Update dependency jsrsasign to v11 (main) #1961
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![mend-for-github-com[bot]](https://avatars.githubusercontent.com/in/30796?s=60&v=4){kind=small}
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^10.3.0->^11.0.0By merging this PR, the issue #1484 will be automatically resolved and closed:
Release Notes
kjur/jsrsasign (jsrsasign)
v11.0.0: remove RSA and RSAOAEP encryption for Marvin attackCompare Source
remove encrypt/decrypt/encryptOAEP/decryptOAEP for RSAKey class
v10.9.0: enhanced support for encrypted PKCS8Compare Source
aes128-CBC, aes256-CBC encrypted and using hmacWithSHA224/256/384/512 as
psudorandom function.
priavte key.
v10.8.6: X509.getExtSubjectDirectoryAttributes another bugfixCompare Source
v10.8.5: X509.getExtSubjectDirectoryAttributes bugfixCompare Source
v10.8.4: more SubjectDirectoryExtension supportCompare Source
ExtSubjectDirectoryAttributes extension
result has unnecessary new line in the end of string.
v10.8.3: CABF SMIMEBR OID supportCompare Source
v10.8.2: RSA OAEP encryption fixCompare Source
In rare cases, it have been generated ciphertext that
could not be decrpyted.
v10.8.1: npm export missing fixCompare Source
v10.8.0: UserNotice of CertificatePolicies support and moreCompare Source
v10.7.0: custom X.509 extension support and utility functionsCompare Source
v10.6.1: Add PolicyMappings, PolicyConstraints and InhibitAnyPolicy extension supportCompare Source
PolicyMappings, PolicyConstraints and InhibitAnyPolicy
{PolicyMappings,PolicyConstraints,InhibitAnyPolicy}
{PolicyMappings,PolicyConstraints,InhibitAnyPolicy}
v10.6.0: StringPrep DN canonicalization support and some fixCompare Source
z* Changes from 10.5.27 to 10.6.0 (2022-Nov-04)
DN name (a.k.a. StringPrep).
consistency with KJUR.asn1.x509.OtherName class constructor.
v10.5.27: extend CertificationRequestInfo class for challengePassword and unstructuredNameCompare Source
v10.5.26: CSRUtil class enhancementCompare Source
v10.5.25: CVE-2022-25898 Security fix in JWS and JWT validationCompare Source
verify and verifyJWT may accept signature with special characters
or \number characters by mistake.
Please see security advisory:
GHSA-3fvg-4v2m-98jf
v10.5.24: X509.getParam bugfix for v1 certificateCompare Source
v10.5.23: BitString parsing bug fixCompare Source
namearraytobinstr, extendClass)
v10.5.22: DERBitString, KeyUsage and tsp PKIFailureInfo critical bug fixCompare Source
v10.5.21Compare Source
v10.5.20: OCSP ResponderID object udpateCompare Source
X509 object for key and name field.
v10.5.19: Time stamp package updateCompare Source
will be optional. If omitted, it will be "granted" by default.
v10.5.18: Time stamp package updateCompare Source
v10.5.17: CIDR subnet mask support in iptohex and hextoipCompare Source
v10.5.16: Add NameConstraints extension and modify getEncodedHex to tohexCompare Source
in the result.
in the result.
Please use ASN1Object.tohex() instead.
v10.5.15: X509.getExtCRLDistributionPointsURI small fixCompare Source
undefined when no CDP extension as specified in document
even though it is deprecated method.
v10.5.14: KEYUTIL.getPEM small fixCompare Source
optional public key field will be omitted in such case. (#549)
v10.5.13: RSA key private generation fixCompare Source
v10.5.12: support ISO 8859-1 TeletexString and BMPString for X500NameCompare Source
ISO 8859-1 Latin1 characters. Before this version,
only supports ASCII characters.
Add support for Teletex/BMPString and more attrTypes
v10.5.11: asn1hex updateCompare Source
v10.5.10: hextoipv6 fixCompare Source
v10.5.9: small fixCompare Source
v10.5.8: OCSP CertID and X509 class updateCompare Source
v10.5.7: X509CRL.findRevCert bugfix for empty revCertsCompare Source
v10.5.6: X509CRL.findRevCert bugfixCompare Source
v10.5.5: CRL parser updateCompare Source
v10.5.4: ASN.1 parser update and fixCompare Source
v10.5.3: add OtherName support in GeneralNameCompare Source
with small update (#535)
v10.5.2: small update for OID and JWKCompare Source
v10.5.1: add KEYUTIL.getJWK, fix EC P-521 concat signature value and add support for P-521 JWS JWKCompare Source
qunit-do-keyutil-jwk
v10.5.0: Add EC support for secp521r1 secp224r1 secp192r1Compare Source
Thank you indeed for @cplussharp 's great work.
v10.4.1: GeneralizedTime, UTCTime refactoring and some bug fixCompare Source
(will be fixed in next release while rebuild)
test case added and updated.
v10.4.0: Full support for parsing OCSP responseCompare Source
v10.3.2: fix wrong OCSPRequest for EC public key certificateCompare Source