Releases: Venafi/vcert
Releases · Venafi/vcert
Minor refactoring of validity period logic
Updated validity period logic for the TPP connector to round up to the nearest full day.
Flexible Validity Period
🎁 Added support for overriding the default validity period when requesting a certificate.
- For Trust Protection Platform, this is currently supported by the DigiCert CertCentral, Entrust (Certificate Services and CA Gateway), Google CA Service, and Microsoft ADCS drivers. An issuer hint is required when used with DigiCert (#D), Entrust Certificate Services (#E), and Microsoft ADCS (#M).
- For Venafi Cloud, this feature is supported by all four of the currently available CAs and no issuer hint is required.
2d45bbe7a3bd0ed0dbe134e0c4d316dff4394744 vcert-v4.11.0+1092_darwin
e0633396d04b7f90ebb07ff410945a395e59675d vcert-v4.11.0+1092_linux
46b4af85b5028bd9e54fcb6a0a19ded2b0aecf14 vcert-v4.11.0+1092_linux86
d617c66d9a0e0271de2aede6cbcddbd08fe84406 vcert-v4.11.0+1092_windows.exe
9068b22b88aa854dad1996fc5859dfa95e96c12c vcert-v4.11.0+1092_windows86.exe
Various Enhancements and Bug Fixes
- Added support for specifying general settings using environment variables #115
- Added support for JSON output format to the
gencsr
action #114 - Fixed bug involving the
--no-retire
parameter of therevoke
action #120 - Fixed bug involving the
--file
parameter ofrenew
action #118
bbef089f3b850eee1dd4420609ba1f99c7d161e6 vcert-v4.10.0+1023_darwin
d8a1f40a7bad3179e213ec6d812aec4623cd3cbe vcert-v4.10.0+1023_linux
2f9d65eb01e4a528a48987357ec00312db752be8 vcert-v4.10.0+1023_linux86
5c64ad96be6e489e3d2ec5aa6553ed563b95ae0f vcert-v4.10.0+1023_windows.exe
4abec44a9396471fa5131d5d3dbd64738e94cabe vcert-v4.10.0+1023_windows86.exe
Source Application Tagging for Venafi Cloud
- Wire-up
--app-info
(certificate.CustomFieldOrigin) to set ApiClientInformation for Venafi Cloud certificates - Switch from
/v1/discovery
to/v1/certificaterequests/externalissuance/certificates
for Venafi Cloud certificate import
7b50753f8b827d0f17a7341802726d4ee47ce508 vcert-v4.9.7+945_darwin
2b75030ec0bfb28907c5ecdbf694736072b7e3b7 vcert-v4.9.7+945_linux
b0c5f4cc3e0d72a099980e14589fef8a4a2ebcea vcert-v4.9.7+945_linux86
72b7a9f133069626b35339f485a0c038ace88449 vcert-v4.9.7+945_windows.exe
e1c1c32c19e44dea4d3fc6808722d7a98b41f0bd vcert-v4.9.7+945_windows86.exe
Support for Venafi Cloud Recommended Settings
- Get most of Subject DN (O, OU, L, ST, and C) from Recommended Settings of the Issuing Template assigned to the zone when VCert generates the CSR (default)
62bc20771da1b899bf157c5a7b72bd14ff486457 vcert-v4.9.6+895_darwin
78c370ca925d328ecb62b3717b14311f81a46aa8 vcert-v4.9.6+895_linux
8d33058dfa0634f55af132e21b99141aa2ca4f56 vcert-v4.9.6+895_linux86
a090061f1d71bf427c4acd788a5ec29511abaa96 vcert-v4.9.6+895_windows.exe
cca409c91b774afa73d98c7e6ab3252d8de23762 vcert-v4.9.6+895_windows86.exe
v4.9.5
- Fixed printing CA certificate on stdout during renew if -cert-file specified and -chain-file is not specified.
- Fixed restoring previous key type on renew
- Fixed passing different key curves to SDK (affect CLI)
789761bcd375777443a4568d53de91a23a8b67b4 vcert-v4.9.5+873_darwin
8e4d9ef4a6c9d11c5ea141002db714c9b87404f9 vcert-v4.9.5+873_linux
f1d864da3d26b1e73344979c0d357bc215a4dcfe vcert-v4.9.5+873_linux86
0f202968bbfb480969e755d5d88549e75f5f0716 vcert-v4.9.5+873_windows.exe
b78ae69d0da06859fceb7445c2b77e42354c51b1 vcert-v4.9.5+873_windows86.exe
Default Origins and extended custom fields support
8bfd9d0bdb29ba8469eac386100cf87bc8d6f00ab43c7d016f9c0fe4248bb693 vcert-4.9.3_darwin
608066bb877899402a817a5f08871555bf61e0c0403abf692da412b74622a7c1 vcert-4.9.3_linux
6dffb47dafa3b1d73ea40406302b23d11879a3ae7921f86dd96983040be66e73 vcert-4.9.3_linux86
6390546998dac180d28c472229ca41d5dd7a31e5c96d82eebbd5cb4f18719e62 vcert-4.9.3_windows86.exe
17e79d0774c211fa79b0d2784663d5ca31b946b921230af818094126e05ac5b0 vcert-4.9.3_windows.exe
Adding omit-sans flag
v4.9.1 remove unnecessary import
v4.8.0 Adding installed location support
Added flags to enroll action:
--instance "Use to provide the name/address of the compute instance and an identifier for the workload using the certificate. Example: --instance node:workload"
--tls-address "Use to specify the hostname, FQDN or IP address and TCP port where the certificate can be validated after issuance and installation. Example: --tls-address 10.20.30.40:443"
--app-info "Use to identify the application requesting the certificate with details like vendor name, application name, and application version."
--replace-instance "Force the specified instance to be recreated if it already exists and is associated with the requested certificate."
Added Request.Location struct with following options:
type Location struct {
Instance, Workload, TLSAddress string
Replace bool
}
51c1cf8b1cbac8d4ffb7ff1ed5e074159d6c1a35 vcert-v4.8.0_darwin
ffdd2576b87516186e2c34d16719c67988651cae vcert-v4.8.0_linux
b7e5449e415bf7943d8421c809151f63be5f8632 vcert-v4.8.0_linux86
36e1339cc61341153d96217e10604b42e1b6855c vcert-v4.8.0_windows.exe
0bd1fcc70d68891c5f22745bc7647eeed8bad226 vcert-v4.8.0_windows86.exe
Custom field support in sdk
Features in this release
- Argument
--field
for cli. - Attribute
CustomFields
forcertificate.Request
object
SHA256 sums:
4d58fd46f239e443eecb32940b016fff40c6a801445927bf2b77f73abb8b3677 vcert86_darwin
c83346cefcb36b95130bfad7291afb1ec357965c1e610fc6abf3f6787ca8b7a3 vcert86.exe
b6002bd6ccd72a5404fd7f29ef5f9df22f86d86c8e4b5a5ae37ff15bdecf0726 vcert86_linux
b2545c620f8b6d5a22714cffa63482d81bcece057730991df0be3ed724f53799 vcert_darwin
1329ba9896b4063ad8df8a6fbf4bdd0f68648526ef6fe22acd47e065347fe427 vcert.exe
7efbd5190a63f22cc05444c612b594ed2618a8cfa3028c3217e23291d15de257 vcert_linux