v0.25.3

v0.25.3

🔧 Misc

• Update go: 1.26.2
• Update go dependencies:
  • upgraded github.com/c2FmZQ/ech v0.4.0 => v0.4.2
  • upgraded github.com/c2FmZQ/tlsproxy/jwks v0.0.0-20260210222347-c2dddf848fef => v0.0.0-20260308015521-e84033c86e36
  • upgraded github.com/fxamacker/cbor/v2 v2.9.0 => v2.9.1
  • upgraded github.com/russellhaering/goxmldsig v1.5.0 => v1.6.0
  • upgraded golang.org/x/crypto v0.48.0 => v0.49.0
  • upgraded golang.org/x/net v0.51.0 => v0.52.0
  • upgraded golang.org/x/sys v0.41.0 => v0.43.0
  • upgraded golang.org/x/text v0.34.0 => v0.35.0
  • upgraded golang.org/x/time v0.14.0 => v0.15.0

Compare with v0.25.2

v0.25.2

v0.25.2

🔧 Misc

• Update go: 1.26.1
• Update go dependencies:
  • upgraded github.com/c2FmZQ/ech v0.3.7 => v0.4.0
  • upgraded github.com/c2FmZQ/tlsproxy/jwks v0.0.0-20260131152559-a997fb69198a => v0.0.0-20260210222347-c2dddf848fef
  • upgraded github.com/c2FmZQ/tpm v0.4.3 => v0.5.0
  • upgraded github.com/google/go-tpm-tools v0.4.5 => v0.4.7
  • upgraded golang.org/x/net v0.50.0 => v0.51.0

Compare with v0.25.1

v0.25.1

v0.25.1

🔧 Misc

• Update go: 1.26.0
• Update go dependencies:
  • upgraded github.com/c2FmZQ/tlsproxy/jwks v0.0.0-20260130170702-223855195ae7 => v0.0.0-20260131152559-a997fb69198a
  • upgraded github.com/pires/go-proxyproto v0.9.2 => v0.11.0
  • upgraded golang.org/x/crypto v0.47.0 => v0.48.0
  • upgraded golang.org/x/net v0.49.0 => v0.50.0
  • upgraded golang.org/x/sys v0.40.0 => v0.41.0
  • upgraded golang.org/x/text v0.33.0 => v0.34.0

Compare with v0.25.0

v0.25.0

v0.25.0

🌟 New feature

• Implement distributed authentication trust via TrustedIssuers. See trustedIssuers.

🔧 Misc

• Refactored JWKS into a new module.
• Update go dependencies:
  • added github.com/c2FmZQ/tlsproxy/jwks v0.0.0-20260130170702-223855195ae7
  • upgraded github.com/golang-jwt/jwt/v5 v5.3.0 => v5.3.1
  • upgraded github.com/pires/go-proxyproto v0.8.1 => v0.9.2

Compare with v0.24.2

v0.24.2

v0.24.2

🔧 Misc

• Update go: 1.25.6
• Update go dependencies:
  • upgraded github.com/c2FmZQ/storage v0.3.1 => v0.3.2
  • upgraded golang.org/x/crypto v0.46.0 => v0.47.0
  • upgraded golang.org/x/net v0.48.0 => v0.49.0

Compare with v0.24.1

v0.24.1

v0.24.1

🔧 Misc

• Update go dependencies:
  • upgraded github.com/c2FmZQ/http3-go v0.57.0 => v0.59.0
  • upgraded github.com/c2FmZQ/quic-api v0.57.0 => v0.59.0
  • upgraded github.com/quic-go/quic-go v0.58.0 => v0.59.0

Compare with v0.24.0

v0.24.0

v0.24.0

⭐ Feature improvement

• Add two new SSO rule options:
  • SkipLoginPage redirects requests directly to the IDP's login page.
  • Return403ForGetRequests returns a simple 403 (Forbidden) response for GET requests. Normally, GET requests get a login page.
• Add TokenLifetime to OIDC, SAML, and Passkey providers. This optional field set the lifetime of auth tokens set by tlsproxy.

🔧 Misc

• Update go: 1.25.5
• Update go dependencies:
  • upgraded github.com/c2FmZQ/http3-go v0.56.0 => v0.57.0
  • upgraded github.com/c2FmZQ/quic-api v0.56.0 => v0.57.0
  • upgraded github.com/google/go-tpm v0.9.7 => v0.9.8
  • upgraded github.com/quic-go/quic-go v0.56.0 => v0.58.0
  • upgraded github.com/quic-go/qpack v0.5.1 => v0.6.0
  • upgraded golang.org/x/crypto v0.45.0 => v0.46.0
  • upgraded golang.org/x/net v0.47.0 => v0.48.0
  • upgraded golang.org/x/sys v0.38.0 => v0.39.0
  • upgraded golang.org/x/text v0.31.0 => v0.32.0
  • upgraded software.sslmate.com/src/go-pkcs12 v0.6.0 => v0.7.0

Compare with v0.23.2

v0.23.2

v0.23.2

🔧 Misc

• Update go: 1.25.4
• Update go dependencies:
  • upgraded github.com/c2FmZQ/ech v0.3.6 => v0.3.7
  • upgraded github.com/c2FmZQ/http3-go v0.55.0 => v0.56.0
  • upgraded github.com/c2FmZQ/quic-api v0.55.0 => v0.56.0
  • upgraded github.com/google/go-tpm v0.9.6 => v0.9.7
  • upgraded github.com/quic-go/quic-go v0.55.0 => v0.56.0
  • upgraded golang.org/x/crypto v0.43.0 => v0.45.0
  • upgraded golang.org/x/net v0.46.0 => v0.47.0
  • upgraded golang.org/x/sys v0.37.0 => v0.38.0
  • upgraded golang.org/x/text v0.30.0 => v0.31.0

Compare with v0.23.1

v0.23.1

v0.23.1

🔧 Misc

• Replace the 🛂 emoji with a svg icon.
• Update go: 1.25.3
• Update go dependencies:
  • upgraded golang.org/x/crypto v0.42.0 => v0.43.0
  • upgraded golang.org/x/mod v0.28.0 => v0.29.0
  • upgraded golang.org/x/net v0.45.0 => v0.46.0
  • upgraded golang.org/x/sys v0.36.0 => v0.37.0
  • upgraded golang.org/x/text v0.29.0 => v0.30.0
  • upgraded golang.org/x/time v0.13.0 => v0.14.0
  • upgraded golang.org/x/tools v0.37.0 => v0.38.0

Compare with v0.23.0

v0.23.0

v0.23.0

🔧 Misc

• Clean up the ssh CA request parsing. When a specific ttl is desired, the request must now use content-type: application/x-www-form-urlencoded.
• Update go: 1.25.2
• Update go dependencies:
  • upgraded github.com/c2FmZQ/http3-go v0.54.0 => v0.55.0
  • upgraded github.com/c2FmZQ/quic-api v0.54.0 => v0.55.0
  • upgraded github.com/quic-go/quic-go v0.54.0 => v0.55.0
  • upgraded golang.org/x/net v0.44.0 => v0.45.0

Compare with v0.22.2