Releases: Venafi/venafips
Releases · Venafi/venafips
v6.11.1
v6.11.0
- Add token based authentication to VC with
New-VenafiSession -VcEndpoint
andNew-VcToken
. If the JWT has not expired, but the access token has,New-VcToken
supports refresh. - Caching framework created for many VC objects (and some VDC ones as well). If a requested item is not found, the cache will try and refresh in case it's been newly created.
- Enhanced tab completion now utilizing the new caching framework. A lot more objects are now available via tab completion and will also display a description as well. For example, VSatellite shows the status and version. Be sure to set your Tab key functionality with
Set-PSReadlineKeyHandler -Key Tab -Function MenuComplete
- Add many direct filters to
Find-VcLog
andFind-VcCertificateRequest
so -Filter can be used less (since it's cumbersome). The other Find functions will get similar treatment in time. If you have specific filters you'd like to add, please submit an enhancement request - Add
Find-Vc* -IncludeAny
to OR the direct filters as opposed to AND - Add
Find-VdcCertificate -Algorithm
to support the new pkix algorithms introduced in v25.1. Tab completion is available with full descriptions.New-VdcCertificate
and other applicable functions will be updated in time - All current VC regions have been added
- Add support for VC shared credentials with
New-VcMachine -Credential
,New-VcMachineCommonKeystore -Credential
, andNew-VcMachineIis -Credential
, #349 - Fix
Invoke-VcWorkflow
test connection where the configured size of the socket response was not large enough - Fix
Invoke-VcCertificateAction
error when the certificate was not issued within the VC timeout - Add
Invoke-VcCertificateAction -Renew -Wait
to monitor a renewal for passing the requested state
v6.10.0
- Add support for tags during certificate creation with
New-VcCertificate -Tag
, #337 - Performance enhancement for
ConvertTo-VdcObject
which decreased Windows Powershell runtimes forFind-VdcObject
and all other functions that use it, #342 - Add
-IsExpired:$false
for bothFind-VdcCertificate
andFind-VcCertificate
to find all certificates that are not expired - Add renewal configuration to
Get-VcApplication
- Fix issue with
Invoke-VcWorkflow
where $VenafiSession was not getting picked up properly - Ensure only 1 team matches Owner when using
New-VcMachine -Owner
and the value is a name. This is needed as the product allows multiple teams with the same name. - Create duplicate objects with
New-VdcObject -SourcePath
. Not recommended for certificates. #343 - Allow manifests of different formats to be provided to
Set-VcConnector
v6.9.4
v6.9.3
v6.9.2
v6.9.1
v6.9.0
- Add
New-VenafiSession -RefreshSession
to retrieve a new access token from the current session refresh token - Add
Find-VdcCertificate -IsExpired
for an easy way to find expired certificates on TLSPDC - Standardized VDC object creation/conversion with
Get-VdcObject
.ConvertTo-VdcPath
andConvertTo-VdcGuid
to be deprecated. - Add unit test for function help and resolve the issues
- Update
Find-VdcVaultId
to retrieve via object path - Update
Find-VdcVaultId
to output via pipeline by default. Providing-OutPath
will remain unchanged. - New pipeline options from
Find-VdcVaultId
andGet-VdcCertificate -IncludePreviousVersions
toExport-VdcVaultObject
, the latter will export all historical certificates - Add
Export-VdcCertificate -VaultId
for exporting any certificate via vault id. If exporting historical certificates and would like the associated key, this is the preferred approach. - Add
Find-VdcObject -Class
when using-Attribute -Pattern
to filter attribute searches by a specific class/type - Fix error in
New-VcConnector
causing manifest import to fail - Performance updates to Invoke-VenafiRestMethod, Invoke-VenafiParallel, and more
Search-VdcHistory
to be deprecated.
v6.8.1
v6.8.0
- Add
Get-VenafiSession
to centralize session management. For nested and/or piped functions, pull the session from the call stack. - Add PolicyPath to
Export-VdcCertificate
output andImport-VdcCertificate -PolicyPath
. This allows the imported certificate to be created in the same policy folder. This could be used to synchronize across environments for example. The addition ofImport-VdcCertificate -Force
will cause a policy path to be created if it does not already exist; policy subfolders are supported as well. - Add
Import-VcCertificate
blocklist functionality. Override the blocklist by default and honor the blocklist if the environment variable VC_ENABLE_BLOCKLIST is set to true. - Fix VC import failure with a large number of keystores, #322
- Hide dekEncryptedPassword from verbose output
- Remove Filename from
Export-VdcCertificate
when outputting data and not writing to a file