Skip to content

1.14.0 (2019-11-03)

Compare
Choose a tag to compare
@mathiasertl mathiasertl released this 03 Nov 16:28
1.14.0
  • regenerate_ocsp_keys now has a quiet mode and only generates keys where the CA private key is available.
  • Minor changes to make the release compatible with Django 3.0a1.
  • Introduce a new, more flexible format for the The format of the CA_PROFILES setting. The new Profiles page provides more information and migration instructions
  • New dependency: six, since Django 3.0 no longer includes it.
  • New dependency: asn1crypto, since cryptography no longer depends on it.
  • Serials are now zero-padded when output so that the last element always consists of two characters.
  • More consistently output serials with colons, use a monospace font in the admin interface.
  • Fix profile selection in the admin interface.
  • Fix display of values from CSR in the admin interface.
  • Add a copy-button next to values from the CSR to enable easy copy/paste from the CSR.
  • Test suite now includes Selenium tests for all JavaScript functionality.
  • dev.py coverage can now output a text summary using --format=text.

Backwards incompatible changes

  • Drop support for cryptography 2.3 and 2.4.
  • Drop support for idna 2.7.
  • Extensions now always expect a dict or a cryptography extension as a value. Anything else was unused in practice.
  • KeyUsage, ExtendedKeyUsage and TLSFeature now behave like an ordered set and support all operators that a set does.
  • Running an OCSP responder using oscrypto/ocspbuilder is no longer supported.

Extensions

Deprecation notices