Skip to content

v0.3.0 - TLS, CF, and Cert Chains

Compare
Choose a tag to compare
@thomasmitchell thomasmitchell released this 24 May 20:16
· 134 commits to master since this release

New Features

  • The server configuration manifest now accepts server.tls.cert and server.tls.key. If these are present,
    the server will serve https requests with those variables. If you don't provide a cert or key, the server can still listen for plebeian ol' http.
  • If server.port is not given in the config, the value will fall back to the PORT environment variable. This means you can run doomsday on Cloud Foundry. Which means maybe this tool is useful now.

Enhancements

  • The dashboard commands headers have improved their wording from, for example, 4 WEEKS to WITHIN 4 WEEKS. This feels better.
  • When scanning your storage, doomsday will now properly parse certificate chains. It will make its best attempt to determine which is the leaf cert (server cert), and then that will be presented for that key.

Bug Fixes

  • If a key contained a cert, but began with something that wasn't a cert (like a private key), then the cert would not be found. No longer!