- Declared pulpcore compatibility up to 3.44.
No significant changes.
- Declared pulpcore compatibility up to 3.44.
- Allows for compatibility with pulpcore>3.25. #252
- Loosened restriction on pyOpenSSL to let us use 23.0 and its fixes. #293
- Loosened restriction on pyOpenSSL to let us use 23.0 and its fixes. #293
No significant changes.
No significant changes.
- Allows for compatibility with pulpcore>3.25. #252
No significant changes.
No significant changes.
- Taught bad-certificate-failures emit warnings to the server-log. #145
- Improved the validation of certificates. #232
- Loosened restriction on pyOpenSSL to let us use 23.0 and its fixes. #293
- Taught bad-certificate-failures emit warnings to the server-log. #145
No significant changes.
No significant changes.
No significant changes.
No significant changes.
No significant changes.
- Bumped pulpcore requirement for core/3.17 compatibility. #9641
- Bumped pulpcore requirement for core/3.16 compatibility. #9494
- Dropped support for Python 3.6 and 3.7. pulp-certguard now supports Python 3.8+. #9054
- Extended CertGuard.ca_certificate to accept a cert-bundle in addition to a single cert. #8783
No significant changes.
No significant changes.
- Adding version-info to pulp_certguard.app.PulpCertGuardPluginAppConfig.
- Making pulp-certguard compatible with pulpcore 3.9.
No significant changes. A compatibility release used to declare compatibility up to pulpcore==3.8.
No significant changes.
- Making pulp-certguard compatible with pulpcore 3.5 #7177
No significant changes.
- Add support for non-urlencoded certificates to allow Apache < 2.6.10 reverse proxies to also work. #6574
- RHSMCertGuard now only checks for authorized URLs in the client cert against the
Distribution.base_path
and disincludes thesettings.CONTENT_PATH_PREFIX
, e.g./pulp/content/
#6694
- Adds docs on configuring Apache 2.6.10+ and < 2.6.10 docs, which need different configs. #6574
- Adds documentation on RHSM path checking with examples. Also adds a debugging section on inspecting
RHSM certificates with the
rct
command. #6694 - Adds debugging documentation on how users can enable, use, and interpret the debugging logging. #6744
- Adds RHSMCertGuard which offers both content protection and path-based entitlement checking. #4664
- Make repositories "typed". Repositories now live at a detail endpoint. Sync is performed by POSTing to {repo_href}/sync/ remote={remote_href}. #5625
X509CertGuard.ca_certificate
is now stored in the database and not on the filesystem. #6352
- Adds documentation on how authorization checking works and that there are two types of Certguards now. #4664
- Move documentation from README.md to sphinx site to show on https://pulp-certguard.readthedocs.io/ #6298
- Total rewrite of the documentation with tested reverse proxy examples, X509 Cert Guard usage, and RHSM Cert Guard usage. #6445
- Adds notes to docs that to use RHSMCertGuard you have to install rhsm Python module. #6546
-
Renames the
SSL_CLIENT_CERTIFICATE
to beX-CLIENT-CERT
. #4891 -
Change _id, _created, _last_updated, _href to pulp_id, pulp_created, pulp_last_updated, pulp_href #5457
-
Sync is no longer available at the {remote_href}/sync/ repository={repo_href} endpoint. #5625
-
Migrations had to be regenerated from scratch due to a backwards incompatible change where
X509ContentGuard.ca_certificate
is now stored in the database and not on the filesystem. Users who have already run migrations will need to drop theRHSMCertGuard
andX509CertGuard
tables manually from their databases, reapply migrations, and re-create their CertGuard objects.Also the submission of the client cert to the content app occurs via the X-CLIENT-CERT header, and is expected to be urlencoded. #6352