RC 41

Improvements

• Certificate Validation: Make OpenSSL verify pilot configurable (#319)

RC 40

Improvements

• Certificate Validation: Piloting OpenSSL verification and FICAM Certificate Bundle (#310, #314)
• Certificate Store: Add missing intermediate certificates (#315)
• Certificate Store: Remove expired certificate (#317)

Internal

• Logging: Log certificate when OpenSSL verification does not match current verification (#313)
• Logging: Log signing_key_ids in chain when processing certificate (#316)

RC 39

Improvements

• Upgrade to Rails 6.1.6.1 (#308)

RC 38

Improvements

• Add Department of Education intermediate certificate (#303)

RC 37

Improvements

• Add HHS intermediate certificate (#303)

RC 36

Improvements

• Disable new relic log shipping (#303)

RC 35

Bug Fixes

• Certificate Validation: Only allow trusted root checks for non-leaf certificates (#297

Internal

• Dependencies: Update Ruby on Rails (#299)
• Logging: Log PIV/CAC certificate metadata (#298, #300)

RC 34

Internal

Dependencies: Update dependencies to resolve security advisories (#294, #295)

RC 33

RC 33

Internal

Deployment: Add retries to database migration attempts to make migrations smoother (#290)
Dependencies: Update dependencies to fix security vulnerabilities (#293)

RC 32

Internal

Certificates: Remove expired certificates (#280)