Skip to content

Release v2.1.0

Latest
Latest

Choose a tag to compare

View all tags
@xlloit xlloit released this 13 Jun 08:46
v2.1.0
1bbab11
This commit was signed with the committer’s verified signature.
xlloit xlloyd
SSH Key Fingerprint: 3Mob4E6ZEM5UnDnZLDxdNe0atJA58GFjPXUWOb+lq5k
Verified
Learn about vigilant mode.

This update includes import at security fixes.

  • Added canonical FourEye signing JSON on Keeper and SDK sides.
  • Sorted JSON object fields recursively for signing while preserving array order.
  • Aligned FourEye approval hashes for sign, generate, decrypt, and key destroy flows.
  • Fixed SDK & server signing parity for nested policy and command objects.
  • Changed FourEye approver keys to ordered list semantics and kept duplicate-key rejection.
  • Fixed JWT exp validation, added nbf validation with configurable clock-skew and added optional JWT issuer binding via auth.jwt.issuer.
  • Hardened internal auth query canonicalization against duplicate decoded query keys.
  • Rejected query signing transcript separators in query keys and values.
  • Fixed SSL trust context factory binding to internal clients.
Assets 2
Loading