Update dependency jsrsasign to v11 #25
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^8.0.12->^11.0.0Release Notes
kjur/jsrsasign (jsrsasign)
v11.1.0: restore KJUR.crypto.Cipher class without RSA/RSAOAEP supportCompare Source
v11.0.0: remove RSA and RSAOAEP encryption for Marvin attackCompare Source
remove encrypt/decrypt/encryptOAEP/decryptOAEP for RSAKey class
v10.9.0: enhanced support for encrypted PKCS8Compare Source
aes128-CBC, aes256-CBC encrypted and using hmacWithSHA224/256/384/512 as
psudorandom function.
priavte key.
v10.8.6: X509.getExtSubjectDirectoryAttributes another bugfixCompare Source
v10.8.5: X509.getExtSubjectDirectoryAttributes bugfixCompare Source
v10.8.4: more SubjectDirectoryExtension supportCompare Source
ExtSubjectDirectoryAttributes extension
result has unnecessary new line in the end of string.
v10.8.3: CABF SMIMEBR OID supportCompare Source
v10.8.2: RSA OAEP encryption fixCompare Source
In rare cases, it have been generated ciphertext that
could not be decrpyted.
v10.8.1: npm export missing fixCompare Source
v10.8.0: UserNotice of CertificatePolicies support and moreCompare Source
v10.7.0: custom X.509 extension support and utility functionsCompare Source
v10.6.1: Add PolicyMappings, PolicyConstraints and InhibitAnyPolicy extension supportCompare Source
PolicyMappings, PolicyConstraints and InhibitAnyPolicy
{PolicyMappings,PolicyConstraints,InhibitAnyPolicy}
{PolicyMappings,PolicyConstraints,InhibitAnyPolicy}
v10.6.0: StringPrep DN canonicalization support and some fixCompare Source
z* Changes from 10.5.27 to 10.6.0 (2022-Nov-04)
DN name (a.k.a. StringPrep).
consistency with KJUR.asn1.x509.OtherName class constructor.
v10.5.27: extend CertificationRequestInfo class for challengePassword and unstructuredNameCompare Source
v10.5.26: CSRUtil class enhancementCompare Source
v10.5.25: CVE-2022-25898 Security fix in JWS and JWT validationCompare Source
verify and verifyJWT may accept signature with special characters
or \number characters by mistake.
Please see security advisory:
GHSA-3fvg-4v2m-98jf
v10.5.24: X509.getParam bugfix for v1 certificateCompare Source
v10.5.23: BitString parsing bug fixCompare Source
namearraytobinstr, extendClass)
v10.5.22: DERBitString, KeyUsage and tsp PKIFailureInfo critical bug fixCompare Source
v10.5.21Compare Source
v10.5.20: OCSP ResponderID object udpateCompare Source
X509 object for key and name field.
v10.5.19: Time stamp package updateCompare Source
will be optional. If omitted, it will be "granted" by default.
v10.5.18: Time stamp package updateCompare Source
v10.5.17: CIDR subnet mask support in iptohex and hextoipCompare Source
v10.5.16: Add NameConstraints extension and modify getEncodedHex to tohexCompare Source
in the result.
in the result.
Please use ASN1Object.tohex() instead.
v10.5.15: X509.getExtCRLDistributionPointsURI small fixCompare Source
undefined when no CDP extension as specified in document
even though it is deprecated method.
v10.5.14: KEYUTIL.getPEM small fixCompare Source
optional public key field will be omitted in such case. (#549)
v10.5.13: RSA key private generation fixCompare Source
v10.5.12: support ISO 8859-1 TeletexString and BMPString for X500NameCompare Source
ISO 8859-1 Latin1 characters. Before this version,
only supports ASCII characters.
Add support for Teletex/BMPString and more attrTypes
v10.5.11: asn1hex updateCompare Source
v10.5.10: hextoipv6 fixCompare Source
v10.5.9: small fixCompare Source
v10.5.8: OCSP CertID and X509 class updateCompare Source
v10.5.7: X509CRL.findRevCert bugfix for empty revCertsCompare Source
v10.5.6: X509CRL.findRevCert bugfixCompare Source
v10.5.5: CRL parser updateCompare Source
v10.5.4: ASN.1 parser update and fixCompare Source
v10.5.3: add OtherName support in GeneralNameCompare Source
with small update (#535)
v10.5.2: small update for OID and JWKCompare Source
v10.5.1: add KEYUTIL.getJWK, fix EC P-521 concat signature value and add support for P-521 JWS JWKCompare Source
qunit-do-keyutil-jwk
v10.5.0: Add EC support for secp521r1 secp224r1 secp192r1Compare Source
Thank you indeed for @cplussharp 's great work.
v10.4.1: GeneralizedTime, UTCTime refactoring and some bug fixCompare Source
(will be fixed in next release while rebuild)
test case added and updated.
v10.4.0: Full support for parsing OCSP responseCompare Source
v10.3.2: fix wrong OCSPRequest for EC public key certificateCompare Source
v10.3.0: remove all YUI dependencyCompare Source
v10.2.0: CVE-2021-30246 RSAKey.verify issue fixCompare Source
v10.1.13: add non-ascii BMPString supportCompare Source
v10.1.12: fix for wrong UTF-8 encoding in distinguished name parserCompare Source
v10.1.11: update X509.getVersion and add jsrsasign-util saveFileJSONCompare Source
empty(DEFAULT =v1) and [0] {INTEGER 2} (=v3).
Thus version checking is relaxed. (#471)
v10.1.10: extend support for distinguished nameCompare Source
AttributeTypeAndValue({str: "/streetAddress=foo"})
AttributeTypeAndValue({str: "/2.5.4.9=foo"})
v10.1.9: Add SubjectDirectoryAttributes extension supportCompare Source
SubjectDirectoryAttributes
such as gender, placeOfBirth et.al. for
SubjectDirectoryAttributes.
needed to be implemented in X509.js future.
v10.1.8: KEYUTIL supports PKCS8 private key with extensionprivate key extsion and and issue #454 fixed.
v10.1.5: CAdES-T support update and fixCompare Source
parseSignedDataForAddingUnsigned will not call it.
v10.1.4: TSPParser.getPKIStatusInfo bugfixCompare Source
v10.1.3: TSPParser.getPKIStatusInfo updateCompare Source
supports PKIFreeText and PKIFailureInfo
v10.1.2: add SigningCertificateV2 for CMSParser and issue fixCompare Source
SigningCertificateV2
CMSParser.getCertificateSet
v10.1.1: CMSSignedData and TimeStamp parser bugfixCompare Source
"serial" in TSTInfo class and TSPParser.getTSTInfo
method.
CMSParser.getAttributeList to align to the name
AttributeList class.
can be accepted by AttributeList constructor.
by getSignerInfo method was fixed.
v10.1.0: add new CMSSignedData and TimeStamp parser and X500Name updateCompare Source
EContent,SignerInfos,SignerInfo,SignerIdentifier,
IssuerAndSerialNumber,AttributeArray,
Attribute,ESSCertID,IssuerSerial,CertificateSet}
SigningCertificate}
PKIStatusInfo}
because of X509.getX500Name update.
base64x,x509-ext,x509crl}.html
v10.0.5: small issue fixes and updatesCompare Source
replace new Buffer() to Buffer.from() for
Node.JS deprecation (issue #460)
v10.0.4: add methods to modify some extension parametersCompare Source
v10.0.3: add findExt method in X509 classCompare Source
v10.0.2: AdobeTimeStamp X.509v3 extension parser bugfixCompare Source
v10.0.1: AdobeTimeStamp X.509v3 certificate extension addedCompare Source
v10.0.0: Major update for CMS SigneData TimeStamp and CAdESCompare Source
to allow more simple ASN.1 generation
SignedData, Attribute
ContentType, SigningTime are also
updated.
PKIStatus, PKIFreeText, PKIFailureInfo,
TSPUtil.newTimeStampToken
SignatureTimeStamp, CompleteCertificateRefs,
OtherCertID, OtherHash
argument for explicit "tage" and implicit "tagi"
now accepts name and OID. method
setValueNameOrOid added.
X509 class constructor add support for
PEM or hex string of certificate as
argument.
OID added.
v9.1.9: wrong encoding in CRLReason in OCSP CertStatus fixedCompare Source
v9.1.8: wrong encoding in byKey of OCSP ResponderID fixedCompare Source
v9.1.7: nextUpdate encoding bugfix in ocsp SingleResponseCompare Source
v9.1.6: add OCSP response and request encoderCompare Source
isserNameHash, issuerKeyHash and serialNumber
without backward compatibility
v9.1.5: ASN1HEX getChildIdx bug for too many childrenCompare Source
proper result when too many child items
such as over 200 children.
use getTLVblen instead.
v9.1.4: X509CRL parser revokedCertificate bugfixX509CRL parser revokedCertificate bugfix
get{Idx,V,TLV}byListEx.
no revokedCertificates
missed to export X509CRL in npm package
v9.1.2: add private extension support for Cert CRL and CSRCompare Source
in extension parser X509.getExtParam.
Thus certificate, CRL and CSR parser will
not raise error when undefined extension
is parsed.
private extension.
v9.1.1: new CRL parser and private extension encoder supportCompare Source
not using X509.parseExt
v9.1.0: new CRL APIs and other updatesCompare Source
class without backward compatibility.
missign SEQUENCE. (#448)
new KJUR.asn1.x509.Extension class.
been updated to align Certificate and
CertificationRequestInfo style in 9.0.0
without backward compatibility.
entry extension support in the future.
no more used in updated TBSCertList.
cRLNumber and cRLReason oids
was moved to new Extensions class.
asn1x509} updated to follow above updates.
v9.0.3: TimeStampToken ASN.1 encoding error fixCompare Source
CMSVersion 3.
v9.0.2: PolicyInformation named policy OID bug fixCompare Source
have not been accepted named policy OID such as "anyPolicy".
The issue was fixed.
v9.0.1: TimeStampToken contentType attribute bug fixCompare Source
generated with wrong contentType attribute
with value "data". (#448)
contentType attribute with "tstinfo" for bugfix. (#448).
parameter can have "contentType" property additionaly
to set "tstinfo" as above.
added to OID.name2oidList.
v9.0.0: Certificate and CSR generator and parser API major updatesCompare Source
https://github.com/kjur/jsrsasign/wiki/NOTE-jsrsasign-8.0.x-to-9.0.0-Certificate-and-CSR-API-migration-guide
backward compatibility so you may need to change your code
to upgrade jsrsasign 9.0.0.
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.