1# fsverity-utils release notes 2 3## Version 1.6 4 5* Eliminated the dependency on `pandoc` for installing the manual page. 6 7* Updated the documentation to reflect recent kernel changes, including the 8 kernel adding support for more Merkle tree block sizes, IMA adding support for 9 fs-verity, and btrfs adding support for fs-verity. 10 11* Updated the documentation to refer to the new fsverity mailing list. 12 13* Fixed a C++ compatibility issue in `libfsverity.h`. 14 15* `fsverity measure` now follows standard command line syntax for arguments 16 beginning with hyphens. I.e., `fsverity measure --foo` now treats `--foo` as 17 an (unsupported) option, not a filename. To operate on a file actually named 18 `--foo`, use `fsverity measure -- --foo`. 19 20## Version 1.5 21 22* Made the `fsverity sign` command and the `libfsverity_sign_digest()` function 23 support PKCS#11 tokens. 24 25* Avoided a compiler error when building with musl libc. 26 27* Avoided compiler warnings when building with OpenSSL 3.0. 28 29* Improved documentation and test scripts. 30 31## Version 1.4 32 33* Added a manual page for the `fsverity` utility. 34 35* Added the `fsverity dump_metadata` subcommand. 36 37* Added the `--out-merkle-tree` and `--out-descriptor` options to 38 `fsverity digest` and `fsverity sign`. 39 40* Added metadata callbacks support to `libfsverity_compute_digest()`. 41 42## Version 1.3 43 44* Added a `fsverity digest` subcommand. 45 46* Added `libfsverity_enable()` and `libfsverity_enable_with_sig()`. 47 48* Added basic support for Windows builds of `fsverity` using MinGW. 49 50* `fsverity` now defaults to 4096-byte blocks on all platforms. 51 52* libfsverity now will use SHA-256 with 4096-byte blocks if the 53 `hash_algorithm` and `block_size` fields are left 0. 54 55* `make install` now installs a pkg-config file for libfsverity. 56 57* The Makefile now uses pkg-config to get the libcrypto build flags. 58 59* Fixed `make check` with `USE_SHARED_LIB=1`. 60 61## Version 1.2 62 63* Changed license from GPL to MIT. 64 65* Fixed build error when /bin/sh is dash. 66 67## Version 1.1 68 69* Split the file digest computation and signing functionality of the 70 `fsverity` program into a library `libfsverity`. See `README.md` 71 and `Makefile` for more details. 72 73* Improved the Makefile. 74 75* Added some tests. They can be run using `make check`. Also added 76 `scripts/run-tests.sh` which does more extensive prerelease tests. 77 78* Lots of cleanups and other small improvements. 79 80## Version 1.0 81 82* First official release of fsverity-utils. 83