Skip to content

CHANGELOG.md

Latest commit

 

History

History
1581 lines (841 loc) · 78.1 KB

CHANGELOG.md

File metadata and controls

1581 lines (841 loc) · 78.1 KB
Raw

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

6.19.0 (2026-07-29)

Bug Fixes

  • exports: declare types per condition so ESM consumers compile (8fd3d60)
  • test: stop the suite hanging after it passes (50713da)

6.18.0 (2026-06-24)

Bug Fixes

  • replace wget-improved-2 with native fetch, detect system OpenSSL (0346b10)

6.17.0 (2026-05-13)

Note: Version bump only for package node-opcua-pki-project

6.16.0 (2026-05-12)

Features

  • ca: support sub-day validity via validityMs + getCapabilities() (ebc4711)

6.15.0 (2026-05-12)

Features

  • ca: opt-in CDP & AIA extensions in issued certificates (0ed2da9)

6.14.0 (2026-04-30)

Bug Fixes

  • ca: emit SubjectAltName on CA self-signed certificate (c3e668d)

6.13.0 (2026-04-12)

Features

  • CertificateManager: add completeCertificateChain (91f53b1)
  • pki: add disableFileWatchers option to relax event loop (1ad2c1b)

6.12.2 (2026-04-10)

Bug Fixes

  • preserve certificate chains on disk in CertificateManager (18426b4)

6.12.1 (2026-04-04)

Note: Version bump only for package node-opcua-pki-project

6.12.0 (2026-03-29)

Bug Fixes

  • pki: Handle Certificate[] natively in makeFingerprint (bda68fb)

6.11.1 (2026-03-26)

Note: Version bump only for package node-opcua-pki-project

6.11.0 (2026-03-25)

Bug Fixes

  • pki: CRL filenames no longer contain (3d2a24d)

Features

  • ca: add generateKeyPairAndSignDER method (ece765b)
  • ca: add subordinate CA support with manual (8df521f)
  • ca: issuer chain support and code cleanup (587b1ba)

6.10.2 (2026-03-24)

Bug Fixes

  • ca: recover from partial CA initialization (a59f971)

6.10.1 (2026-03-24)

Bug Fixes

  • ca: use separate v3_ca_req section for CSR generation (dbadb7e)

6.10.0 (2026-03-24)

Bug Fixes

  • ca: use keyid instead of keyid:always,issuer:always (72e6f8d)

6.9.0 (2026-03-20)

Bug Fixes

  • ca: revokeCertificateDER now uses stored cert (ecde299)
  • strip OpenSSL text dump from PEM accessors (65f4474)

Features

  • ca: add buffer-based cert & CRL accessors (641e482)
  • ca: add buffer-based sign & revoke methods (aa1b0ac)
  • ca: add certificate database API (US-057) (cc01917)

6.8.2 (2026-03-08)

Bug Fixes

  • skip flaky live-detection tests on macOS (dd2242e)

Features

  • pki: add isTrustListEmpty() and (227a95d)

6.8.1 (2026-03-07)

Note: Version bump only for package node-opcua-pki-project

6.8.0 (2026-03-03)

Note: Version bump only for package node-opcua-pki-project

6.7.3 (2026-03-02)

Bug Fixes

  • drain pending locks in CertificateManager.dispose() (0b546dd)

6.7.2 (2026-03-01)

Bug Fixes

  • prevent EPERM crash on Windows + Node < 22 (9fef706)

6.7.1 (2026-02-27)

Bug Fixes

  • certificate-manager: avoid double .lock suffix (f161ff2)

Performance Improvements

  • certificate-manager: add LRU cache for (f0e9126)

6.7.0 (2026-02-26)

Bug Fixes

  • emit certificateAdded for certs written before (e229161)
  • macOS CI test failures for stale issuer index (610e54f)

6.6.0 (2026-02-26)

Features

  • deferred watcher init and event emission (f813c6f)

6.5.1 (2026-02-23)

Note: Version bump only for package node-opcua-pki-project

6.5.0 (2026-02-22)

Bug Fixes

  • keep fs.watch interception until chokidar ready event and add before/after checkAllDisposed guards (6fef633)

  • prevent undisposed CertificateManager from blocking (0fbe111)

  • use absolute dist path in process exit test and increase timeouts for slow filesystems (0a7c2e3)

  • refactor!: sanitize public API and add JSDoc documentation (ff8903f)

Features

  • pki: Enhance PFX toolbox and certificate verification (a81b9c9), closes PKCS#12

BREAKING CHANGES

  • pki_main is no longer exported from the public API. The CLI binary now imports it directly from the internal module.

  • remove pki_main from public API (index.ts); the CLI (bin/pki.ts) now imports directly from internal path

  • remove internal helpers from public API: g_config, mkdirRecursiveSync, warningLog, makePath, quote

  • move Params type import to internal path in tests

  • update all test imports to use node-opcua-pki-priv/... paths for internal symbols

  • fix reloadCertificates tests that incorrectly disabled untrustUnknownCertificate (causing false "Good" status)

  • add comprehensive JSDoc to CertificateAuthority class, CertificateAuthorityOptions, and all public members

  • add comprehensive JSDoc to CertificateManager class, all public/protected methods, getters, fields, and the findIssuerCertificateInChain standalone function

  • add JSDoc to all exported types and interfaces in common.ts: KeySize, Filename, CertificateStatus, ProcessAltNamesParam, Params, StartDateEndDateParam, CreateSelfSignCertificateParam, etc.

  • add JSDoc to CertificateManagerOptions, CreateSelfSignCertificateParam1, VerifyCertificateOptions, VerificationStatus, CertificateManagerState

  • mark KeyLength as @deprecated in favor of KeySize

  • clean up old-style @method/@async JSDoc tags

6.4.0 (2026-02-20)

Bug Fixes

  • add mutex to _moveCertificate, fix dispose (32b76b5)
  • CertificateManager: scan issuers folder from disk (25a8c15)

Features

  • CertificateManager: add reloadCertificates and (033204c)

Performance Improvements

  • cache exploreCertificate results in Entry (9956ecf)

6.3.0 (2026-02-20)

Bug Fixes

  • CertificateManager: use lightweight chain validation (ec3850f)

6.2.0 (2026-02-20)

Bug Fixes

  • ci: fix publish workflow skipping on tag push (4c59b2a)

Features

  • CertificateManager: add certificate management and validation API (d0c6ceb)

6.1.0 (2026-02-20)

Bug Fixes

  • align publish workflow with node-opcua-crypto (f4cd1a6)

6.0.0 (2026-02-20)

Bug Fixes

  • package.json & package-lock.json to reduce vulnerabilities (41fbd50)
  • resolve test failures after monorepo restructuring (747fc75)
  • subject argument (95b6cce)
  • update test imports for monorepo structure (5cc9ebe)
  • upgrade rimraf from 4.0.0 to 4.4.1 (b57703a)
  • use windowsHide in exec (#23) (50ae307)

Features

  • CertificateManager: extend addRevocationList (ca2d4ad)
  • improve subjetName (05ad36f)
  • support dual CJS and ESM exports (82d3244)

Changelog

All notable changes to this project will be documented in this file. Dates are displayed in UTC.

Generated by auto-changelog.

5.7.0

  • chore: downgrade chokidar to version 4 3333e72

5.6.0

15 December 2025

5.5.0

3 July 2025

5.4.0

3 July 2025

5.3.0

5 April 2025

  • update packages f0a315c
  • fix certificate generation when uniformResourceIdentifier is not present 8e287ed
  • remove cli-table dependency b37726d

5.2.0

9 March 2025

  • generate signing request without openssl in CA 399a051
  • fix openssl issue that could cause command to fail when rootDir is a relative path b0f6425
  • chore: minor cleanup 34d173e

5.1.0

29 January 2025

  • chore: release v5.1.0 157c08e
  • fix installation of openssl on windows 4d21f2b
  • remove tests certificates from packages 6613e6e

5.0.0

29 January 2025

  • BREAKING CHANGE: remove callback support to favor async/await 85a6262
  • chore: formatting 4e0af65
  • update copyright year 6eadac5

4.18.0

16 December 2024

  • chore: release v4.18.0 65ef098
  • replace deprecate string.substr with string.substring 735ebe3
  • buildIdealCertificateName now replace / or \ with _ to avoid building invalid filename from certificate CN 20aee24

4.17.0

14 December 2024

  • add publish github action d71bd1f

4.16.0

13 October 2024

4.15.0

5 October 2024

4.14.0

24 September 2024

4.13.1

6 September 2024

4.13.0

6 September 2024

4.12.0

6 September 2024

4.11.1

16 July 2024

4.11.0

16 July 2024

4.10.0

25 February 2024

  • update packages, use node-opcua@4.8.0 with RSA_PKCS1_PADDING fix (CVE-2023-46809) 51a304c
  • Release 4.10.0 8529795

4.9.0

21 January 2024

  • update node-opcua-crypto to v4.7.0 51a594b
  • fix: upgrade rimraf from 4.0.0 to 4.4.1 b57703a
  • update copyright year a45d4b1

4.8.1

19 November 2023

4.8.0

18 November 2023

  • update packages (node-opcua-crypto@4.6.1) 20bdac0
  • chore: switch to esModuleInterop 6bc691c
  • fix verifyCertificate with ignoreMissingRevocationList 02c2616

4.7.0

6 September 2023

4.6.0

5 September 2023

4.5.0

3 September 2023

  • update packages 92fc2ea
  • fix ci.yml not to use npm@10 with old version of node 1b54005
  • remove appveyor support 9f05e91

4.4.0

17 August 2023

4.3.0

14 August 2023

  • update packages, remove nyc b65f7ab
  • update packages 41efb37
  • add option to accept outdated or pending certificates during verification a7d1f9a

4.2.1

10 June 2023

4.2.0

2 June 2023

  • rename createPrivateKey => generatePrivateKeyFile 0359bac
  • Release 4.2.0 2b8ed0e

4.1.1

1 June 2023

4.1.0

1 June 2023

4.0.2

31 May 2023

4.0.1

31 May 2023

4.0.0

27 May 2023

  • update packages cd83450
  • add example for self signed cert creation with multiple DNS and IP fields 1ab713a
  • Release 4.0.0 2e34ef9

4.0.0-beta.9

23 May 2023

4.0.0-beta.8

21 May 2023

4.0.0-beta.7

21 May 2023

  • Release 4.0.0-beta.7 b4a7784
  • fix export of CertificateAuthority 4ace5d3

4.0.0-beta.6

21 May 2023

  • Release 4.0.0-beta.6 9366e75
  • add CertificateAuthority.d.ts in root folder 89b0adc

4.0.0-beta.5

21 May 2023

  • Release 4.0.0-beta.5 1e604bd
  • fix package.json and npm ignore file 6dbdbf3

4.0.0-beta.4

21 May 2023

  • fix package.json and npm ignore file 0ca9642
  • Release 4.0.0-beta.4 9e9ea8c

4.0.0-beta.3

21 May 2023

4.0.0-beta.2

21 May 2023

4.0.0-beta.1

21 May 2023

  • refactor and use node-opcua-crypto@3 e0e7337
  • update copyright notice and lint fixes 1cb62b4
  • Release 4.0.0-beta.1 bee236a

3.1.2

6 May 2023

  • adjust _innerVerifyCertificateAsync with issuer certificate detection f685132
  • Release 3.1.2 dbeccc7

3.1.1

6 May 2023

3.1.0

6 May 2023

  • update packages and introduce BadCertificateChainIncomplete when CA certificate missing 0a3b29e
  • Release 3.1.0 24356f5

3.0.2

8 January 2023

  • udpdate package fix json5 vulnerability 19f07bc
  • Release 3.0.2 9ec6d69
  • fix the problem of createPKI never end 9493e52

3.0.1

15 December 2022

3.0.0

14 December 2022

2.19.1

5 December 2022

2.19.0

5 December 2022

2.18.4

24 November 2022

  • fix unexpected quoted random.rnd filename bc59266
  • Release 2.18.4 140fbf4

2.18.3

5 November 2022

  • call ensure_openssl_installed only when necessary 65b0fd4
  • Release 2.18.3 ed91b5f

2.18.2

3 November 2022

  • Release 2.18.2 b776509
  • fix bin/pki entry in package.json to make it work on windows 795cbe2

2.18.1

3 November 2022

2.18.0

22 October 2022

2.17.0

25 June 2022

2.16.0

25 June 2022

  • update package and temporarily remove use of update-notifier b2424ab
  • Release 2.16.0 204572e

2.15.4

28 March 2022

2.15.3

28 March 2022

2.15.2

28 March 2022

  • use alternate wget-improved-2 maintained by node-opcua d662912
  • Release 2.15.2 381f395

2.15.1

28 March 2022

  • chore: address minimist vulnerability again db33cf7
  • Release 2.15.1 c4f9ef7

2.15.0

27 March 2022

2.14.2

26 March 2022

  • chore: add eslint support 59beb17
  • chore: update minimist to fix vulnerability issue 578dc83
  • chore: update Readme ad42c10

2.14.1

4 March 2022

  • fixed slashes in Subject CN #25
  • Release 2.14.1 ef0fbee

2.14.0

27 February 2022

2.13.0

5 December 2021

2.12.1

27 September 2021

  • fix: use windowsHide in exec #23
  • Release 2.12.1 37c2fc4

2.12.0

5 September 2021

2.11.2

19 July 2021

2.11.1

30 May 2021

2.11.0

30 May 2021

2.10.0

30 May 2021

2.9.8

10 April 2021

  • ensure openssl version is know before signing cert req 2229f15
  • ensure openssl version is know before signing cert req ddb2058
  • Release 2.9.8 9202be0

2.9.7

5 April 2021

  • Release 2.9.7 7434962
  • fix demo client certificate applicationUri e033f94

2.9.6

5 April 2021

  • make sure rootfolder exists before locking e3e5dd1
  • Release 2.9.6 e30d991

2.9.5

5 April 2021

2.9.2

3 April 2021

2.9.1

29 March 2021

2.9.0

28 March 2021

  • update package remove postinstall step 029c3d1
  • add semaphore to prevent concurrent access 56f4ab7
  • add GitLab Actions and fix coverage fc8916c

2.8.0

20 January 2021

  • update version 1574901
  • remove keyCertSign flag in keyUsage for standard certficate 163c5bc
  • minor refactoring 50e45e5

2.7.0

6 January 2021

  • migrate yargs commands to most recent api 4394cf8
  • no revocation for self-signed certificate ccb2197
  • use CertificateManager#dispose c447335

2.6.1

31 December 2020

2.6.0

31 December 2020

2.5.0

30 December 2020

  • apply subjectAltName from CSR to signed certificate a523d28
  • Release 2.5.0 9d5a58f

2.4.0

20 December 2020

2.3.0

12 December 2020

2.2.2

11 October 2020

2.2.1

11 October 2020

2.2.0

10 October 2020

2.1.8

9 October 2020

2.1.7

1 October 2020

  • update package and downgrade update-notifier 541cd87
  • Release 2.1.7 17d7520

2.1.6

30 September 2020

2.1.5

19 September 2020

2.1.4

19 September 2020

2.1.3

21 August 2020

  • add ability to pass subject description 9528f6e
  • Release 2.1.3 53aab53

2.1.2

19 August 2020

2.1.1

18 August 2020

  • make sure revocation lists are immediadely handled 392ab39
  • downgrade mocha d46de45
  • update packages 33073ed

2.1.0

10 August 2020

  • adjustments and minor fixes dc4ded8
  • chore: update package-lock 3a99fa6
  • Bump lodash from 4.17.15 to 4.17.19 6816bcb

2.0.4

30 June 2020

  • download openssl with proxy setting #11 c3535b5
  • Bump jsrsasign from 8.0.15 to 8.0.20 43517a8
  • Release 2.0.4 4c71e70

2.0.3

31 May 2020

2.0.2

18 May 2020

2.0.1

15 May 2020

2.0.0

14 May 2020

  • add issuers/certs management 0e23e4d
  • revamped Certificate manager 1739181
  • add Certifiicate Revocation List support 9c59e82

1.5.5

13 January 2020

1.5.4

11 November 2019

1.5.3

20 July 2019

1.5.2

10 May 2019

1.5.1

7 May 2019

1.5.0

6 May 2019

  • fix self-signed certificate extensions (#425) f604beb
  • Release 1.5.0 c446de9

1.4.1

4 May 2019

1.4.0

29 April 2019

1.3.1

13 April 2019

1.3.0

13 April 2019

  • refactor certificate verification 2c7b4c3
  • fix help to display --dns and --ip 52d0a0e
  • Release 1.3.0 1de9010

1.2.3

8 April 2019

1.2.2

8 April 2019

  • fix createSelfSignedCertificate parameters 9bf33ba
  • Release 1.2.2 4a5bf7b

1.2.1

7 April 2019

1.2.0

6 April 2019

1.1.1

2 April 2019

1.1.0

2 April 2019

v1.1.0

2 April 2019

  • OpenSSL random file does not exist #8
  • promisify certificate_manager 97b220b
  • Newer versions of OpenSSL does not create random files if them don't exist anymore. 209090d
  • Release 1.1.0 ffb0701

1.0.3

9 February 2019

v1.0.2

12 January 2019

  • do not recreate existing certificates if exists in demo mode 62af08a
  • Release 1.0.2 9bb6332

v1.0.1

25 November 2018

v1.0.0

28 October 2018

v1.0.0-beta.2

19 September 2018

  • fix typescript port for openssl install on windows e7d9be9
  • Release 1.0.0-beta.2 d85aec4

v1.0.0-beta.1

19 September 2018

v1.0.0-beta.0

19 September 2018

0.0.31

27 May 2018

0.0.30

7 April 2018

0.0.29

23 January 2018

  • LibreSSL Support #5
  • remove requirish 6e77844
  • Generating a temp config with injected environment variables. Support for LibreSSL. 5e82ae6
  • Less code duplication. bfc1eba

0.0.28

10 December 2017

  • add ability to create CA and PKI with 3072 & 4096 bits keys 875ae1b
  • Release 0.0.28 5c076b5

0.0.27

9 December 2017

0.0.26

2 December 2017

0.0.25

2 December 2017

  • TypeError: Path must be a string. Received undefined #3
  • Release 0.0.25 8dec88c
  • get_openssl_folder_win32 now returns local ssl path if LOCALAPPDATA environment variable is set AND the Programs directory does not exist. 658c83a

0.0.24

2 November 2017

0.0.23

1 November 2017

0.0.22

1 November 2017

0.0.21

25 October 2017

0.0.20

25 October 2017

0.0.19

25 October 2017

  • install openssl %LOCALAPPDATA%\Programs by default on windows bba9c46
  • fix installation of prerequisite openssl.exe 2184f1e
  • Release 0.0.19 b7aa331

0.0.18

24 October 2017

  • fix installation of prerequisite openssl.exe 0484820
  • update package.json 7ed63aa
  • add appveyor file 23a8528

0.0.17

18 June 2017

0.0.15

18 June 2017

  • add appveyor file c3242c9
  • use async version to check that openssl file exists 4c7136b
  • Release 0.0.15 8f36cf7

0.0.14

13 June 2017

0.0.13

7 May 2017

0.0.12

8 April 2017

0.0.11

14 December 2016

  • improve self-signed certificate creation from command line, add fingerprint and toder commands 4dc1f2b
  • improve support of subjectAlternativeName d511e56
  • allow 2 digits year in date when installed openssl version is 0.98 894a109

0.0.10

21 November 2016

0.0.9

12 November 2016

0.0.8

28 October 2016

  • fix openssl installation folder on windows dfb3b5b
  • Release 0.0.8 0310b66

0.0.7

28 October 2016

0.0.6

28 October 2016

  • fix openssl issue on windows caused by antivirus fa0a943
  • Release 0.0.6 94bf379

0.0.4

3 July 2016

0.0.3

23 May 2016

  • Release 0.0.3 59d3565
  • exclude unwanted files from npm module d604e36

0.0.2

23 May 2016