The System Transparency project is happy to announce a new ST collection release, st-1.2.0. See NEWS entries below for a summary of changes.

The documentation for this release is available at

https://docs.system-transparency.org/st-1.2.0/

A release tar file is published at

https://dist.system-transparency.org/st/st-1.2.0.tar.gz https://dist.system-transparency.org/st/st-1.2.0.tar.gz.sig

The release keys used for both the release tar file and the corresponding git tags are published at

https://www.system-transparency.org/keys

This collection release corresponds to the manifest file https://git.glasklar.is/system-transparency/core/system-transparency/-/blob/...

Project homepage and contact information can be found at

https://www.system-transparency.org/

Cheers, The System Transparency team

NEWS for st-1.2.0

This is an update to the st-1.1.0 collection release, with a few new features requested by users. It is intended to be backwards compatible with the st-1.0.0 and st-1.1.0 collections except for a new build-time requirement on go-1.22 or later.

The code components of st-1.2.0 are stboot v0.5.2, stmgr v0.5.2, and stprov v0.4.2 (also listed, with corresponding commit hashes, in the manifest file). Corresponding documentation is included in the collection, and it is also published at https://docs.system-transparency.org/st-1.2.0/.

Bug fixes:

* stprov: Don't add any extra dot when using default hostname (neither -h or -H specified on the command line).

* stmgr: Properly assign the issuer and subject in generated X.509 certificates.

Features:

* stboot: Add support for encrypted OS packages.

* stprov: For network autoselect (-A), prefer the fastest network interface.

* stboot, stprov: Improvements to logging.

* stboot, stprov: Display and populate the new (and optional) "description" field in the host configuration.

* stmgr: The uki subcommand can now produce both .uki and .iso in the same run.

For more details, see the NEWS files and documentation for respective component.