- Fixed bug: Intermediate certificate not loaded. #39715.
- Fixed bug: Failed to get cert name when key vault name include "certificates". #42162.
- Fixed bug:
JsonParseException
andServiceConfigurationError
exceptions when acquiring access token. #42860.
- Added the new system property
azure.keyvault.disable-challenge-resource-verification
, which can be set totrue
to disable challenge resource verification when authenticating against the Azure Key Vault service. For more information, please refer to this link. (#40560) - Added support for obtaining a Managed Identity access token on a Container App, which is achieved by setting the system properties
IDENTITY_ENDPOINT
andIDENTITY_HEADER
. For more information, see here. (#42024).
- Fix bug:
AccessTokenUtil
does not URL-encode its parameters when getting an access token. (#40616) - Changed the authentication mechanism to allow for discovering the login URI for a given Azure Key Vault instance by requesting an authentication challenge from the service, as opposed to using a hard-coded list of URIs to choose from depending on a vault's URI. This should add support for customers using Azure Stack instances, for example.
- Upgraded
conscrypt-openjdk-uber
from2.2.1
to version2.5.2
. - Upgraded
jackson-databind
from2.13.5
to version2.17.2
.
- Added the new system property
azure.keyvault.disable-challenge-resource-verification
, which can be set totrue
to disable challenge resource verification when authenticating against the Azure Key Vault service. For more information, please refer to this link.
- Removed support for providing a custom login URI to get access tokens from via the system property
azure.login.uri
.
- Fix bug: AccessTokenUtil does not urlencode its parameters when getting an access token. (#40616)
- Changed the authentication mechanism to allow for discovering the login URI for a given Azure Key Vault instance by requesting an authentication challenge from the service, as opposed to using a hard-coded list of URIs to choose from depending on a vault's URI. This should add support for customers using Azure Stack instances, for example.
- Added support for providing a custom login URI to get access tokens from via the system property
azure.login.uri
.
- Upgraded
conscrypt-openjdk-uber
from2.2.1
to version2.5.2
.
Regular updates for dependency versions.
- Support key type of
RSA-HSM
andEC-HSM
in JCA #36648.
- Upgraded
httpclient
from4.5.13
to version4.5.14
. - Upgraded
jackson-databind
from2.13.2.2
to version2.13.5
.
Regular updates for dependency versions.
Regular updates for dependency versions.
Regular updates for dependency versions.
Regular updates for dependency versions.
Regular updates for dependency versions.
- Support connect to multi keyvault for keyless. (24718)
- Enable access token cache. (23847)
- Fix bug about dead loop. (23923)
- Support key less certificate. (#22105)
- Fixed bug: Not get certificates from Key Vault when
azure.keyvault.jca.certificates-refresh-interval
is not set. #22666
- Load JRE key store certificates to AzureKeyVault key store. (#21845)
- Support properties of azure.cert-path.well-known and azure.cert-path.custom to support load cert from file system. (#21947)
- Add "module-info.java".
- Remove configurable property of azure.keyvault.aad-authentication-url which is configured according to azure.keyvault.uri automatically #20530
- Fix NullPointerException in KeyVaultKeyManagerFactory.
- Support properties named in hyphens style, like "azure.keyvault.tenant-id".
- Add support for PEM based certificates.
- First release.