github.com/square/certstrap

Release Build (from refs/tags/v1.3.0/1377eabdd8242bc353dcebf879a3b077413036c2)

What's Changed

• Bump Go to 1.13 by @mbyczkowski in #86
• Bump github.com/urfave/cli from 1.21.0 to 1.22.1 by @dependabot-preview in #84
• Update README regarding go version by @chenrui333 in #87
• Add minute and second granularity to expiration time by @codysoyland in #88
• Bump github.com/urfave/cli from 1.22.1 to 1.22.2 by @dependabot-preview in #91
• Set CRL expiration to 2 years by @sashabaranov in #97
• Bump github.com/urfave/cli from 1.22.2 to 1.22.3 by @dependabot-preview in #98
• Remove vendorized deps by @mbyczkowski in #93
• Bump github.com/urfave/cli from 1.22.3 to 1.22.4 by @dependabot-preview in #104
• Fix docker build after removal of vendored deps by @mbyczkowski in #106
• Configure GitHub Actions by @mbyczkowski in #107
• Linter fixes by @mbyczkowski in #108
• Add option to create CA restricted to some domains by @fd0 in #94
• update to generated binaries information by @mrtrkmn in #109
• Bump github.com/urfave/cli from 1.22.4 to 1.22.5 by @dependabot-preview in #114
• Fix NotBefore calculation on new certificates by @adregner in #115
• Upgrade to GitHub-native Dependabot by @dependabot-preview in #118
• Use CA key instead of the subject key in the revocation test by @jdtw in #122
• Move to the correct Go lint action by @jdtw in #123
• Exclude the deprecated PEM functions from CI lints by @jdtw in #125
• Move to Go 1.17 by @jdtw in #126
• Remove deprecated Travis CI config by @jdtw in #127
• Add support for ECC to the pkix package by @jdtw in #130
• Add flags to certstrap to support ECDSA and Ed25519 by @jdtw in #128
• Add support for SPIFFE cert requests by @jdtw in #131
• Fix file permission checking in the depot package by @jdtw in #141
• Add CODEOWNERS by @mbyczkowski in #142
• Bump go.step.sm/crypto from 0.13.0 to 0.15.2 by @dependabot in #145
• Bump github.com/urfave/cli from 1.22.5 to 1.22.9 by @dependabot in #154
• created separate perms for windows so that windows users will no longer experience permission denied issues by @isemaya-square in #155
• Bump go.step.sm/crypto from 0.15.2 to 0.16.2 by @dependabot in #157
• Expand on permissions error message. by @mcdee in #160
• Update Dockerfile by @jdtw in #161
• Add support for setting pathlen on CA certificates and intermediate CA by @socheatsok78 in #135
• updated go version to 1.16 in response to permission denied issues by @isemaya-square in #151
• Move to Go 1.18 by @jdtw in #162
• Fix typo in release workflow by @jdtw in #163

New Contributors

• @chenrui333 made their first contribution in #87
• @codysoyland made their first contribution in #88
• @sashabaranov made their first contribution in #97
• @fd0 made their first contribution in #94
• @mrtrkmn made their first contribution in #109
• @adregner made their first contribution in #115
• @jdtw made their first contribution in #122
• @dependabot made their first contribution in #145
• @isemaya-square made their first contribution in #155
• @mcdee made their first contribution in #160
• @socheatsok78 made their first contribution in #135

Full Changelog: v1.2.0...v1.3.0

New Features
Add revoke command to add certificate to CA's CRL (#58)
Add URI SAN support to the request-cert command via --uri flag (#63)
New API in pkix package (#71)
New flags that allow to override default file inputs and outputs. request-cert command takes --key and --crt flags and sign command takes --csr and --crt. (#81)

Bugfixes
Support CSR issued by Microsoft certreq tool (#50)
Remove global state from pkix package (using when using it as a library) (#77)

New Features
Add new --expires flag for finer expiry selection, deprecates old --years flag (#47)

New Features
Add command to issue intermediate CA certificates (#29)

Bugfixes
Fix bug where certstrap would not preserve subject name ordering (#27)
Validate that certificate has marked as a CA cert (#28)

./certstrap.go --version was returning the incorrect version. This is fixed in v1.0.1