connect_secure 1.0.1 copy "connect_secure: ^1.0.1" to clipboard
connect_secure: ^1.0.1 copied to clipboard

Production-ready SSL pinning for Dart/Flutter with Dio, http (IOClient) and dart:io. Protects against MITM attacks with SHA-256 certificate fingerprint validation.

1.0.1 #

πŸ› Bug Fixes #

  • Fix Dart code formatting issues to improve pub.flutter-io.cn score
  • Apply dart format to all source files for consistent formatting

1.0.0 #

πŸŽ‰ MAJOR RELEASE - Certificate Lifecycle Management Platform #

This is a major release that transforms connect_secure from a basic SSL pinning package into a comprehensive certificate lifecycle management platform.

πŸš€ Revolutionary New Features #

  • Complete Certificate Lifecycle Management - Industry-first comprehensive solution
  • CLI Tools Suite - Professional command-line interface for certificate management
  • Real-time Certificate Monitoring - Proactive health monitoring and alerts
  • Certificate Discovery & Validation - Automated fingerprint extraction and validation
  • Certificate Rotation - Seamless certificate updates and rotation
  • Multi-Environment Support - Production-ready enterprise features

πŸ”§ New Classes and APIs #

  • CertificateLifecycleManager - Main utility class for certificate operations
  • CertificateScanner - Discover certificates from any server
  • CertificateInfo - Rich certificate information model
  • FingerprintExtractor - Advanced fingerprint processing utilities
  • CertificateHealthChecker - Comprehensive health monitoring
  • CertificateHealth - Detailed health status reporting

πŸ› οΈ CLI Tools (NEW) #

  • connect_secure discover - Discover and extract certificate fingerprints
  • connect_secure monitor - Real-time certificate health monitoring
  • connect_secure validate - Validate certificates against expected fingerprints
  • connect_secure rotate - Manage certificate rotation and updates

πŸ“š Enhanced Documentation #

  • Complete API documentation with examples
  • Comprehensive usage guides
  • Professional error handling examples
  • Multi-format output support (JSON, YAML, Dart)

πŸ—οΈ Architecture Improvements #

  • Zero Breaking Changes - Fully backward compatible
  • Enterprise-Grade Quality - Production-ready code
  • Professional Error Handling - Detailed context and debugging
  • Comprehensive Testing - 17+ test cases with 100% pass rate

🎯 Use Cases #

  • E-commerce Applications - Secure payment processing
  • Banking & Finance - Financial transaction security
  • Healthcare Applications - Patient data protection
  • Enterprise Applications - Internal API security
  • DevOps & CI/CD - Automated certificate management

πŸ“ˆ Performance & Reliability #

  • Optimized Network Operations - 30-second timeouts
  • Robust Error Handling - Specific exception types
  • Memory Efficient - Optimized certificate processing
  • Thread Safe - Concurrent operation support

πŸ”’ Security Enhancements #

  • SHA-256 Fingerprint Validation - Industry-standard security
  • Certificate Chain Validation - Complete trust verification
  • Expiry Monitoring - Proactive certificate management
  • MITM Protection - Advanced attack prevention

This major release establishes connect_secure as the definitive solution for SSL certificate management in the Dart/Flutter ecosystem.

0.3.0 #

πŸš€ Major New Features - Certificate Lifecycle Management #

  • Certificate Discovery: Automatically extract fingerprints from any server
  • Certificate Monitoring: Real-time health monitoring with expiry alerts
  • Certificate Validation: Validate certificates against expected fingerprints
  • Certificate Rotation: Seamless certificate updates and rotation
  • CLI Tools: Comprehensive command-line interface for certificate management
  • Multi-Environment Support: Manage certificates across different environments

πŸ”§ New Classes and APIs #

  • CertificateLifecycleManager - Main utility class for certificate operations
  • CertificateScanner - Discover certificates from servers
  • CertificateInfo - Certificate information model with expiry tracking
  • FingerprintExtractor - Extract and normalize certificate fingerprints
  • CertificateHealthChecker - Check certificate health and validity
  • CertificateHealth - Certificate health status model

πŸ› οΈ CLI Tools #

  • connect_secure discover - Discover and extract certificate fingerprints
  • connect_secure monitor - Monitor certificate health and expiry
  • connect_secure validate - Validate certificates against expected fingerprints
  • connect_secure rotate - Manage certificate rotation and updates

πŸ“š Enhanced Examples #

  • Added certificate_lifecycle_example.dart with comprehensive examples
  • Updated main example to showcase new features
  • Added CLI usage examples in README

πŸ”§ Developer Experience #

  • Zero Breaking Changes - All existing code continues to work
  • Backward Compatible - New features are additive
  • Comprehensive Documentation - Full API docs and examples
  • Multiple Output Formats - JSON, YAML, Dart code generation

0.2.0 #

πŸš€ Major Improvements (Breaking Changes) #

  • Enhanced Error Handling: SslPinningException now includes detailed information about failed validations (host, rejected fingerprint, allowed fingerprints)
  • Comprehensive Test Coverage: Added extensive test suite covering all functionality including fingerprint normalization, validation logic, and error scenarios
  • Complete API Documentation: Added dartdoc comments to all public APIs with examples and parameter descriptions
  • Code Refactoring: Extracted common validation logic into SslPinningUtils utility class to eliminate code duplication
  • Enhanced Security: Improved SSL pinning validation with better error reporting and exception handling

πŸ”§ New Features #

  • Added SslPinningUtils utility class with static methods for fingerprint operations
  • Enhanced SslPinningException with additional context fields (host, rejectedFingerprint, allowedFingerprints)
  • Added PUT and DELETE methods to SecureHttpClient
  • Added close() method to SecureHttpClient for proper resource cleanup
  • Improved example application with comprehensive error handling demonstrations

πŸ“š Documentation #

  • Updated README with security best practices section
  • Added commands for obtaining certificate fingerprints
  • Enhanced error handling examples
  • Fixed version inconsistencies in documentation
  • Added certificate rotation guidance

πŸ§ͺ Testing #

  • Added comprehensive test suite with 17+ test cases
  • Tests for fingerprint normalization (colon, space, continuous formats)
  • Tests for SHA-256 fingerprint generation consistency
  • Tests for all HTTP client implementations
  • Tests for error handling and exception scenarios

πŸ”§ Developer Experience #

  • Better error messages with actionable information
  • Consistent API across all HTTP client implementations
  • Improved example application with real-world usage patterns
  • Enhanced pubspec metadata with better description and topics

⚠️ Migration from 0.1.0 #

  • SslPinningException constructor now accepts optional named parameters
  • All existing code will continue to work without changes
  • New error handling features are backward compatible

0.1.0 #

  • Add host-based pinning and fingerprint normalization
  • Add createPinnedHttpClient factory for http (IOClient)
  • Update README and example
  • Improve pubspec metadata and topics

0.0.3 #

  • Initial working version with SecureHttpClient and DioSslPinning

0.0.1 #

  • TODO: Describe initial release.
7
likes
160
points
250
downloads

Publisher

unverified uploader

Weekly Downloads

Production-ready SSL pinning for Dart/Flutter with Dio, http (IOClient) and dart:io. Protects against MITM attacks with SHA-256 certificate fingerprint validation.

Repository (GitLab)
View/report issues

Topics

#security #networking #ssl #certificate-pinning #mitm-protection

Documentation

Documentation
API reference

License

MIT (license)

Dependencies

crypto, dio, http

More

Packages that depend on connect_secure