

  • F-Secure Interlock for Armory II as keystore

Bugs Fixed

  • N/A

1.0.9

Features Added

  • YubiHSM2 as keystore

Bugs Fixed

  • N/A

1.0.8

Features Added

  • N/A

Bugs Fixed

  • Correctly handle null/exceptions when raised by mapper passed into Azure Key Vault

1.0.7

Features Added

  • Added ability to map all secrets in Azure Key Vault to a business object

Bugs Fixed

  • N/A

1.0.6

Features Added

  • "Raw" toml files can now be created (toml file contains a single private key hex string)
  • Add ability to list all secret names in an Azure Key Vault

Bugs Fixed

  • N/A

1.0.5

Features Added

  • Applied new unicode normalization rules for EIP2335 keystore passwords.
  • AzureKeyVaultSigner can be configured to not hash data prior to signing

1.0.4

Features Added

  • Allowed CredentialSigner to hash (or not) the supplied data prior to siging

Bugs Fixed

  • N/A

1.0.3

Features Added

  • Changed signer's language from 'Address' to 'PublicKey'
  • Uses java security ECPublicKey to index signers
  • Moved to latest version of Azure KeyVault libraries
  • Able to sign using a key stored as a hex string in an Azure KeyVault Secret (but signing performed on local machine)

Bugs Fixed

  • Enabled check_licenses gradle task to ensure compliance with Apache 2.0 licensing