- Declared pulpcore compatibility up to 3.44.
No significant changes.
- Declared pulpcore compatibility up to 3.44.
- Allows for compatibility with pulpcore>3.25. #252
- Loosened restriction on pyOpenSSL to let us use 23.0 and its fixes. #293
- Loosened restriction on pyOpenSSL to let us use 23.0 and its fixes. #293
No significant changes.
No significant changes.
- Allows for compatibility with pulpcore>3.25. #252
No significant changes.
No significant changes.
- Taught bad-certificate-failures emit warnings to the server-log. #145
- Improved the validation of certificates. #232
- Loosened restriction on pyOpenSSL to let us use 23.0 and its fixes. #293
- Taught bad-certificate-failures emit warnings to the server-log. #145
No significant changes.
No significant changes.
No significant changes.
No significant changes.
No significant changes.
- Bumped pulpcore requirement for core/3.17 compatibility. #9641
- Bumped pulpcore requirement for core/3.16 compatibility. #9494
Yank reason: no upper bound on requirement
- Dropped support for Python 3.6 and 3.7. pulp-certguard now supports Python 3.8+. #9054
- Extended CertGuard.ca_certificate to accept a cert-bundle in addition to a single cert. #8783
No significant changes.
No significant changes.
- Adding version-info to pulp_certguard.app.PulpCertGuardPluginAppConfig.
- Making pulp-certguard compatible with pulpcore 3.9.
No significant changes. A compatibility release used to declare compatibility up to pulpcore==3.8.
No significant changes.
- Making pulp-certguard compatible with pulpcore 3.5 #7177
No significant changes.
- Add support for non-urlencoded certificates to allow Apache < 2.6.10 reverse proxies to also work. #6574
- RHSMCertGuard now only checks for authorized URLs in the client cert against the
Distribution.base_pathand disincludes thesettings.CONTENT_PATH_PREFIX, e.g./pulp/content/#6694
- Adds docs on configuring Apache 2.6.10+ and < 2.6.10 docs, which need different configs. #6574
- Adds documentation on RHSM path checking with examples. Also adds a debugging section on inspecting
RHSM certificates with the
rctcommand. #6694 - Adds debugging documentation on how users can enable, use, and interpret the debugging logging. #6744
- Adds RHSMCertGuard which offers both content protection and path-based entitlement checking. #4664
- Make repositories "typed". Repositories now live at a detail endpoint. Sync is performed by POSTing to {repo_href}/sync/ remote={remote_href}. #5625
X509CertGuard.ca_certificateis now stored in the database and not on the filesystem. #6352
- Adds documentation on how authorization checking works and that there are two types of Certguards now. #4664
- Move documentation from README.md to sphinx site to show on https://pulp-certguard.readthedocs.io/ #6298
- Total rewrite of the documentation with tested reverse proxy examples, X509 Cert Guard usage, and RHSM Cert Guard usage. #6445
- Adds notes to docs that to use RHSMCertGuard you have to install rhsm Python module. #6546
-
Renames the
SSL_CLIENT_CERTIFICATEto beX-CLIENT-CERT. #4891 -
Change _id, _created, _last_updated, _href to pulp_id, pulp_created, pulp_last_updated, pulp_href #5457
-
Sync is no longer available at the {remote_href}/sync/ repository={repo_href} endpoint. #5625
-
Migrations had to be regenerated from scratch due to a backwards incompatible change where
X509ContentGuard.ca_certificateis now stored in the database and not on the filesystem. Users who have already run migrations will need to drop theRHSMCertGuardandX509CertGuardtables manually from their databases, reapply migrations, and re-create their CertGuard objects.Also the submission of the client cert to the content app occurs via the X-CLIENT-CERT header, and is expected to be urlencoded. #6352