Skip to content

v1.17.2

Pre-release
Pre-release
Compare
Choose a tag to compare
@conjur-jenkins conjur-jenkins released this 13 Feb 19:02
· 730 commits to master since this release
v1.17.2-2477
921e3ed
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

[1.17.2] - 2022-03-09

Added

  • Added the ability to fetch signing keys from JWKS endpoints that use a self-signed
    certificate or a certificate signed by a third-party CA for JWT generic vendor
    configuration
    (#2462
    #2461
    #2456
    #2455
    #2457
    #2452
    #2437)
  • Added the ability for JWT generic vendor configuration to receive signing keys
    for JWT token verification from a variable. Variable name is public-keys
    (#2463
    #2461
    #2456
    #2455
    #2454
    #2450
    #2447
    #2437)
  • Added support for SNI certificates when talking to the Kubernetes API
    server through the web socket client.
    #2482
  • Added support for http(s)_proxy for Kubernetes client in Kubernetes
    authenticator
    #2432

Changed

  • Update to automated release process
  • Proper error message appears when JWT Authenticator gets HTTP code error
    while trying to fetch JWKS data from jwks-uri #2474
  • Upgrade to Ruby 3. #2444

Fixed

  • IAM Authn bug fix - Take rexml gem to production configuration #2493
  • Previously, a stale puma pid file would prevent the Conjur server from starting
    successfully. Conjur now removes a stale pid file at startup, if it exists.
    #2498
  • Use entirety of configured Kubernetes endpoint URL in Kubernetes authenticator's
    web socket client, instead of only host and port
    #2479

Security

Assets 7
Loading