connect_secure 1.0.1
connect_secure: ^1.0.1 copied to clipboard
Production-ready SSL pinning for Dart/Flutter with Dio, http (IOClient) and dart:io. Protects against MITM attacks with SHA-256 certificate fingerprint validation.
1.0.1 #
π Bug Fixes #
- Fix Dart code formatting issues to improve pub.flutter-io.cn score
- Apply
dart format
to all source files for consistent formatting
1.0.0 #
π MAJOR RELEASE - Certificate Lifecycle Management Platform #
This is a major release that transforms connect_secure
from a basic SSL pinning package into a comprehensive certificate lifecycle management platform.
π Revolutionary New Features #
- Complete Certificate Lifecycle Management - Industry-first comprehensive solution
- CLI Tools Suite - Professional command-line interface for certificate management
- Real-time Certificate Monitoring - Proactive health monitoring and alerts
- Certificate Discovery & Validation - Automated fingerprint extraction and validation
- Certificate Rotation - Seamless certificate updates and rotation
- Multi-Environment Support - Production-ready enterprise features
π§ New Classes and APIs #
CertificateLifecycleManager
- Main utility class for certificate operationsCertificateScanner
- Discover certificates from any serverCertificateInfo
- Rich certificate information modelFingerprintExtractor
- Advanced fingerprint processing utilitiesCertificateHealthChecker
- Comprehensive health monitoringCertificateHealth
- Detailed health status reporting
π οΈ CLI Tools (NEW) #
connect_secure discover
- Discover and extract certificate fingerprintsconnect_secure monitor
- Real-time certificate health monitoringconnect_secure validate
- Validate certificates against expected fingerprintsconnect_secure rotate
- Manage certificate rotation and updates
π Enhanced Documentation #
- Complete API documentation with examples
- Comprehensive usage guides
- Professional error handling examples
- Multi-format output support (JSON, YAML, Dart)
ποΈ Architecture Improvements #
- Zero Breaking Changes - Fully backward compatible
- Enterprise-Grade Quality - Production-ready code
- Professional Error Handling - Detailed context and debugging
- Comprehensive Testing - 17+ test cases with 100% pass rate
π― Use Cases #
- E-commerce Applications - Secure payment processing
- Banking & Finance - Financial transaction security
- Healthcare Applications - Patient data protection
- Enterprise Applications - Internal API security
- DevOps & CI/CD - Automated certificate management
π Performance & Reliability #
- Optimized Network Operations - 30-second timeouts
- Robust Error Handling - Specific exception types
- Memory Efficient - Optimized certificate processing
- Thread Safe - Concurrent operation support
π Security Enhancements #
- SHA-256 Fingerprint Validation - Industry-standard security
- Certificate Chain Validation - Complete trust verification
- Expiry Monitoring - Proactive certificate management
- MITM Protection - Advanced attack prevention
This major release establishes connect_secure
as the definitive solution for SSL certificate management in the Dart/Flutter ecosystem.
0.3.0 #
π Major New Features - Certificate Lifecycle Management #
- Certificate Discovery: Automatically extract fingerprints from any server
- Certificate Monitoring: Real-time health monitoring with expiry alerts
- Certificate Validation: Validate certificates against expected fingerprints
- Certificate Rotation: Seamless certificate updates and rotation
- CLI Tools: Comprehensive command-line interface for certificate management
- Multi-Environment Support: Manage certificates across different environments
π§ New Classes and APIs #
CertificateLifecycleManager
- Main utility class for certificate operationsCertificateScanner
- Discover certificates from serversCertificateInfo
- Certificate information model with expiry trackingFingerprintExtractor
- Extract and normalize certificate fingerprintsCertificateHealthChecker
- Check certificate health and validityCertificateHealth
- Certificate health status model
π οΈ CLI Tools #
connect_secure discover
- Discover and extract certificate fingerprintsconnect_secure monitor
- Monitor certificate health and expiryconnect_secure validate
- Validate certificates against expected fingerprintsconnect_secure rotate
- Manage certificate rotation and updates
π Enhanced Examples #
- Added
certificate_lifecycle_example.dart
with comprehensive examples - Updated main example to showcase new features
- Added CLI usage examples in README
π§ Developer Experience #
- Zero Breaking Changes - All existing code continues to work
- Backward Compatible - New features are additive
- Comprehensive Documentation - Full API docs and examples
- Multiple Output Formats - JSON, YAML, Dart code generation
0.2.0 #
π Major Improvements (Breaking Changes) #
- Enhanced Error Handling:
SslPinningException
now includes detailed information about failed validations (host, rejected fingerprint, allowed fingerprints) - Comprehensive Test Coverage: Added extensive test suite covering all functionality including fingerprint normalization, validation logic, and error scenarios
- Complete API Documentation: Added dartdoc comments to all public APIs with examples and parameter descriptions
- Code Refactoring: Extracted common validation logic into
SslPinningUtils
utility class to eliminate code duplication - Enhanced Security: Improved SSL pinning validation with better error reporting and exception handling
π§ New Features #
- Added
SslPinningUtils
utility class with static methods for fingerprint operations - Enhanced
SslPinningException
with additional context fields (host, rejectedFingerprint, allowedFingerprints) - Added PUT and DELETE methods to
SecureHttpClient
- Added
close()
method toSecureHttpClient
for proper resource cleanup - Improved example application with comprehensive error handling demonstrations
π Documentation #
- Updated README with security best practices section
- Added commands for obtaining certificate fingerprints
- Enhanced error handling examples
- Fixed version inconsistencies in documentation
- Added certificate rotation guidance
π§ͺ Testing #
- Added comprehensive test suite with 17+ test cases
- Tests for fingerprint normalization (colon, space, continuous formats)
- Tests for SHA-256 fingerprint generation consistency
- Tests for all HTTP client implementations
- Tests for error handling and exception scenarios
π§ Developer Experience #
- Better error messages with actionable information
- Consistent API across all HTTP client implementations
- Improved example application with real-world usage patterns
- Enhanced pubspec metadata with better description and topics
β οΈ Migration from 0.1.0 #
SslPinningException
constructor now accepts optional named parameters- All existing code will continue to work without changes
- New error handling features are backward compatible
0.1.0 #
- Add host-based pinning and fingerprint normalization
- Add
createPinnedHttpClient
factory forhttp
(IOClient) - Update README and example
- Improve pubspec metadata and topics
0.0.3 #
- Initial working version with
SecureHttpClient
andDioSslPinning
0.0.1 #
- TODO: Describe initial release.