Component: certificate
362 changelog entries across 174 version(s)
Releases by channel (stacked)
- restricted maximum retry attempt window for Let's Encrypt certificate to 60 minutes;
- fixed handling of empty AKID by SCEP client;
- fixed handling of empty AKID by SCEP client;
- fixed handling of empty AKID by SCEP client;
- fixed new CRL updating;
- fixed new CRL updating;
- allow to choose digest algorithm for CSR signing;
- made "fingerprint" parameter read-only;
- allow to choose digest algorithm for CSR signing;
- made "fingerprint" parameter read-only;
- improved stability when sending bogus SCEP message;
- improved stability when sending bogus SCEP message;
- improved stability when sending bogus SCEP message;
- resolveed issue with public key generation when digest algorithm is unspecified and processing certificate signing requests;
- added ability to choose the digest algorithm when generating a certificate;
- improved stability when removing dynamic CRL entries;
- clear challenge password on renew;
- fixed CRL URL length limit;
- fixed private key verification for CA certificate during signing process;
- generate CRL even when CRL URL not specified;
- properly flush expired SCEP OTP entries;
- properly flush expired SCEP OTP entries;
- fixed CRL URL length limit;
- generate CRL even when CRL URL not specified;
- properly flush expired SCEP OTP entries;
- fixed private key verification for CA certificate during signing process;
- clear challenge password on renew;
- added "skid" and "akid" values for detailed print;
- allow dynamic CRL removal;
- disabled CRL usage by default;
- do not use SSL for first CRL update;
- fixed certificate verification when flushing CRL's;
- added "skid" and "akid" values for detailed print;
- allow dynamic CRL removal;
- disabled CRL usage by default;
- do not use SSL for first CRL update;
- fixed certificate verification when flushing CRL's;
- fixed certificate verification when flushing CRL's;
- added progress bar when creating certificate request;
- added support for certificate request signing with EC keys;
- allow specifying "file-name" parameter for export (CLI only);
- allow specifying "name" parameter for import (CLI only);
- improved CRL updating process;
- removed "key-size" parameter for "create-certificate-request" command;