Skip to content

v0.2.0

Choose a tag to compare

View all tags
@mervin008 mervin008 released this 23 Sep 06:35
· 11 commits to main since this release
v0.2.0
a951ffd
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

The first release published from the agent's own repository.

ghcr.io/certpilot/agent:0.2.0     linux/amd64, linux/arm64

Same image name as before, so nothing that pulls ghcr.io/certpilot/agent has to change. Only the source repository moved.

A minor rather than a patch bump. The agent last shipped inside the core's v0.1.1 release, and has since gained:

  • Windows. The agent builds and runs there, and a private key stays readable by its owner alone: on Windows that is an ACL, not a file mode (certpilot/certpilot#69).
  • The Windows certificate store and an iis profile, because IIS, Exchange and ADFS bind a certificate from the store, not from a file (certpilot/certpilot#70).
  • A named private key entry in a PKCS#12 keystore (certpilot/certpilot#66).

CI at this commit ran IIS end to end — install, renew and roll back against a running IIS — and the ACL on a real Windows kernel, and completed the lifecycle against the core. All passed.

Known issues

  • Installed with go install, the binary reports 0.1.0-dev, to the core as well, on enrolment and every heartbeat. The image reports 0.2.0. Fixed on main (#3), not yet released.
  • In the core: a certificate shorter than its renewal lead time renews on every cycle (certpilot/certpilot#109), and renewing an agent-held certificate by hand makes CertPilot hold its private key (certpilot/certpilot#107).
Assets 2
Loading