Release version 14

What's Changed

• Update meson.build #153
• openssl/oct: improve bound check for len #162
• jwe: fix the case when we have "zip" in the protected header #161
• Avoid potential DoS with high decompression chunks #157

Full Changelog: v13...v14

Release version 13

What's Changed

• Fix potential DoS issue with p2c header (4ee7708)
• Build updates (#148) (dae5654)
• Display pkg_config in test logs (#134) (5e45732)

Full Changelog: v12...v13

Release version 12

What's Changed

• Clean up some FreeBSD conditions (#98) (5a81837)
• Add ES256K support (#90) (e6a7ae7)
• Meson changes (#135) (c1569b7)
• Update CI (#8) (#129) (253549a)
• lib/openssl/rsaes.c: Fix issue where jose_hook_alg_find failed to find the … …existance of RSA_OAEP algorithm (58112df)
• Increase test program/scripts timeout values (#131) (45367dd)
• Fix test compilation warnings (#127) (aee1096)
• Adapt alg_comp test to different zlib (#142) (4878253)
• Use checkout v3 Github action to avoid warnings (#137) (6a639e2)
• Alternative fix for fedora:rawide (#138) (55b11f5)
• lib/openssl/hmac.c: rename hmac function to jhmac (#130) (33b9e0b)
• jose: build library only as shared (#119) (b72f8ca)
• meson: add option to disable building manpages (#118) (786b426)
• Add a more descriptive error when jwk gen fails (#105) (cdb1030)
• Use "command -v" instead of "which" (deprecated) (#125) (e1d66f1)
• Test for jq existing (used in jose-jwe-enc test) (#124) (ddc0d2a)
• Correct jose_jws.3 man page example (#122) (ad08d70)
• lib/hsh.c: rename hsh local variable (#111) (3d5b287)
• Avoid master word when possible (#120) (5bc6a92)
• Fix github action CI by setting appropriate centos (a091f56)
• Fix format of jose-jwe-enc man page (76924de)
• Meson Fixes (320336b)
• ci: make ubuntu:devel and fedora:rawhide not to fail the pipeline (1d15950)
• ci: retry when installing the deps in debian/ubuntu (bfdbb6e)
• ci: remove travis-ci (05d8e70)

Full Changelog: v11...v12

Release version 11

• Migrate build system to Meson (e7bc250)
• Change default JWK thumbprint algorithm to SHA-256 (55814f5)
• Allow building on FreeBSD variants (#89)
• openssl: declare OPENSSL_API_COMPAT 1.1.1 (7cadeff)
• openssl: rsa: use openssl3 limitations for public exponent (62649e3)
• openssl: decode private exponent when converting jwk -> RSA (d8b8818)
• man: sort the several jose-fmt options in alphabetical order (2fb027a)
• Use asciidoc as the manual page source format (bf65e50)
• openssl: add missing va_end() calls in copy_val() (1f4319a)
• Fix compilation without deprecated OpenSSL APIs. (5a172da)
• José manpages have forward apostrophes instead of ASCII ones (abecf48)
• Fixes #49: Typos in manpages, drop trailing whitespace (a0d3a33)
• Move protected header signature prefix into core (8711e37)
• Update hooks to execute on in-place JWKs (0331f7c)
• Fix type collision (e1b3f51)
• Add support for RSA-OAEP-224, RSA-OAEP-384 and RSA-OAEP-512 (9ec5bf7)
• Fix minor FILE* leak (198f720)

v10

Release version 10

v9

Release version 9

v8

Release version 8

v7

Release version 7

v6

Allow for default hashes in jose_jwk_thumbprint().

v5

1. Add jose sup command which prints the supported algorithms.
2. Add jose use command to test keys for appropriate key operations.
3. Add support for OpenSSL 1.1.0
4. API polish.
5. Implicitly initialize OpenSSL and Jansson.
6. Fix implicit linking.