1.25.0

Added

• OTP 27.1 to CI
• [certificate authority] globaltrust 2020

Changed

• module with bundled CAs to latest as of 2024/11/26, 13:58 UTC
  (source: https://curl.se/ca/cacert.pem)

Fixed

• problematic lack of unix permissions for 'other' among some of the source
  files, affecting environments that preserve said permissions and import,
  process or in other ways depend on tls_certificate_check under a different
  user account & group from those that own the file (thanks
  https://github.com/kivra-pauoli, closes #52)

1.24.0

Added

• [certificate authority] securesign root ca12
• [certificate authority] securesign root ca14
• [certificate authority] securesign root ca15
• [certificate authority] twca cyber root ca

Changed

• module with bundled CAs to latest as of 2024/09/24, 03:12 UTC
  (source: https://curl.se/ca/cacert.pem)

1.22.0

Added

• [certificate authority] Telekom Security TLS ECC Root 2020
• [certificate authority] Telekom Security TLS RSA Root 2023

Changed

• module with bundled CAs to latest as of 2024/03/11, 15:25 UTC
  (source: https://curl.se/ca/cacert.pem)

Fixed

• Elixir example of how to use tls_certificate_check with ssl:connect/4
  (thanks https://github.com/macifell)

1.21.0

Added

• [certificate authority] CommScope Public Trust ECC Root-01
• [certificate authority] CommScope Public Trust ECC Root-02
• [certificate authority] CommScope Public Trust RSA Root-01
• [certificate authority] CommScope Public Trust RSA Root-02
• [certificate authority] TrustAsia Global Root CA G3
• [certificate authority] TrustAsia Global Root CA G4
• OTP 26.1 to CI

Changed

• module with bundled CAs to latest as of 2023/12/12, 04:12 UTC
  (source: https://curl.se/ca/cacert.pem)

Removed

• [certificate authority] Autoridad de Certificacion Firmaprofesional CIF A62634068
• [certificate authority] security communication rootca1

1.20.0

Added

• [certificate authority] Atos TrustedRoot Root CA ECC TLS 2021
• [certificate authority] Atos TrustedRoot Root CA RSA TLS 2021
• [certificate authority] SSL.com TLS ECC Root CA 2022
• [certificate authority] SSL.com TLS RSA Root CA 2022
• [certificate authority] sectigo public server authentication root e46
• [certificate authority] sectigo public server authentication root r46

Changed

• module with bundled CAs to latest as of 2023/08/22, 03:12 UTC
  (source: https://curl.se/ca/cacert.pem)

Removed

• [certificate authority] e-tugra global root ca ecc v3
• [certificate authority] e-tugra global root ca rsa v3

1.19.0

Added

• OTP 26.0 to CI
• [certificate authority] BJCA Global Root CA2
• [certificate authority] BJCA Global Root CA1

Changed

• CI to use latest rebar3 version that's compatible with each covered OTP release
• module with bundled CAs to latest as of 2023/05/30, 03:12 UTC
  (source: https://curl.se/ca/cacert.pem)

Removed

• [certificate authority] hongkong post root ca 1
• [certificate authority] E-Tugra Certification Authority

1.18.1

Changed

• import of ssl_verify_fun to match latest allowed 1.x version

Fixed

• failing tests and checks on macOS ventura (maybe ARM specific)

1.18.0

Added

• explicit SNI, to account for TCP sockets upgraded to ssl with ssl:connect/3 (#40)
• OTP 25.3 to CI

Fixed

• CI deprecation warnings

1.17.4

Fixed

• error starting application when OS-trusted CAs fail to load on OTP 25 [present since 1.17.0]

1.17.3

Fixed

• (rare?) crash after reading OS-trusted CAs (#35)