build: prepare release 4.15.1

Cosmian · May 2, 2024 · cfb60ad · cfb60ad
1 parent 5f524c7
commit cfb60ad
Show file tree

Hide file tree

Showing 20 changed files with 53 additions and 38 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,21 @@
 
 All notable changes to this project will be documented in this file.
 
+## [4.15.1] - 2024-05-02
+
+### Features
+
+- Add Google Workspace CSE endpoints for **encrypted Gmail** ([#192](https://github.com/Cosmian/kms/pull/192))
+
+### Bug Fixes
+
+- RUSTSEC-2024-0336 ([#244](https://github.com/Cosmian/kms/pull/244))
+- Remove everything related to GCP images build ([#241](https://github.com/Cosmian/kms/pull/241))
+
+### Documentation
+
+- Oauth2 OIDC doc fixes
+
 ## [4.15.0] - 2024-04-08
 
 ### Bug Fixes

diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Dockerfile b/Dockerfile
@@ -1,6 +1,6 @@
 FROM ubuntu:22.04 as builder
 
-LABEL version="4.15.0"
+LABEL version="4.15.1"
 LABEL name="Cosmian KMS docker container"
 
 ARG FEATURES

diff --git a/README.md b/README.md
@@ -46,7 +46,7 @@ Keys can be wrapped and unwrapped using RSA, ECIES or RFC5649/AES KWP.
 
 ## Quick start
 
-Pre-built binaries [are available](https://package.cosmian.com/kms/4.15.0/)
+Pre-built binaries [are available](https://package.cosmian.com/kms/4.15.1/)
 for Linux, MacOS and Windows, as well as Docker images. Tu run the server binary, OpenSSL must be
 available in your path (see "building the KMS" below for details); other binaries do not have this
 requirement.
@@ -55,7 +55,7 @@ Using Docker, to quick-start a Cosmian KMS server on `http://localhost:9998` tha
 inside the container, simply run the following command:
 
 ```sh
-docker run -p 9998:9998 --name kms ghcr.io/cosmian/kms:4.15.0
+docker run -p 9998:9998 --name kms ghcr.io/cosmian/kms:4.15.1
 ```
 
 See the [documentation](https://docs.cosmian.com/cosmian_key_management_system/) for more.

diff --git a/crate/cli/Cargo.toml b/crate/cli/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cosmian_kms_cli"
-version = "4.15.0"
+version = "4.15.1"
 edition = "2021"
 license-file = "../../LICENSE"
 description = "CLI used to manage the Cosmian KMS."

diff --git a/crate/client/Cargo.toml b/crate/client/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cosmian_kms_client"
-version = "4.15.0"
+version = "4.15.1"
 authors = ["Bruno Grieder <[email protected]>"]
 edition = "2021"
 license-file = "../../LICENSE"

diff --git a/crate/kmip/Cargo.toml b/crate/kmip/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cosmian_kmip"
-version = "4.15.0"
+version = "4.15.1"
 edition = "2021"
 license-file = "../../LICENSE"
 

diff --git a/crate/logger/Cargo.toml b/crate/logger/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cosmian_logger"
-version = "4.15.0"
+version = "4.15.1"
 authors = ["Emmanuel Coste <[email protected]>"]
 edition = "2021"
 license-file = "../../LICENSE"

diff --git a/crate/pkcs11/Cargo.toml b/crate/pkcs11/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "ckms_pkcs11"
-version = "4.15.0"
+version = "4.15.1"
 edition = "2021"
 
 [lib]
@@ -15,10 +15,10 @@ cosmian_kmip = { path = "../kmip" }
 cosmian_kms_client = { path = "../client" }
 cosmian_logger = { path = "../logger" }
 etcetera = "0.8.0"
-native-pkcs11 = { git = "https://github.com/Cosmian/native-pkcs11.git", rev="114c93de2e32c2b943578f0aad1c0f43d69e7726", features = [
+native-pkcs11 = { git = "https://github.com/Cosmian/native-pkcs11.git", rev = "114c93de2e32c2b943578f0aad1c0f43d69e7726", features = [
   "custom-function-list",
 ] }
-native-pkcs11-traits = { git = "https://github.com/Cosmian/native-pkcs11.git", rev="114c93de2e32c2b943578f0aad1c0f43d69e7726" }
+native-pkcs11-traits = { git = "https://github.com/Cosmian/native-pkcs11.git", rev = "114c93de2e32c2b943578f0aad1c0f43d69e7726" }
 serde_json = { workspace = true }
 sha3 = "0.10.8"
 thiserror = { workspace = true }

diff --git a/crate/pyo3/Cargo.toml b/crate/pyo3/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cosmian_kms_python"
-version = "4.15.0"
+version = "4.15.1"
 authors = ["Hugo Rosenkranz-Costa <[email protected]>"]
 edition = "2021"
 license-file = "../../LICENSE"

diff --git a/crate/server/Cargo.toml b/crate/server/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cosmian_kms_server"
-version = "4.15.0"
+version = "4.15.1"
 authors = ["Bruno Grieder <[email protected]>"]
 edition = "2021"
 license-file = "../../LICENSE"

diff --git a/crate/test_server/Cargo.toml b/crate/test_server/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "kms_test_server"
-version = "4.15.0"
+version = "4.15.1"
 edition = "2021"
 
 [lib]

diff --git a/documentation/docs/authentication.md b/documentation/docs/authentication.md
@@ -35,7 +35,7 @@ must be provided in PEM format using the `--authority-cert-file` option.
 !!! info "Example client TLS authentication."
 
     ```sh
-    docker run -p 9998:9998 --name kms ghcr.io/cosmian/kms:4.15.0 \
+    docker run -p 9998:9998 --name kms ghcr.io/cosmian/kms:4.15.1 \
         --https-p12-file kms.server.p12  --https-p12-password password \
         --authority-cert-file verifier.cert.pem
     ```
@@ -84,7 +84,7 @@ environment variables):
     server.
 
     ```sh
-    docker run -p 9998:9998 --name kms ghcr.io/cosmian/kms:4.15.0 \
+    docker run -p 9998:9998 --name kms ghcr.io/cosmian/kms:4.15.1 \
         --jwt-issuer-uri=https://accounts.google.com \
         --jwks-uri=https://www.googleapis.com/oauth2/v3/certs \
         --jwt-audience=cosmian_kms

diff --git a/documentation/docs/cli/cli.md b/documentation/docs/cli/cli.md
@@ -4,7 +4,7 @@ client `ckms_gui`.
 !!! info "Download ckms and ckms_gui"
 
     Please download the latest versions for your Operating System from
-    the [Cosmian public packages repository](https://package.cosmian.com/kms/4.15.0/)
+    the [Cosmian public packages repository](https://package.cosmian.com/kms/4.15.1/)
 
 ## Configuring the clients
 

diff --git a/documentation/docs/google_cse/google_cse.md b/documentation/docs/google_cse/google_cse.md
@@ -44,7 +44,7 @@ Assuming Google is the Identity Provider, the KMS should be started with the fol
 For example, if you are using the docker image, you can run the following command:
 
 ```sh
-docker run -p 9998:9998 --name kms ghcr.io/cosmian/kms:4.15.0 \
+docker run -p 9998:9998 --name kms ghcr.io/cosmian/kms:4.15.1 \
     --jwt-issuer-uri=https://accounts.google.com \
     --jwks-uri=https://www.googleapis.com/oauth2/v3/certs \
     --google-cse-kacls-url=https://cse.example.com/google_cse
@@ -73,7 +73,7 @@ Finalize the configuration. The Client Side Encryption page should now show the
 For example, if you are using the docker image, you can run the following command:
 
 ```sh
-docker run -p 9998:9998 --name kms ghcr.io/cosmian/kms:4.15.0 \
+docker run -p 9998:9998 --name kms ghcr.io/cosmian/kms:4.15.1 \
     --jwt-issuer-uri=https://[email protected] \
     --jwks-uri=https://www.googleapis.com/service_accounts/v1/jwk/[email protected] \
     --jwt-audience=cse-authorization

diff --git a/documentation/docs/high_availability_mode.md b/documentation/docs/high_availability_mode.md
@@ -46,7 +46,7 @@ e.g.
 
 ```sh
 docker run --rm -p 9998:9998 \
-  --name kms ghcr.io/cosmian/kms:4.15.0 \
+  --name kms ghcr.io/cosmian/kms:4.15.1 \
   --database-type=postgresql \
   --database-url=postgres://kms_user:kms_password@pgsql-server:5432/kms
 
@@ -61,7 +61,7 @@ Example:
 
 ```sh
 docker run --rm -p 9998:9998 \
-  --name kms ghcr.io/cosmian/kms:4.15.0 \
+  --name kms ghcr.io/cosmian/kms:4.15.1 \
   --database-type=redis-findex \
   --database-url=redis://localhost:6379 \
   --redis-master-password password \
@@ -98,7 +98,7 @@ Say the certificate is called `cert.p12` and is in a directory called `/certific
 
 ```sh
 docker run --rm -p 9998:9998 \
-  --name kms ghcr.io/cosmian/kms:4.15.0 \
+  --name kms ghcr.io/cosmian/kms:4.15.1 \
   -v /certificate/cert.p12:/root/cosmian-kms/cert.p12 \
   --database-type=mysql \
   --database-url=mysql://mysql_server:3306/kms \

diff --git a/documentation/docs/index.md b/documentation/docs/index.md
@@ -18,7 +18,7 @@ and an application-level encrypted database indexed with Findex.
     inside the container, simply run the following command:
 
     ```sh
-    docker run -p 9998:9998 --name kms ghcr.io/cosmian/kms:4.15.0
+    docker run -p 9998:9998 --name kms ghcr.io/cosmian/kms:4.15.1
     ```
 
     Check the Cosmian KMS server version
@@ -27,7 +27,7 @@ and an application-level encrypted database indexed with Findex.
     curl http://localhost:9998/version
     ```
 
-    Alternatively KMS binaries are also available on [Cosmian packages](https://package.cosmian.com/kms/4.15.0/).
+    Alternatively KMS binaries are also available on [Cosmian packages](https://package.cosmian.com/kms/4.15.1/).
 
 <!-- toc -->
 
@@ -154,7 +154,7 @@ The KMS server is available as a Docker image on
 the [Cosmian public Docker repository](https://github.com/Cosmian/kms/pkgs/container/kms).
 
 Raw binaries for multiple operating systems are also available on
-the [Cosmian public packages repository](https://package.cosmian.com/kms/4.15.0/)
+the [Cosmian public packages repository](https://package.cosmian.com/kms/4.15.1/)
 
 #### Integrated with Cloudproof libraries
 
@@ -176,7 +176,7 @@ Just like the [`ckms` Command Line Interface](./cli/cli.md), the KMS server has
 system that can be accessed using the `--help` command line option.
 
 ```sh
-docker run --rm ghcr.io/cosmian/kms:4.15.0 --help
+docker run --rm ghcr.io/cosmian/kms:4.15.1 --help
 ```
 
 The options are enabled on the docker command line or using the environment variables listed in the

diff --git a/documentation/docs/single_server_mode.md b/documentation/docs/single_server_mode.md
@@ -16,7 +16,7 @@ protected during operation by running the server inside an enclave. Ask Cosmian
 To run in single server mode, using the defaults, run the container as follows:
 
 ```sh
-docker run -p 9998:9998 --name kms ghcr.io/cosmian/kms:4.15.0
+docker run -p 9998:9998 --name kms ghcr.io/cosmian/kms:4.15.1
 ```
 
 The KMS will be available on `http://localhost:9998`, and the server will store its data inside the
@@ -30,7 +30,7 @@ directory or a Docker volume, e.g. with a volume named `cosmian-kms`:
 ```sh
 docker run --rm -p 9998:9998 \
   -v cosmian-kms:/root/cosmian-kms/sqlite-data \
-  --name kms ghcr.io/cosmian/kms:4.15.0
+  --name kms ghcr.io/cosmian/kms:4.15.1
 ```
 
 ### Using client-side encrypted databases
@@ -41,7 +41,7 @@ To start the KMS server with a client-side encrypted SQLite databases, pass the
 ```sh
 docker run --rm -p 9998:9998 \
   -v cosmian-kms:/root/cosmian-kms/sqlite-data \
-  --name kms ghcr.io/cosmian/kms:4.15.0 \
+  --name kms ghcr.io/cosmian/kms:4.15.1 \
   --database-type=sqlite-enc
 ```
 

diff --git a/documentation/docs/tls.md b/documentation/docs/tls.md
@@ -23,7 +23,7 @@ Say the certificate is called `server.mydomain.com.p12`, is protected by the pas
 ```sh
 docker run --rm -p 443:9998 \
   -v /certificate/server.mydomain.com.p12:/root/cosmian-kms/server.mydomain.com.p12 \
-  --name kms ghcr.io/cosmian/kms:4.15.0 \
+  --name kms ghcr.io/cosmian/kms:4.15.1 \
   --database-type=mysql \
   --database-url=mysql://mysql_server:3306/kms \
   --https-p12-file=server.mydomain.com.p12 \

diff --git a/version b/version
@@ -1 +1 @@
-"4.15.0"
+"4.15.1"