spiffe/java-spiffe v0.6.2

on GitHub

What's changed

• Improve how the SpiffeTrustManager is configured to either validate SPIFFE IDs or acceptAny.
• Validate the SslContextOptions.
• Add visibility to SPIFFE ID validation errors by logging warnings.
• Improve logging of the X509Source update.

Maven

Import the java-spiffe-core component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.6.2</version>
</dependency>

Import the java-spiffe-provider component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.6.2</version>
</dependency>

This component imports the java-spiffe-core automatically.

Gradle

java-spiffe-core:

implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.6.2'

java-spiffe-provider:

implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.6.2'

MacOS Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.6.2</version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.6.2'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.