3.5

• Replace the M2Crypto library with the Python cryptography library and standard ssl module for TLS/SSL handling [Bastian Germann]
• Use cryptography.x509 for X.509 certificate parsing and manipulation [Bastian Germann]
• Use standard ssl module for TLS connections instead of M2Crypto.SSL [Bastian Germann]
• Replace sslStartTLSConnect() with do_starttls_handshake() that works with plain sockets before SSL wrapping [Bastian Germann]
• Update getHash() to accept use_pubkey parameter instead of accepting both certificate and public key objects [Bastian Germann]

3.4

Minor cleanups

3.3

• tlsa: Add /usr/share/dns/root.key to cauldron [Vijay Sarvepalli]
• tlsa: Give warning on TLSA create routine for certificate name mismatch to hostname provided [Vijay Sarvepalli]
• openpgp: Fix crash when exporting generic format [Dirk Stöcker]

3.2

• openpgpkey: fix fetch option [Dirk Stöcker]
• sshfp: fix UTF-8 encoding issue [Dirk Stöcker]
• sshfp: fix handling when xmss is not supported [Dirk Stöcker]
• sshfp: don't warn for default known hosts file and option scan [Dirk Stöcker]

3.1

tlsa: bug fixes [Peter van Dijk, Dirk Stöcker]
tlsa: separate duplicate output due to multiple IP addresses [Dirk Stöcker]
openpgpkey: update docs [Arsen Stasic]
sshfp: Support for xmss [Kishan Takoordyal]

3.0

v3.0 (November 3, 2019)

• upgrade to python version 3 [Frank Crawford]

2.8

v2.8 (April 13, 2019)

• tlsa: add submission port (587) to starttls support [Dirk Stöcker]
• tlsa: fixes for newer m2crypto [Dirk Stöcker]
• tlsa: small fixes in error handling [Dirk Stöcker]
• documentation fixes [Jakub Wilk]