Swift Certificates 1.0.0-beta.1

SemVer Minor

• Added subjectPublicKeyInfoBytes to public keys (#100, patch credit to @Tyler-Keith-Thompson)
• Police uniqueness of Certificate.Extensions (#84)
• Remove the "from parts" Certificate constructor. (#88)
• Police uniqueness of ExtendedKeyUsage (#90)
• Implement remove for RelativeDistinguishedName (#92)
• Implement property setters of NameConstraints (#94)
• Do not allocate for RelativeDistinguishedNames with just a single attribute (#101)
• Use #if canImport(Darwin) where possible (#102)
• Add support for Musl libc (#103)
• Store String in RelativeDistinguishedName.Attribute instead of ASN1Any if possible (#104)
• Conform AuthorityInformationAccess to RangeReplaceableCollection (#105)
• Add integer initialisers on Certificate.SerialNumber (#106)
• Update to swift-asn1 0.10.0 (#107)
• Allow OCSPRequester to fail OCSPVerifierPolicy (#108)
• Add optional diagnostic information to Verifier (#113)
• Add custom String representation to Certificate and related types (#116)
• Adopt apple/swift-format (#121)
• Allow RelativeDistinguishedNameConvertible to fail gracefully (#122)
• Remove deprecated API (#123)
• Add PolicyFailureReason to support lazy failure reason string interpolation (#126)
• Use beta release of swift-asn1 (#131)

SemVer Patch

• Make expiry checking cheaper. (#85)
• We aren't supporting PSS for now. (#93)
• Limit the number elements in Extensions and ExtendedKeyUsage (#95)
• Make hashing a RDN.Attribute.Value.utf8String not allocate (#112)
• Make debugDescription work well as part of a structural display (#115)
• Reject v1 Certificates with extensions (#118)
• Do not count self-issued certificates against maxPathLength (#119)
• Fix preference of root certificates (#127)
• Refactor ASN1UTF8StringView to ASN1TaggedStringView and use it for printable strings (#128)
• Add Certificate.PrivateKey description (#132)

Other Changes

• Actually validate we can parse the signature. (#82)
• [README] Add a leading dot to upToNextMinor (#83)
• Make constructing Dates cheaper (#86)
• Don't rely on having a SEP present (#87)
• Remove unnecessary TODO (#89)
• Setup allocation test framework (#96)
• Add allocation test that parses all WebPKI roots (#97)
• Implement TinyArray (#98)
• Remove unused test key (#109)
• Remove unused import (#110)
• Add Verifier allocation tests (#111)
• Use Certificate.description instead of dump for debugging flaky tests (#117)
• Use valid ASN1ObjectIdentifier in tests with at least two components (#124)

Swift Certificates 0.6.0

SemVer Minor

• Implement Certificate Signing Request support (#59)
• Add Policy Builder for constructing verifier policies (#79)
• Gracefully fail Extension serialization (#80)

SemVer Patch

• Fix signature construction (#77)

Other Changes

• Fix OCSP serialisation and parsing tests (#81)

Swift Certificates 0.5.0

SemVer Minor

• Support PEM serialisation and parsing of Certificate, Certificate.PublicKey and Certificate.PrivateKey (#71)

Other Changes

• Fixed various typos in documentation (#73, #74, #75, #75, patch credit to @robo-fish)

Swift Certificates 0.4.1

SemVer Patch

• Fix windows build (#72, patch credit to @compnerd)

Other Changes

• Fix wrong variable in documentation (#70, patch credit to @LukasReschke)
• Clean up the upToNextMinor (#69)

Swift Certificates 0.4.0

SemVer Minor

• Fix SecureEnclave issue in cmake build (#67, #68)

Swift Certificates 0.3.0

SemVer Minor

• Add support for using SecureEnclave.P256 (#55, patch credit to @jschlesser)
• Add support for unwrapping public keys. (#60)
• OCSP soft failure mode (#61)
• Add API to construct a SubjectKeyIdentifier by hashing a Certificate.PublicKey (#64)

SemVer Patch

• Tweak the ECDSA signature representation (#50)
• Fix name constraints parsing (#52)
• Tolerate v1 certs without basic constraints (#53)
• Add SPI support for disabling expiry checking in RFC5280Policy. (#54)
• Fix Sendable warning in OCSPVerifierPolicy.chainMeetsPolicyRequirementsWithoutDeadline (#62)
• Expose a CMSSignature type (#65)

Other Changes

• Documentation - Typos (#56, patch credit to @joey-gm)
• Add docker-compose file for Swift 5.9 (#63)

Swift Certificates 0.2.0

SemVer Minor

• Follow casing from Swift API Design Guidelines (#46)
• Add support for policing critical extensions (#47)

SemVer Patch

• Add BasicConstraints enforcement to RF5280Policy (#36)
• Add support for handling domain name constraints. (#37)
• Add support for IP address constraints. (#38)
• Update Swift Crypto and fix RSA keys (#39)
• Fix Certificate.SerialNumber.init() (#40)
• Improve our handling of trailing periods. (#41)
• Add support for name constraints on URIs (#42)
• Build OCSP Response certificate chain and verify signature (#43)
• Add directory name constraints. (#44)
• Produce functional NameConstraints (#45)
• Add leeway to the OCSP time verification (#48)

Other Changes

• Parallelise test cases (#49)

Swift Certificates 0.1.0

Initial 0.1.0 release