tls_certificate_check v1.22.1

View Source Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

1-22-1-2024-03-16

 [1.22.1] - 2024-03-16

changed

 Changed

  • README

added

 Added

1-22-0-2024-03-16

 [1.22.0] - 2024-03-16

added-1

 Added

  • [certificate authority] Telekom Security TLS ECC Root 2020
  • [certificate authority] Telekom Security TLS RSA Root 2023
  • OTP 26.2 to CI

changed-1

 Changed

fixed

 Fixed

1-21-0-2023-12-12

 [1.21.0] - 2023-12-12

added-2

 Added

  • [certificate authority] CommScope Public Trust ECC Root-01
  • [certificate authority] CommScope Public Trust ECC Root-02
  • [certificate authority] CommScope Public Trust RSA Root-01
  • [certificate authority] CommScope Public Trust RSA Root-02
  • [certificate authority] TrustAsia Global Root CA G3
  • [certificate authority] TrustAsia Global Root CA G4
  • OTP 26.1 to CI

changed-2

 Changed

removed

 Removed

  • [certificate authority] Autoridad de Certificacion Firmaprofesional CIF A62634068
  • [certificate authority] security communication rootca1

1-20-0-2023-08-22

 [1.20.0] - 2023-08-22

added-3

 Added

  • [certificate authority] Atos TrustedRoot Root CA ECC TLS 2021
  • [certificate authority] Atos TrustedRoot Root CA RSA TLS 2021
  • [certificate authority] SSL.com TLS ECC Root CA 2022
  • [certificate authority] SSL.com TLS RSA Root CA 2022
  • [certificate authority] sectigo public server authentication root e46
  • [certificate authority] sectigo public server authentication root r46

changed-3

 Changed

removed-1

 Removed

  • [certificate authority] e-tugra global root ca ecc v3
  • [certificate authority] e-tugra global root ca rsa v3

1-19-0-2023-05-30

 [1.19.0] - 2023-05-30

added-4

 Added

  • OTP 26.0 to CI
  • [certificate authority] BJCA Global Root CA2
  • [certificate authority] BJCA Global Root CA1

changed-4

 Changed

  • CI to use latest rebar3 version that's compatible with each covered OTP release
  • module with bundled CAs to latest as of 2023/05/30, 03:12 UTC (source: https://curl.se/ca/cacert.pem)

removed-2

 Removed

  • [certificate authority] hongkong post root ca 1
  • [certificate authority] E-Tugra Certification Authority

1-18-1-2023-05-01

 [1.18.1] - 2023-05-01

changed-5

 Changed

  • import of ssl_verify_fun to match latest allowed 1.x version

fixed-1

 Fixed

  • failing tests and checks on macOS ventura (maybe ARM specific)

1-18-0-2023-03-20

 [1.18.0] - 2023-03-20

added-5

 Added

  • explicit SNI, to account for TCP sockets upgraded to ssl with ssl:connect/3
  • OTP 25.3 to CI

fixed-2

 Fixed

  • CI deprecation warnings

1-17-4-2023-02-19

 [1.17.4] - 2023-02-19

fixed-3

 Fixed

  • error starting application when OS-trusted CAs fail to load on OTP 25 [present since 1.17.0]

1-17-3-2023-01-17

 [1.17.3] - 2023-01-17

fixed-4

 Fixed

  • (rare?) crash after reading OS-trusted CAs

1-17-2-2023-01-12

 [1.17.2] - 2023-01-12

fixed-5

 Fixed

  • listing of private modules and functions in generated reference

1-17-1-2023-01-12

 [1.17.1] - 2023-01-12

fixed-6

 Fixed

  • unreleased version in change log

1-17-0-2023-01-11

 [1.17.0] - 2023-01-11

added-6

 Added

  • ability to override trusted CAs
  • Windows to CI
  • OTP 25.2 to CI

changed-6

 Changed

  • default CAs to the ones trusted by OTP (typically provided by the OS), when available, on OTP 25+
  • shared state owner to not erase its persistent_terms when crashing
  • module with bundled CAs to latest as of 2023/01/10, 04:12 UTC (source: https://curl.se/ca/cacert.pem)

removed-3

 Removed

  • [certificate authority] network solutions certificate authority
  • [certificate authority] TrustCor ECA-1
  • [certificate authority] TrustCor RootCert CA-1
  • [certificate authority] Staat der Nederlanden EV Root CA
  • [certificate authority] TrustCor RootCert CA-2

1-16-0-2022-10-11

 [1.16.0] - 2022-10-11

added-7

 Added

  • OTP 25.1 to CI
  • [certificate authority] security communication ecc rootca1
  • [certificate authority] security communication rootca3

changed-7

 Changed

1-15-0-2022-07-20

 [1.15.0] - 2022-07-20

added-8

 Added

  • OTP 25 to CI
  • [certificate authority] certainly root e1
  • [certificate authority] digicert tls ecc p384 root g5
  • [certificate authority] e-tugra global root ca ecc v3
  • [certificate authority] certainly root r1
  • [certificate authority] digicert tls rsa4096 root g5
  • [certificate authority] e-tugra global root ca rsa v3

changed-8

 Changed

removed-4

 Removed

  • [certificate authority] hellenic academic and research institutions rootca 2011

fixed-7

 Fixed

  • fragile automated CHANGELOG updates
  • flaky test case

1-14-0-2022-04-27

 [1.14.0] - 2022-04-27

added-9

 Added

  • [certificate authority] d-trust ev root ca 1 2020
  • [certificate authority] d-trust br root ca 1 2020
  • [certificate authority] Telia Root CA v2

changed-9

 Changed

1-13-0-2022-03-18

 [1.13.0] - 2022-03-18

changed-10

 Changed

removed-5

 Removed

  • [certificate authority] ec-acc

1-12-0-2022-02-02

 [1.12.0] - 2022-02-02

added-10

 Added

  • [certificate authority] vtrus ecc root ca
  • [certificate authority] isrg root x2
  • [certificate authority] vtrus root ca
  • [certificate authority] HiPKI Root CA - G1
  • [certificate authority] Autoridad de Certificacion Firmaprofesional CIF A62634068

changed-11

 Changed

  • module with bundled CAs to latest as of 2022/02/01, 04:12 UTC (source: https://curl.se/ca/cacert.pem)
  • [certificate authority] gts root r4
  • [certificate authority] gts root r3
  • [certificate authority] gts root r1
  • [certificate authority] gts root r2
  • [certificate authority] GlobalSign ECC Root CA - R4

removed-6

 Removed

  • [certificate authority] GlobalSign Root CA - R2
  • [certificate authority] cybertrust global root

1-11-0-2021-10-28

 [1.11.0] - 2021-10-28

added-11

 Added

  • [certificate authority] HARICA TLS ECC Root CA 2021
  • [certificate authority] HARICA TLS RSA Root CA 2021
  • [certificate authority] TunTrust Root CA

changed-12

 Changed

1-10-0-2021-10-01

 [1.10.0] - 2021-10-01

changed-13

 Changed

removed-7

 Removed

  • [certificate authority] dst root ca x3

1-9-0-2021-09-03

 [1.9.0] - 2021-09-03

added-12

 Added

  • test coverage of certificates yet-to-be valid
  • test coverage of misordered certificate chains

changed-14

 Changed

removed-8

 Removed

  • dependency on badssl.com for important test cases

1-8-0-2021-08-31

 [1.8.0] - 2021-08-31

added-13

 Added

  • automated PR-based update of bundled CAs through GHA

changed-15

 Changed

  • app description to tentatively improve it

1-7-0-2021-07-08

 [1.7.0] - 2021-07-08

added-14

 Added

  • [certificate authority] certum ec-384 ca
  • [certificate authority] globaltrust 2020
  • [certificate authority] certum trusted root ca
  • [certificate authority] anf secure server root ca

changed-16

 Changed

removed-9

 Removed

  • [certificate authority] sonera class2 ca
  • [certificate authority] trustis fps root ca
  • [certificate authority] quovadis root certification authority

1-6-0-2021-05-30

 [1.6.0] - 2021-05-30

changed-17

 Changed

removed-10

 Removed

  • [certificate authority] global chambersign root - 2008
  • [certificate authority] chambers of commerce root - 2008

1-5-0-2021-05-13

 [1.5.0] - 2021-05-13

added-15

 Added

  • OTP 24 to CI targets

removed-11

 Removed

  • compatibility with OTP 21

1-4-0-2021-04-16

 [1.4.0] - 2021-04-16

added-16

 Added

  • [certificate authority] globalsign root e46
  • [certificate authority] AC RAIZ FNMT-RCM SERVIDORES SEGUROS
  • [certificate authority] globalsign root r46

changed-18

 Changed

removed-12

 Removed

  • [certificate authority] geotrust primary certification authority - g2
  • [certificate authority] verisign universal root certification authority
  • [certificate authority] Staat der Nederlanden Root CA - G3

1-3-0-2021-04-02

 [1.3.0] - 2021-04-02

added-17

 Added

  • tls_certificate_check:trusted_authorities/0 to API

changed-19

 Changed

  • list of authoritative certificates, from hardcoded to one that's generated on application boot and stored on persistent_term
  • set of trusted public keys, from hardcoded to one that's generated on application boot and stored on persistent_term

removed-13

 Removed

  • compatibility with OTP 19
  • compatibility with OTP 20
  • compatibility with OTP 21.0 and 21.1
  • priv/cacerts.pem

fixed-8

 Fixed

  • unwarranted and risky hardcoding of record values

1-2-0-2021-03-12

 [1.2.0] - 2021-03-12

added-18

 Added

  • elements for easily updating bundled CAs
  • [certificate authority] NAVER Global Root Certification Authority

changed-20

 Changed

removed-14

 Removed

  • [dependency] certifi
  • [dependency] parse_trans
  • [certificate authority] thawte primary root ca - g2
  • [certificate authority] geotrust global ca
  • [certificate authority] geotrust primary certification authority
  • [certificate authority] verisign class 3 public primary certification authority - g4
  • [certificate authority] geotrust primary certification authority - g3
  • [certificate authority] thawte primary root ca
  • [certificate authority] thawte primary root ca - g3
  • [certificate authority] verisign class 3 public primary certification authority - g5
  • [certificate authority] geotrust universal ca
  • [certificate authority] geotrust universal ca 2

fixed-9

 Fixed

  • misuse of tls_certificate_ namespace (all modules start with tls_certificate_check now)

1-1-1-2020-12-08

 [1.1.1] - 2020-12-08

fixed-10

 Fixed

  • compilation errors on OTP 20.1+ when on top of macOS Big Sur

1-1-0-2020-12-05

 [1.1.0] - 2020-12-05

changed-21

 Changed

  • CA bundles, based on the latest mkcert.org full CA list as of Nov 13, 2020

1-0-2-2020-10-16

 [1.0.2] - 2020-10-16

fixed-11

 Fixed

  • misdetection of Mix as being rebar 2 and the erronous compilation warning that followed it

1-0-1-2020-05-21

 [1.0.1] - 2020-05-21

fixed-12

 Fixed

  • missing links to source code in application metadata

1-0-0-2020-05-21

 [1.0.0] - 2020-05-21

added-19

 Added

  • :options function to API, for easily securing connections