v0.12.5

0.12.5 - 2024-11-27

Fixes

• Fix S/MIME BR version number (#142)

v0.12.4

0.12.4 - 2024-11-25

New features/enhancements

• Add support for short-lived TLS BR certificates (#133)
• Add support for TLS BR ballot SC-79 (#127)
• Add support for S/MIME BR ballot SMC-09 (#128)
• Add public key algorithm and key usage value consistency validation (#139)

Fixes

• Gracefully handle unsupported public key algorithms (#134)
• Gracefully handle unsupported signature algorithms (#140 - found by @jon-oracle)

v0.12.3

0.12.3 - 2024-10-23

New features/enhancements

• Reformat codebase to use Black (#125)

v0.12.2

0.12.2 - 2024-10-14

Fixes

• Fix typo in finding code for multiple TLS BR policy OIDs in Subscriber certificates (#122 - found by @robstradling)

v0.12.1

0.12.1 - 2024-10-14

New features/enhancements

• Add REST API endpoint for linting certificates with the PKIX linter (#119)
• Add support for Python 3.13 (#120)

v0.12.0

0.12.0 - 2024-10-02

New features/enhancements

• Add REST API for linting CRLs (#113 - implemented by @dipaktilekar)
• Add validator to flag HTML entities in subject attribute values (#116)
• Add --document-format CLI flag (#115)

Fixes

• Remove duplicate registration of GeneralNameIpAddressSyntaxValidator in CRL linter (#103 - found by @zzzsz)
• Amend finding code for CRL reason code validator (#104 - found by @zzzsz)
• Remove duplicate registration of CRL validity period validator, fix positive validity period validator (#106 - found by @zzzsz)

v0.11.4

0.11.4 - 2024-08-29

New features/enhancements

• Use pyasn1-fasder for ASN.1 DER decoding by default (#98)
• Add support for S/MIME working group ballot SMC-08 (#101)

v0.11.3

0.11.3 - 2024-07-17

Fixes

• NCP-w legal person and natural person final certificates are incorrectly detected as pre-certificates (#92 - fixed by @robstradling)

v0.11.2

0.11.2 - 2024-07-16

Fixes

• Gracefully handle mis-encoded extensions and fields exposed as properties (#88)

v0.11.1

0.11.1 - 2024-07-02

New features/enhancements

• Add support for PEM-encoded OCSP responses (#86)
• Add validator to verify that the PSD2 policy OID is only asserted in PSD2 certificates (#87)
• Add validator to flag insignificant attribute values (#84)

Fixes

• Perform case-sensitive match for ISO 3166-1 country codes (#83)