Genesis v2.7.7 Release Notes
Release Date: 2020-04-23 // about 4 years ago-
๐ Improvements
Soften secrets validation assessment
โ This commit lowers the validation assessment from error to warning on the
following:X509:
- CN doesn't match kit's expected CN
- SAN doesn't match kit's expected SAN, or if CN matches a diffent SAN
- Usage doesn't match kit's expected usage.
dhparams, rsa and ssh:
- size doesn't match kit's expectation
random string:
- size doesn't match kits expection
- characters used contain invalid characters
โ Added warnings for when certificate is expected to expire withing the
next 30 days.Ensure genesis.env is present, warn on params.env
๐ 2.6.13 deprecated
params.env
, and for a brief time printed a warning
to that effect until it was determined that it was too noisy.๐ 2.7.0-2.7.6 removed the usage of
params.env
and enforced the migration
of params.env to genesis.env, and kits declared with minimum version of
2.7.0 were expected to usegenesis.env
where they before used
params.env
.โ After pushback, we have decided to soften the stance, and print warnings
๐ when the environment uses a kit with genesis_version_min of 2.7.0 or
higher. As these kits require genesis.env to be set, we do so as part
๐ of the manifest merge.๐ Bug Fixes
๐ Fix kit version lookup on unsaved new environments
Fix expanded path in GENESIS_CALLBACK_BIN
If the genesis binary invoked involved a symlink in the path, then the
๐ binary reference would have the full path. This fixes that.