Skip to content

v0.1.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 17 Oct 13:53
· 9 commits to main since this release
v0.1.0
This tag was signed with the committer’s verified signature.
TurlaFSB Pranav Verma
SSH Key Fingerprint: Eu6uERcXGna+ONE3BIn0GDroywQonYEnCh4+Zbhl47Y
Verified
Learn about vigilant mode.
836e551
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

First stable release. It is the 0.1.0-rc.1 candidate (below) plus the TLS change listed here, proven end to end by the release pipeline and by the lab (107 of 107 real Log4j JNDI lookups flagged, no miss, leak or false positive). Verify what you download as described in docs/releasing.md, run in monitor mode first, and read docs/threat-model.md.

Changed

  • TLS 1.2 now accepts only forward-secret AEAD cipher suites by default (ECDHE with AES-GCM or ChaCha20-Poly1305). CBC and SHA-1 suites are off. Old clients that need them can be served with tls_legacy_ciphers (-tls-legacy-ciphers).

Image: ghcr.io/turlafsb/logshield@sha256:42ee525db80fa9f698864f7ab3775d4267631c9d06fa0e7eb2d00d930b8ff4b6

Built with go1.24.13. Reproduce the archives with the same Go version: scripts/build-release.sh v0.1.0.

Verify: see docs/releasing.md.

Assets 10
Loading