Changelog
*********

Versions follow CalVer with a strict backwards compatibility policy.
The third digit is only for regressions.


18.1.0 (2018-12-05)
===================


Changes:
--------

* pyOpenSSL is optional now if you use
  "service_identity.cryptography.*" only.

* Added support for "iPAddress" "subjectAltName"s. You can now
  verify whether a connection or a certificate is valid for an IP
  address using "service_identity.pyopenssl.verify_ip_address()" and
  "service_identity.cryptography.verify_certificate_ip_address()". #12

======================================================================


17.0.0 (2017-05-23)
===================


Deprecations:
-------------

* Since Chrome 58 and Firefox 48 both don't accept certificates that
  contain only a Common Name, its usage is hereby deprecated in
  "service_identity" too. We have been raising a warning since 16.0.0
  and the support will be removed in mid-2018 for good.


Changes:
--------

* When "service_identity.SubjectAltNameWarning" is raised, the
  Common Name of the certificate is now included in the warning
  message. #17

* Added "cryptography.x509" backend for verifying certificates. #18

* Wildcards ("*") are now only allowed if they are the leftmost
  label in a certificate. This is common practice by all major
  browsers. #19

======================================================================


16.0.0 (2016-02-18)
===================


Backward-incompatible changes:
------------------------------

* Python 3.3 and 2.6 aren't supported anymore. They may work by
  chance but any effort to keep them working has ceased.

  The last Python 2.6 release was on October 29, 2013 and isn't
  supported by the CPython core team anymore. Major Python packages
  like Django and Twisted dropped Python 2.6 a while ago already.

  Python 3.3 never had a significant user base and wasn't part of any
  distribution's LTS release.

* pyOpenSSL versions older than 0.14 are not tested anymore. They
  don't even build on recent OpenSSL versions. Please note that its
  support may break without further notice.


Changes:
--------

* Officially support Python 3.5.

* "service_identity.SubjectAltNameWarning" is now raised if the
  server certicate lacks a proper "SubjectAltName". #9

* Add a "__str__" method to "VerificationError".

* Port from "characteristic" to its spiritual successor attrs.

======================================================================


14.0.0 (2014-08-22)
===================


Changes:
--------

* Switch to year-based version numbers.

* Port to "characteristic" 14.0 (get rid of deprecation warnings).

* Package docs with sdist.

======================================================================


1.0.0 (2014-06-15)
==================


Backward-incompatible changes:
------------------------------

* Drop support for Python 3.2. There is no justification to add
  complexity and unnecessary function calls for a Python version that
  nobody uses.


Changes:
--------

* Move into the Python Cryptography Authority’s GitHub account.

* Move exceptions into "service_identity.exceptions" so tracebacks
  don’t contain private module names.

* Promoting to stable since Twisted 14.0 is optionally depending on
  "service_identity" now.

* Use characteristic instead of a home-grown solution.

* "idna" 0.6 did some backward-incompatible fixes that broke Python
  3 support. This has been fixed now therefore "service_identity" only
  works with "idna" 0.6 and later. Unfortunately since "idna" doesn’t
  offer version introspection, "service_identity" can’t warn about it.

======================================================================


0.2.0 (2014-04-06)
==================


Backward-incompatible changes:
------------------------------

* Refactor into a multi-module package. Most notably,
  "verify_hostname" and "extract_ids" live in the
  "service_identity.pyopenssl" module now.

* "verify_hostname" now takes an "OpenSSL.SSL.Connection" for the
  first argument.


Changes:
--------

* Less false positives in IP address detection.

* Officially support Python 3.4 too.

* More strict checks for URI_IDs.

======================================================================


0.1.0 (2014-03-03)
==================

Initial release.
