182 lines
4.4 KiB
Plaintext
182 lines
4.4 KiB
Plaintext
CHANGELOG
|
|
|
|
v1.14.0 - 2025-11-18
|
|
|
|
Added:
|
|
- lib/dialer: introduce proxy-aware dialers and helpers:
|
|
- NewNetDialer and NewTLSDialer honoring SOCKS5_PROXY, HTTPS_PROXY, HTTP_PROXY
|
|
(case-insensitive) with precedence SOCKS5 > HTTPS > HTTP.
|
|
- DialTCP and DialTLS convenience functions; DialTLS performs a TLS handshake
|
|
and returns a concrete *tls.Conn.
|
|
- NewHTTPClient: returns a proxy-aware *http.Client. Uses SOCKS5 proxy when
|
|
configured (disables HTTP(S) proxying to avoid double-proxying); otherwise
|
|
relies on http.ProxyFromEnvironment (respects HTTP(S)_PROXY and NO_PROXY).
|
|
- build: the releasse-docker.sh builds and pushes the correct Docker images.
|
|
|
|
Changed:
|
|
- cmd: migrate tools to new proxy-aware helpers where appropriate:
|
|
- certchain, stealchain, tlsinfo: use lib.DialTLS.
|
|
- cert-revcheck: use lib.DialTLS for site connects and a proxy-aware
|
|
HTTP client for OCSP/CRL fetches.
|
|
- rhash: use proxy-aware HTTP client for downloads.
|
|
- lib/fetch: migrate from certlib/fetch.go to lib/fetch.go and use DialTLS
|
|
under the hood.
|
|
- go.mod: add golang.org/x/net dependency (for SOCKS5 support) and align x/crypto.
|
|
|
|
Notes:
|
|
- HTTP(S) proxy CONNECT supports optional basic auth via proxy URL credentials.
|
|
- HTTPS proxies are TLS-wrapped prior to CONNECT.
|
|
- Timeouts apply to TCP connects, proxy handshakes, and TLS handshakes; context
|
|
cancellation is honored.
|
|
- Some commands retain bespoke dialing (e.g., IPv6-only or unix sockets) and
|
|
were intentionally left unchanged.
|
|
|
|
v1.13.6 - 2025-11-18
|
|
|
|
Changed:
|
|
- build: removing gitea stuff.
|
|
|
|
v1.13.5 - 2025-11-18
|
|
|
|
Changed:
|
|
- build: updating goreleaser config.
|
|
|
|
v1.13.4 - 2025-11-18
|
|
|
|
Changed:
|
|
- build: updating goreleaser config.
|
|
|
|
v1.13.3 - 2025-11-18
|
|
|
|
Added:
|
|
- certlib: introduce `Fetcher` for retrieving certificates.
|
|
- lib: `HexEncode` gains a byte-slice output variant.
|
|
- build: add GoReleaser configuration.
|
|
|
|
Changed:
|
|
- cmd: migrate programs to use `certlib.Fetcher` for certificate retrieval
|
|
(includes `certdump`, `ski`, and others).
|
|
- cmd/ski: update display mode.
|
|
|
|
Misc:
|
|
- repository fixups and small cleanups.
|
|
|
|
v1.13.2 - 2025-11-17
|
|
|
|
Add:
|
|
- certlib/bundler: refactor certificate bundling from cmd/cert-bundler
|
|
into a separate package.
|
|
|
|
Changed:
|
|
- cmd/cert-bundler: refactor to use bundler package, and update Dockerfile.
|
|
|
|
v1.13.1 - 2025-11-17
|
|
|
|
Add:
|
|
- Dockerfile for cert-bundler.
|
|
|
|
v1.13.0 - 2025-11-16
|
|
|
|
Add:
|
|
- cmd/certser: print serial numbers for certificates.
|
|
- lib/HexEncode: add a new hex encode function handling multiple output
|
|
formats, including with and without colons.
|
|
|
|
v1.12.4 - 2025-11-16
|
|
|
|
Changed:
|
|
|
|
- Linting fixes for twofactor that were previously masked.
|
|
|
|
v1.12.3 erroneously tagged and pushed
|
|
|
|
v1.12.2 - 2025-11-16
|
|
|
|
Changed:
|
|
|
|
- add rsc.io/qr dependency for twofactor.
|
|
|
|
v1.12.1 - 2025-11-16
|
|
|
|
Changed:
|
|
- twofactor: Remove go.{mod,sum}.
|
|
|
|
v1.12.0 - 2025-11-16
|
|
|
|
Added
|
|
- twofactor: the github.com/kisom/twofactor repo has been subtree'd
|
|
into this repo.
|
|
|
|
v1.11.2 - 2025-11-16
|
|
|
|
Changed
|
|
- cmd/ski, cmd/csrpubdump, cmd/tlskeypair: centralize
|
|
certificate/private-key/CSR parsing by reusing certlib helpers.
|
|
This reduces duplication and improves consistency across commands.
|
|
- csr: CSR parsing in the above commands now uses certlib.ParseCSR,
|
|
which verifies CSR signatures (behavioral hardening compared to
|
|
prior parsing without signature verification).
|
|
|
|
v1.11.1 - 2025-11-16
|
|
|
|
Changed
|
|
- cmd: complete linting fixes across programs; no functional changes.
|
|
|
|
v1.11.0 - 2025-11-15
|
|
|
|
Added
|
|
- cache/mru: introduce MRU cache implementation with timestamp utilities.
|
|
|
|
Changed
|
|
- certlib: complete overhaul to simplify APIs and internals.
|
|
- repo: widespread linting cleanups across many packages (config, dbg, die,
|
|
fileutil, log/logging, mwc, sbuf, seekbuf, tee, testio, etc.).
|
|
- cmd: general program cleanups; `cert-bundler` lint fixes.
|
|
|
|
Removed
|
|
- rand: remove unused package.
|
|
- testutil: remove unused code.
|
|
|
|
|
|
v1.10.1 — 2025-11-15
|
|
|
|
Changed
|
|
- certlib: major overhaul and refactor.
|
|
- repo: linter autofixes ahead of release.
|
|
|
|
|
|
v1.10.0 — 2025-11-14
|
|
|
|
Added
|
|
- cmd: add `cert-revcheck` command.
|
|
|
|
Changed
|
|
- ci/lint: add golangci-lint stage and initial cleanup.
|
|
|
|
|
|
v1.9.1 — 2025-11-15
|
|
|
|
Fixed
|
|
- die: correct calls to `die.With`.
|
|
|
|
|
|
v1.9.0 — 2025-11-14
|
|
|
|
Added
|
|
- cmd: add `cert-bundler` tool.
|
|
|
|
Changed
|
|
- misc: minor updates and maintenance.
|
|
|
|
|
|
v1.8.1 — 2025-11-14
|
|
|
|
Added
|
|
- cmd: add `tlsinfo` tool.
|
|
|
|
|
|
v1.8.0 — 2025-11-14
|
|
|
|
Baseline
|
|
- Initial baseline for this changelog series.
|