chore: Merge tag '4.22.1' into develop

ci: Fix rhel9 artifact name
This commit is contained in:
Manuthor 2025-02-04 09:20:20 +01:00
commit e2f79fa5c8
11 changed files with 77 additions and 71 deletions

View file

@ -2,6 +2,12 @@
All notable changes to this project will be documented in this file.
## [4.22.1] - 2025-02-04
### 🧪 CI
- Fix rhel9 artifact name
## [4.22.0] - 2025-02-03
### 🚀 Features
@ -30,7 +36,7 @@ All notable changes to this project will be documented in this file.
- VM marketplace guide examples ([#365](https://github.com/Cosmian/kms/pull/365))
- *(google_cse)* Update authentication section ([#363](https://github.com/Cosmian/kms/pull/363))
### Ci
### 🧪 CI
- Allow continue on error ([#362](https://github.com/Cosmian/kms/pull/362))
@ -320,7 +326,7 @@ All notable changes to this project will be documented in this file.
## [4.14.2] - 2024-04-05
### Ci
### 🧪 CI
- Add standalone workflow to test KMS in Cosmian
VM ([#233](https://github.com/Cosmian/kms/pull/233))
@ -331,7 +337,7 @@ All notable changes to this project will be documented in this file.
## [4.14.1] - 2024-04-04
### Ci
### 🧪 CI
- Remove optimization RUSTFLAGS ([#227](https://github.com/Cosmian/kms/pull/227))
@ -365,7 +371,7 @@ All notable changes to this project will be documented in this file.
## [4.13.4] - 2024-03-18
### Ci
### 🧪 CI
- Push GCP images based on Cosmian VM 1.1.0-rc2
@ -376,20 +382,20 @@ All notable changes to this project will be documented in this file.
- `ckms` needs `kmip` dependency with
features `openssl` ([#202](https://github.com/Cosmian/kms/pull/202))
### Ci
### 🧪 CI
- Push GCP images on cosmian-dev and cosmian-public only
once ([#203](https://github.com/Cosmian/kms/pull/203))
## [4.13.2] - 2024-03-09
### Ci
### 🧪 CI
- Filter reboot test on GCP/RHEL instance.
## [4.13.1] - 2024-03-08
### Ci
### 🧪 CI
- Add build of GCP images (ubuntu/redhat) [#191](https://github.com/Cosmian/kms/pull/191).
@ -411,7 +417,7 @@ All notable changes to this project will be documented in this file.
- Rework utils/crypto [#178](https://github.com/Cosmian/kms/pull/178).
### Ci
### 🧪 CI
- Add build on RHEL9 [#196](https://github.com/Cosmian/kms/pull/196).
- Add build of GCP images (ubuntu/redhat) [#191](https://github.com/Cosmian/kms/pull/191).
@ -452,7 +458,7 @@ All notable changes to this project will be documented in this file.
## [4.11.2] - 2024-01-23
### Ci
### 🧪 CI
- Test and deliver in CI missing FIPS binary (fips.so and openssl.cnf for
FIPS) [#152](https://github.com/Cosmian/kms/issues/153)
@ -463,7 +469,7 @@ All notable changes to this project will be documented in this file.
- Load correct openssl provider on run
### Ci
### 🧪 CI
- Pypi now requires a token to publish [#148](https://github.com/Cosmian/kms/issues/148)
@ -534,7 +540,7 @@ All notable changes to this project will be documented in this file.
- fix: migrate to num-bigint-dig for bigint (#85)
### Ci
### 🧪 CI
- Test KMS inside an SGX machine
@ -574,7 +580,7 @@ All notable changes to this project will be documented in this file.
- review documentation regarding the KMS usage inside a TEE
- Activate tracing in CLI tests when binary is instrumented ([#56])
### Ci
### 🧪 CI
- Trigger public_documentation build on tags
@ -715,7 +721,7 @@ Use the tags to export objects, locate them, or request data encryption and decr
- Add link to package.cosmian.com
### Ci
### 🧪 CI
- Add github ci
- Publish python kms packages
@ -761,7 +767,7 @@ Use the tags to export objects, locate them, or request data encryption and decr
## [4.3.1] - 2023-02-16
### Ci
### 🧪 CI
- Remove unused docker builds
@ -794,7 +800,7 @@ Use the tags to export objects, locate them, or request data encryption and decr
- Use CoverCrypt v9.0 (post-quantum cryptography) and AbePolicy v3.0
- Write `Policy` as bytes and `AccessPolicy` as string in Vendor Attributes
### Ci
### 🧪 CI
- Fix tag matching in `python_publish`

30
Cargo.lock generated
View file

@ -940,7 +940,7 @@ dependencies = [
[[package]]
name = "ckms_pkcs11"
version = "4.22.0"
version = "4.22.1"
dependencies = [
"cosmian_config_utils",
"cosmian_kmip",
@ -1357,7 +1357,7 @@ dependencies = [
[[package]]
name = "cosmian_kmip"
version = "4.22.0"
version = "4.22.1"
dependencies = [
"bitflags 2.8.0",
"chrono",
@ -1379,7 +1379,7 @@ dependencies = [
[[package]]
name = "cosmian_kms_access"
version = "4.22.0"
version = "4.22.1"
dependencies = [
"cosmian_kmip",
"serde",
@ -1387,7 +1387,7 @@ dependencies = [
[[package]]
name = "cosmian_kms_base_hsm"
version = "4.22.0"
version = "4.22.1"
dependencies = [
"async-trait",
"cosmian_kms_interfaces",
@ -1403,7 +1403,7 @@ dependencies = [
[[package]]
name = "cosmian_kms_cli"
version = "4.22.0"
version = "4.22.1"
dependencies = [
"assert_cmd",
"base64 0.22.1",
@ -1440,7 +1440,7 @@ dependencies = [
[[package]]
name = "cosmian_kms_client"
version = "4.22.0"
version = "4.22.1"
dependencies = [
"cloudproof",
"cosmian_config_utils",
@ -1461,7 +1461,7 @@ dependencies = [
[[package]]
name = "cosmian_kms_crypto"
version = "4.22.0"
version = "4.22.1"
dependencies = [
"aes-gcm-siv",
"argon2",
@ -1484,7 +1484,7 @@ dependencies = [
[[package]]
name = "cosmian_kms_interfaces"
version = "4.22.0"
version = "4.22.1"
dependencies = [
"async-trait",
"cosmian_kmip",
@ -1497,7 +1497,7 @@ dependencies = [
[[package]]
name = "cosmian_kms_python"
version = "4.22.0"
version = "4.22.1"
dependencies = [
"cloudproof",
"cosmian_kmip",
@ -1511,7 +1511,7 @@ dependencies = [
[[package]]
name = "cosmian_kms_server"
version = "4.22.0"
version = "4.22.1"
dependencies = [
"actix-cors",
"actix-http",
@ -1567,7 +1567,7 @@ dependencies = [
[[package]]
name = "cosmian_kms_server_database"
version = "4.22.0"
version = "4.22.1"
dependencies = [
"async-trait",
"clap",
@ -1608,7 +1608,7 @@ dependencies = [
[[package]]
name = "cosmian_pkcs11_module"
version = "4.22.0"
version = "4.22.1"
dependencies = [
"bincode",
"const-oid",
@ -2881,7 +2881,7 @@ dependencies = [
[[package]]
name = "kms_test_server"
version = "4.22.0"
version = "4.22.1"
dependencies = [
"actix-server",
"base64 0.22.1",
@ -3772,7 +3772,7 @@ dependencies = [
[[package]]
name = "proteccio_pkcs11_loader"
version = "4.22.0"
version = "4.22.1"
dependencies = [
"cosmian_kms_base_hsm",
"cosmian_kms_interfaces",
@ -5460,7 +5460,7 @@ checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
[[package]]
name = "utimaco_pkcs11_loader"
version = "4.22.0"
version = "4.22.1"
dependencies = [
"cosmian_kms_base_hsm",
"cosmian_kms_interfaces",

View file

@ -24,7 +24,7 @@ members = [
resolver = "2"
[workspace.package]
version = "4.22.0"
version = "4.22.1"
edition = "2021"
rust-version = "1.71.0"
authors = [

View file

@ -1,6 +1,6 @@
FROM ubuntu:22.04
LABEL version="4.22.0"
LABEL version="4.22.1"
LABEL name="Cosmian KMS docker container"
ENV DEBIAN_FRONTEND=noninteractive

View file

@ -1,6 +1,6 @@
FROM ubuntu:22.04
LABEL version="4.22.0"
LABEL version="4.22.1"
LABEL name="Cosmian KMS FIPS docker container"
ENV DEBIAN_FRONTEND=noninteractive

View file

@ -44,24 +44,24 @@ to be used in various applications, such as in _S/MIME_ encrypted emails.
The KMS has extensive online [documentation](https://docs.cosmian.com/key_management_system/)
- [Cosmian KMS](#cosmian-kms)
- [Quick start](#quick-start)
- [Example](#example)
- [Repository content](#repository-content)
- [Building the KMS](#building-the-kms)
- [Linux or MacOS (CPU Intel or MacOs ARM)](#linux-or-macos-cpu-intel-or-macos-arm)
- [Windows](#windows)
- [Build the KMS](#build-the-kms)
- [Build the Docker Ubuntu container](#build-the-docker-ubuntu-container)
- [Running the unit and integration tests](#running-the-unit-and-integration-tests)
- [Development: running the server with cargo](#development-running-the-server-with-cargo)
- [Server parameters](#server-parameters)
- [Use the KMS inside a Cosmian VM on SEV/TDX](#use-the-kms-inside-a-cosmian-vm-on-sevtdx)
- [Releases](#releases)
- [Benchmarks](#benchmarks)
- [Quick start](#quick-start)
- [Example](#example)
- [Repository content](#repository-content)
- [Building the KMS](#building-the-kms)
- [Linux or MacOS (CPU Intel or MacOs ARM)](#linux-or-macos-cpu-intel-or-macos-arm)
- [Windows](#windows)
- [Build the KMS](#build-the-kms)
- [Build the Docker Ubuntu container](#build-the-docker-ubuntu-container)
- [Running the unit and integration tests](#running-the-unit-and-integration-tests)
- [Development: running the server with cargo](#development-running-the-server-with-cargo)
- [Server parameters](#server-parameters)
- [Use the KMS inside a Cosmian VM on SEV/TDX](#use-the-kms-inside-a-cosmian-vm-on-sevtdx)
- [Releases](#releases)
- [Benchmarks](#benchmarks)
## Quick start
Pre-built binaries [are available](https://package.cosmian.com/kms/4.22.0/)
Pre-built binaries [are available](https://package.cosmian.com/kms/4.22.1/)
for Linux, MacOS, and Windows, as well as Docker images. To run the server binary, OpenSSL must be
available in your path (see "building the KMS" below for details); other binaries do not have this
requirement.

View file

@ -16,7 +16,7 @@ The OpenSSL FIPS provider is certified under
when used on Red Hat Enterprise Linux 9 (RHEL 9)
Cosmian
produces [pre-built Ubuntu 22.04 FIPS mode binaries](https://package.cosmian.com/kms/4.22.0/ubuntu-22.04/)
produces [pre-built Ubuntu 22.04 FIPS mode binaries](https://package.cosmian.com/kms/4.22.1/ubuntu-22.04/)
and docker containers of the KMS (on gcr.io).
Alternatively, you can build the FIPS mode version from source, using the `--features fips` flag:

View file

@ -44,11 +44,11 @@ Please refer to the list of [supported algorithms](./algorithms.md).
The **Cosmian KMS** is packaged as:
- [Debian](https://package.cosmian.com/kms/4.22.0/ubuntu-22.04/) or [RPM](https://package.cosmian.com/kms/4.22.0/rhel9/)
- [Debian](https://package.cosmian.com/kms/4.22.1/ubuntu-22.04/) or [RPM](https://package.cosmian.com/kms/4.22.1/rhel9/)
package
- Docker [image](https://github.com/Cosmian/kms/pkgs/container/kms)
and [FIPS image](https://github.com/Cosmian/kms/pkgs/container/kms)
- Pre-built [binaries](https://package.cosmian.com/kms/4.22.0/) for multiple operating systems (Linux, Windows, MacOS)
- Pre-built [binaries](https://package.cosmian.com/kms/4.22.1/) for multiple operating systems (Linux, Windows, MacOS)
## Client CLI
@ -58,7 +58,7 @@ or decryption.
The **[Cosmian CLI](../cosmian_cli/index.md)** is packaged as:
- [Debian](https://package.cosmian.com/kms/4.22.0/ubuntu-22.04/) or [RPM](https://package.cosmian.com/kms/4.22.0/rhel9/)
- [Debian](https://package.cosmian.com/kms/4.22.1/ubuntu-22.04/) or [RPM](https://package.cosmian.com/kms/4.22.1/rhel9/)
package
- Pre-built [binaries](https://package.cosmian.com/cli/) for multiple operating systems (Linux, Windows, MacOS)

View file

@ -46,16 +46,16 @@ For high availability and scalability, please refer to the [high availability gu
```sh
sudo apt update && sudo apt install -y wget
wget https://package.cosmian.com/kms/4.22.0/ubuntu-20.04/cosmian-kms-server_4.22.0-1_amd64.deb
sudo apt install ./cosmian-kms-server_4.22.0-1_amd64.deb
wget https://package.cosmian.com/kms/4.22.1/ubuntu-20.04/cosmian-kms-server_4.22.1-1_amd64.deb
sudo apt install ./cosmian-kms-server_4.22.1-1_amd64.deb
cosmian_kms --version
```
Or install the FIPS version:
```sh
wget https://package.cosmian.com/kms/4.22.0/ubuntu-20.04/cosmian-kms-server-fips_4.22.0-1_amd64.deb
sudo apt install ./cosmian-kms-server-fips_4.22.0-1_amd64.deb
wget https://package.cosmian.com/kms/4.22.1/ubuntu-20.04/cosmian-kms-server-fips_4.22.1-1_amd64.deb
sudo apt install ./cosmian-kms-server-fips_4.22.1-1_amd64.deb
cosmian_kms --version
```
@ -74,16 +74,16 @@ For high availability and scalability, please refer to the [high availability gu
```sh
sudo apt update && sudo apt install -y wget
wget https://package.cosmian.com/kms/4.22.0/ubuntu-22.04/cosmian-kms-server_4.22.0-1_amd64.deb
sudo apt install ./cosmian-kms-server_4.22.0-1_amd64.deb
wget https://package.cosmian.com/kms/4.22.1/ubuntu-22.04/cosmian-kms-server_4.22.1-1_amd64.deb
sudo apt install ./cosmian-kms-server_4.22.1-1_amd64.deb
cosmian_kms --version
```
Or install the FIPS version:
```sh
wget https://package.cosmian.com/kms/4.22.0/ubuntu-22.04/cosmian-kms-server-fips_4.22.0-1_amd64.deb
sudo apt install ./cosmian-kms-server-fips_4.22.0-1_amd64.deb
wget https://package.cosmian.com/kms/4.22.1/ubuntu-22.04/cosmian-kms-server-fips_4.22.1-1_amd64.deb
sudo apt install ./cosmian-kms-server-fips_4.22.1-1_amd64.deb
cosmian_kms --version
```
@ -102,16 +102,16 @@ For high availability and scalability, please refer to the [high availability gu
```sh
sudo apt update && sudo apt install -y wget
wget https://package.cosmian.com/kms/4.22.0/ubuntu-24.04/cosmian-kms-server_4.22.0-1_amd64.deb
sudo apt install ./cosmian-kms-server_4.22.0-1_amd64.deb
wget https://package.cosmian.com/kms/4.22.1/ubuntu-24.04/cosmian-kms-server_4.22.1-1_amd64.deb
sudo apt install ./cosmian-kms-server_4.22.1-1_amd64.deb
cosmian_kms --version
```
Or install the FIPS version:
```sh
wget https://package.cosmian.com/kms/4.22.0/ubuntu-24.04/cosmian-kms-server-fips_4.22.0-1_amd64.deb
sudo apt install ./cosmian-kms-server-fips_4.22.0-1_amd64.deb
wget https://package.cosmian.com/kms/4.22.1/ubuntu-24.04/cosmian-kms-server-fips_4.22.1-1_amd64.deb
sudo apt install ./cosmian-kms-server-fips_4.22.1-1_amd64.deb
cosmian_kms --version
```
@ -130,8 +130,8 @@ For high availability and scalability, please refer to the [high availability gu
```sh
sudo dnf update && dnf install -y wget
wget https://package.cosmian.com/kms/4.22.0/rhel9/cosmian_kms_server-4.22.0-1.x86_64.rpm
sudo dnf install ./cosmian_kms_server-4.22.0-1.x86_64.rpm
wget https://package.cosmian.com/kms/4.22.1/rhel9/cosmian_kms_server-4.22.1-1.x86_64.rpm
sudo dnf install ./cosmian_kms_server-4.22.1-1.x86_64.rpm
cosmian_kms --version
```
@ -140,7 +140,7 @@ For high availability and scalability, please refer to the [high availability gu
On ARM MacOS, download the build archive and extract it:
```sh
wget https://package.cosmian.com/kms/4.22.0/macos_arm-release.zip
wget https://package.cosmian.com/kms/4.22.1/macos_arm-release.zip
unzip macos_arm-release.zip
cp ./macos_arm-release/Users/runner/work/kms/kms/target/aarch64-apple-darwin/release/cosmian_kms /usr/local/bin/
chmod u+x /usr/local/bin/cosmian_kms
@ -150,7 +150,7 @@ For high availability and scalability, please refer to the [high availability gu
On Intel MacOS, download the build archive and extract it:
```sh
wget https://package.cosmian.com/kms/4.22.0/macos_intel-release.zip
wget https://package.cosmian.com/kms/4.22.1/macos_intel-release.zip
unzip macos_intel-release.zip
cp ./macos_intel-release/Users/runner/work/kms/kms/target/x86_64-apple-darwin/release/cosmian_kms /usr/local/bin/
chmod u+x /usr/local/bin/cosmian_kms
@ -162,7 +162,7 @@ For high availability and scalability, please refer to the [high availability gu
On Windows, download the build archive:
```sh
https://package.cosmian.com/kms/4.22.0/windows-release.zip
https://package.cosmian.com/kms/4.22.1/windows-release.zip
```
Extract the cosmian_kms from:

View file

@ -150,7 +150,7 @@ journalctl -u cosmian_vm_agent
```console
$ curl --insecure https://${COSMIAN_VM_IP_ADDR}/version
"4.22.0"
"4.22.1"
```
!!! info "Why `--allow-insecure-tls` and `--insecure` flags?"

View file

@ -1 +1 @@
"4.22.0"
"4.22.1"