1.13.0

What's Changed

• Add From<DnsName<'a>> for ServerName<'a> by @stormshield-gt in #82
• Mark all possible functions const by @ctz in #81
• pem: avoid some allocations by @djc in #83
• ci: take updated nightly for cargo-check-external-types by @cpu in #85
• add ed448 support by @stevefan1999-personal in #87
• Add From<[u8; 4]> for Ipv4Addr by @xyzzyz in #90
• 1.13.0: impl Hash for a bunch of types by @ctz in #91

1.12.0

• Implement Zeroize for private key types
• Add algorithm identifiers for ML-DSA signing algorithms

What's Changed

• Add support for the zeroize crate by @jarhodes314 in #71
• rustfmt: style_edition 2024 by @ctz in #74
• Add cargo deny check in CI by @djc in #76
• Add AlgorithmIdentifiers for ML-DSA variants by @djc in #78
• Check external types in public API by @ctz in #80
• Prepare 1.12.0 release by @djc in #79

1.11.0

What's Changed

• feat: add const try_from_str constructor to DnsName type. by @DSharifi in #69
• Move AlgorithmIdentifier values to here from rustls-webpki by @ctz in #67

New Contributors

• @DSharifi made their first contribution in #69

Full Changelog: v/1.10.1...v/1.11.0

1.10.1

Fixed an issue where we failed to read PEM objects from slices without trailing newline. This failed in the PEM decoder introduced in rustls-pki-types 1.9.0 whereas it worked in rustls-pemfile 2.12.0. We now include a test to make sure this case doesn't regress again.

What's Changed

• fix misc. clippy findings by @cpu in #65
• Fix reading PEM from slices without trailing newline by @djc in #66

1.10.0

In 1.9.0 we forgot to implement std::error::Error for the new pem::Error type. Add it.

What's Changed

• Implement std::error::Error for pem::Error by @djc in #63

1.9.0

This crate now contains a stand-alone PEM decoder. This removes a dependency on the base64 crate, and also means PEM decoding of private key data is now done in constant time and avoids secret-dependent branches and memory accesses (at some performance cost).

The function of the rustls-pemfile crate is incorporated into this one. We will shortly make an apex release of rustls-pemfile which maintains the same API as before, using the new API in this crate.

What's Changed

• actions/checkout: v3 -> v4 by @ctz in #52
• feat: more from impls for ServerName and IpAddr by @nanoqsh in #55
• feat: derive Ord on UnixTime by @devanlai in #57
• Direct support for PEM-decoding of this crate's types by @ctz in #53
• Fix documentation referring to private item by @ctz in #58
• Support PEM decoding for EchConfigListBytes by @ctz in #54

New Contributors

• @nanoqsh made their first contribution in #55
• @devanlai made their first contribution in #57

Full Changelog: v/1.8.0...v/1.9.0

1.8.0

• New const CertificateDer::from_slice() function for creating a CertificateDer instance from a slice of DER.

What's Changed

• Fix some new 1.79 clippy findings by @cpu in #50
• add const-friendly CertificateDer::from_slice by @cpu in #51

Full Changelog: v/1.7.0...v/1.8.0

1.7.0

• SubjectPublicKeyInfo was renamed to SubjectPublicKeyInfoDer, and a deprecated type alias under the old name was added.

What's Changed

• v1.7.0 prep, SubjectPublicKeyInfo -> SubjectPublicKeyInfoDer by @cpu in #48

Full Changelog: v/1.6.0...v/1.7.0

1.6.0

What's Changed

• Add SubjectPublicKeyInfo DER newtype by @lvkv in #47

v/1.5.0

• A new EchConfigListBytes type is added for representing TLS encoded Encrypted Client Hello (ECH) configuration lists. See draft-ietf-tls-esni-18 §4 for more information.

What's Changed

• Move test keys into tests by @djc in #44
• Move key type determination tests into tests/ by @djc in #45
• add EchConfigListBytes for encrypted client hello configs by @cpu in #46

Full Changelog: v/1.4.1...v/1.5.0