Releases: 18F/identity-pki
Releases · 18F/identity-pki
RC 16
RC 16
Behind the scenes bug fixes users probably won't notice
- Upgrade to Rails 6.1 (#206)
- Add lograge for structured logging (LG-4243) (#205)
- Inherit logging configuration from identity-logging (#207)
- Reduce log level in production (#209)
- Update identity-hostdata gem to use new namespace (#214)
RC 15
RC 15
Improvements/Changes
- Allow HTTP requests to CA issuer to fetch missing intermediate certificates (LG-4037) (#197)
- Remove retired SSA certificate (#198)
- Update nokogiri to patch vulnerability (#199)
Behind the scenes bug fixes users probably won't notice
- Upgrade to Rails 6 (LG-3770) (#173)
- Rake task to look for replacement certs (LG-3932) (#200)
RC 14
RC 14
Improvements/Changes
- Bump thin gem from 1.7.2. to 1.8.0 (#174)
- Alert on expired cert when walking chain (#185)
- Cert health check can use duration syntax for deadline param (#188)
- Remove expiring DHS CA4 cert (#187)
- Replace expiring NASA cert (LG-3988) (#189)
- Put each NASA PEM in its own file, remove expiring one (#190)
- Map piv/cac to the Federal Bridge CA if using valid policy OIDs (#193)
- Update CertificateChainService (#195)
RC 13
RC 13
Improvements/Changes
- Add check for certificates expiring within 30 days (#179)
- Add certificates health check endpoint (#181)
Bug Fixes Users Might Notice
- Fall back to Certificate Revocation Lists if there is a parsing or timeout error from Online Certificate Status Protocol (OCSP) servers (#184)
RC 10
RC 10]
Improvements/Changes
- LG-3167: Send
is_auth_cert
in token for HSDPD-12 (#159)
RC 11
Improvements/Changes
- LG-873 Add x509_issuer to piv/cac response data for OIDC
- Add updated certs for Treasury and State (LG-3513) (#164)
- Update .gitignore to allow .pem files (#166)
- Remove reek (#165)
- Certificate Chain Service (#167)
RC 9
Features
Bugs and Enhancements
- Update newrelic to use gov endpoint (#156)
PIV/CAC Issuing Certificates
- LG-3043: map bridge certs (#154)
RC 8
Features
None
Bugs and Enhancements
- Expand bundled certs into repo #144
- Bump websocket-extensions from 0.1.4 to 0.1.5 #149
- Bump puma from 3.12.4 to 3.12.6 #150
PIV/CAC Issuing Certificates
- Add DOD missing certs #151
RC 7
Features
Bugs and Enhancements
- Restore caching of OCSP revocations #63
PIV/CAC Issuing Certificates
None