v1.0.7

What's Changed

• Pass in handle directly in win32 api call instead of a pointer and remove erroneous logging. by @copybara-service[bot] in #93
• Introduce a ValidateGenerateOpts function to ensure that RSA key sizes are at least 2048 bits and EC curve sizes are supported. This validation is now applied at the start of the Generate methods for FileStorage, Credkit, and WinCertStore. Also includes minor refactoring, such as renaming createMode to userReadWrite and updating import order in the Windows implementation. by @copybara-service[bot] in #96
• Bump golang.org/x/crypto from 0.31.0 to 0.45.0 in the go_modules group across 1 directory by @dependabot[bot] in #92
• Handle possible panics when running wmi queries. by @copybara-service[bot] in #98
• Add support for removing certificates on Windows via subject and serial (aka CertInfo struct), via new method RemoveByCertInfo(). by @copybara-service[bot] in #95
• golang module updates by @copybara-service[bot] in #100
• Add workflow permissions. by @copybara-service[bot] in #101

Full Changelog: 1.0.6...v1.0.7

v1.0.6

What's Changed

• Use standard errors package for error handling by @apurv15 in #87

Full Changelog: v1.0.5...v1.06

What's Changed

• Use standard errors package for error handling by @apurv15 in #87

Full Changelog: v1.0.5...v1.06

v1.0.5

What's Changed

• Wrap one of the errors. by @copybara-service[bot] in #79
• Bump golang.org/x/crypto from 0.17.0 to 0.31.0 in the go_modules group by @dependabot[bot] in #80
• certtostore: Support ECDSA keys for file-based storage. by @copybara-service[bot] in #81
• Store with flags by @yuval-lom in #85
• Fix integer overflow by @apurv15 in #84
• Add badges for README.md by @leozz37 in #40
• Use correct data types for DWORD by @ZetaTwo in #78
• Internal Change by @copybara-service[bot] in #69
• New API to find certificate given a common name. by @apurv15 in #86

New Contributors

• @yuval-lom made their first contribution in #85
• @apurv15 made their first contribution in #84
• @leozz37 made their first contribution in #40
• @ZetaTwo made their first contribution in #78

Full Changelog: v1.0.4...v1.0.5

CertToStore v1.0.4

What's Changed

• Support PSS padding. by @copybara-service in #64
• Bump golang.org/x/crypto from 0.1.0 to 0.17.0 by @dependabot in #68
• update certtostore tests to go 1.22 by @copybara-service in #70
• Add ECDH AlgorithmGroup name and magic numbers. by @copybara-service in #71
• Change wmi to the github.com/yusufpapurcu/wmi fork. by @ItsMattL in #75
• Fix cert finding logic and ensure context cleanup for windows by @gehhilfe in #76
• Use less aggressive filtering for pulling ac addresses since Intel BE200s don't show up as physical adapters. The PCI filter should accomplish the same thing. Intel says the BE200 not showing up as a physical adapter in WMI is WAI and won't be changed. by @copybara-service in #77

New Contributors

• @gehhilfe made their first contribution in #76

Full Changelog: v1.0.3...v1.0.4

CertToStore v1.0.3

What's Changed

• Update go.mod and add go.sum by @copybara-service in #45
• Add tests for getPropertyStr by @copybara-service in #44
• Use bytes.ReplaceAll instead of strings.Replace for getPropertyStr. by @copybara-service in #46
• Update certtostore tests to Go 1.18. by @copybara-service in #43
• Specify full path on icacls due to golang/go#53536 by @copybara-service in #48
• Small fix to previous error checking by @copybara-service in #49
• Define a certtostore interface for certtostore_windows to enable testing by @copybara-service in #54
• Migrate certtostore logging from github.com/google/logger to github.com/google/deck. by @copybara-service in #58
• Implement OpenWinCertStoreCurrentUser constructor by @n-canter in #57
• Bump golang.org/x/crypto from 0.0.0-20210220033148-5ea612d1eb83 to 0.1.0 by @dependabot in #60
• Respect currentUser/localMachine flags in certificate operations by @n-canter in #61
• Export removeCert, add StoreWithDisposition by @n-canter in #62

New Contributors

• @n-canter made their first contribution in #57

Full Changelog: v1.0.2...v1.0.3

CertToStore v1.0.2

CertToStore v1.0.2 makes some changes to certificate store file handles on Windows. These changes are aimed at preventing possible leakage of file handles in some situations. Users will need to ensure they call the Close() functions to release handles to the store after use.

What's Changed

• Use CertWithContext() for Cert() by @copybara-service in #41
• Refactor cert store handling. by @copybara-service in #42

Full Changelog: v1.0.1...v1.0.2

CertToStore v1.0.1

CertToStore 1.0.1 improves ECDSA support, Windows context handling and support for working with multiple Windows crypto providers, among other bug fixes and improvements.

What's Changed

• Encode private key using PKCS #8 instead of PKCS #1 by @copybara-service in #25
• Drop ncryptAllowDecryptFlag when generating ECDSA keys. by @copybara-service in #29
• Associate BCRYPT_ECDSA_PUBLIC_GENERIC_MAGIC with the P256 curve (the only EC key type we generate now). by @copybara-service in #31
• Add (Key).TransientTpmHandle() by @copybara-service in #30
• If an incorrect magic value is returned while generating an ECDSA key, try to derive the curve from the NCRYPT_ECC_CURVE_NAME_PROPERTY property instead of assuming P256. by @copybara-service in #32
• Enable ECDSA_P384 and ECDSA_P521 generation. by @copybara-service in #33
• Implement NCryptFreeObject which is supposed to be used when finished with an open storage provider. by @copybara-service in #36
• Modify keyMetadata for provider detection. by @copybara-service in #37
• Add FreeCertContext by @copybara-service in #38

Full Changelog: 1.0.0...v1.0.1

1.0.0

Initial release.