Releases: aws/rolesanywhere-credential-helper
v1.8.0
What's Changed
- Added support for ML-DSA (Module-Lattice-Based Digital Signature Algorithm) keys and certificates, including ML-DSA-44, ML-DSA-65, and ML-DSA-87 variants
- Added support for HMAC-SHA1 PRF in PBKDF2 key derivation
- Fixed the PKCS#11 dynamic linking issue
- Fixed critical security vulnerabilities and updated Go toolchain version to 1.24.13
Full Changelog: v1.7.3...v1.8.0
MacOS X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.8.0/X86_64/MacOS/Sonoma/aws_signing_helper
Linux X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.8.0/X86_64/Linux/Amzn2023/aws_signing_helper
Windows X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.8.0/X86_64/Windows/Server2022/aws_signing_helper.exe
MacOS AArch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.8.0/Aarch64/MacOS/Sonoma/aws_signing_helper
Linux AArch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.8.0/Aarch64/Linux/Amzn2023/aws_signing_helper
v1.7.3
What's Changed
- Increased Golang version to 1.24.11
- Some security vulnerabilities have been patched
- Updated version of MacOS x86 binary from Ventura to Sonoma
- Updated serve command for increased compatibility with IMDSv2
Full Changelog: v1.7.2...v1.7.3
MacOS X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.3/X86_64/MacOS/Sonoma/aws_signing_helper
Linux X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.3/X86_64/Linux/Amzn2023/aws_signing_helper
Windows X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.3/X86_64/Windows/Server2019/aws_signing_helper.exe
MacOS AArch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.3/Aarch64/MacOS/Sonoma/aws_signing_helper
Linux AArch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.3/Aarch64/Linux/Amzn2023/aws_signing_helper
v1.7.2
What's Changed
- Increased Golang version to 1.24.9 and bumped most dependencies to latest versions
- Now prints help when no commands or arguments are given
- Reduced detail in default logging of expired tokens
- Improved Docker Image Build automation and documentation
- Improved ARN error parsing to specify which provided ARN had the error
Full Changelog: v1.7.1...v1.7.2
MacOS X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.2/X86_64/MacOS/Ventura/aws_signing_helper
Linux X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.2/X86_64/Linux/Amzn2023/aws_signing_helper
Windows X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.2/X86_64/Windows/Server2019/aws_signing_helper.exe
MacOS AArch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.2/Aarch64/MacOS/Sonoma/aws_signing_helper
Linux AArch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.2/Aarch64/Linux/Amzn2023/aws_signing_helper
Release: v1.7.1
What's Changed
- Some security vulnerabilities have been patched
Full Changelog: v1.7.0...v1.7.1
Darwin X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.1/X86_64/MacOS/Ventura/aws_signing_helper
Linux X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.1/X86_64/Linux/Amzn2023/aws_signing_helper
Windows X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.1/X86_64/Windows/Server2019/aws_signing_helper.exe
Darwin Aarch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.1/Aarch64/MacOS/Sonoma/aws_signing_helper
Linux Aarch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.1/Aarch64/Linux/Amzn2023/aws_signing_helper
Credential Helper Docker Image: https://gallery.ecr.aws/rolesanywhere/credential-helper
Release: v1.7.0
What's Changed
- Upgrade dependency module versions to address vulnerabilities picked up on scans
- Fail when duplicate keys are present in a cert selector
- Introduce slightly more robust parsing logic for cert selectors provided through the CLI
- Fix bug that prevented adding custom roots for use in TLS
- Print more information that's useful in creating certificate selectors in the output of
read-certificate-data
Full Changelog: v1.6.0...v1.7.0
Darwin X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.0/X86_64/Darwin/aws_signing_helper
Linux X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.0/X86_64/Linux/aws_signing_helper
Windows X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.0/X86_64/Windows/aws_signing_helper.exe
Darwin Aarch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.0/Aarch64/Darwin/aws_signing_helper
Linux Aarch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.7.0/Aarch64/Linux/aws_signing_helper
Release: v1.6.0
What's Changed
- Supports password-encrypted private keys in PKCS#8 format
- Fixes a bug where the credential helper attempts to open terminal device files when there is no controlling terminal for the process
Full Changelog: v1.5.0...v1.6.0
Darwin X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.6.0/X86_64/Darwin/aws_signing_helper
Linux X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.6.0/X86_64/Linux/aws_signing_helper
Windows X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.6.0/X86_64/Windows/aws_signing_helper.exe
Darwin Aarch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.6.0/Aarch64/Darwin/aws_signing_helper
Linux Aarch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.6.0/Aarch64/Linux/aws_signing_helper
Release: v1.5.0
What's Changed
- Adds an option an option to use the latest expiring certificate when multiple match a certificate selector
- Migrate from Go v1 SDK to Go v2 SDK
- Fixes related to PKCS#12 file support
Full Changelog: v1.4.0...v1.5.0
Darwin X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.5.0/X86_64/Darwin/aws_signing_helper
Linux X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.5.0/X86_64/Linux/aws_signing_helper
Windows X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.5.0/X86_64/Windows/aws_signing_helper.exe
Darwin Aarch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.5.0/Aarch64/Darwin/aws_signing_helper
Linux Aarch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.5.0/Aarch64/Linux/aws_signing_helper
Release: v1.4.0
What's Changed
- Add TPM key support for Windows systems
Full Changelog: v1.3.0...v1.4.0
Darwin X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.4.0/X86_64/Darwin/aws_signing_helper
Linux X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.4.0/X86_64/Linux/aws_signing_helper
Windows X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.4.0/X86_64/Windows/aws_signing_helper.exe
Darwin Aarch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.4.0/Aarch64/Darwin/aws_signing_helper
Linux Aarch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.4.0/Aarch64/Linux/aws_signing_helper
Release: v1.3.0
What's Changed
- Add TPM key support for non-Windows systems
- Fix previously unhandled error when parsing certificate data from a file
Full Changelog: v1.2.1...v1.3.0
Darwin X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.3.0/X86_64/Darwin/aws_signing_helper
Linux X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.3.0/X86_64/Linux/aws_signing_helper
Windows X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.3.0/X86_64/Windows/aws_signing_helper.exe
Darwin Aarch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.3.0/Aarch64/Darwin/aws_signing_helper
Linux Aarch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.3.0/Aarch64/Linux/aws_signing_helper
Release: v1.2.1
What's Changed
- Some security vulnerabilities have been patched
Full Changelog: v1.2.0...v1.2.1
Darwin X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.2.1/X86_64/Darwin/aws_signing_helper
Linux X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.2.1/X86_64/Linux/aws_signing_helper
Windows X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.2.1/X86_64/Windows/aws_signing_helper.exe
Darwin Aarch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.2.1/Aarch64/Darwin/aws_signing_helper
Linux Aarch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.2.1/Aarch64/Linux/aws_signing_helper