- Correct typing for paging methods
- Fixed incompatibility issues with API version 2016-10-01
- Fixed an
AttributeErrorduringget_certificate_version import_certificateno longer raisesAttributeErrorwhen thepolicykeyword argument isn't passed- Values of
x-ms-keyvault-regionandx-ms-keyvault-service-versionheaders are no longer redacted in logging output
- Key Vault API version 7.1 is now the default
- Updated minimum
azure-coreversion to 1.7.0
- At construction, clients accept a
CustomHookPolicythrough the optional keyword argumentcustom_hook_policy - All client requests include a unique ID in the header
x-ms-client-request-id - Dependency on
azure-commonfor multiapi support
- Support for Key Vault API version 7.1-preview
(#10124)
- Added
recoverable_daystoCertificateProperties - Added
ApiVersionenum identifying Key Vault versions supported by this package
- Added
CertificateClientinstances have aclosemethod which closes opened sockets. Used as a context manager, aCertificateClientcloses opened sockets on exit. (#9906)- Pollers no longer sleep after operation completion (#9991)
azure.keyvault.certificatesdefines__version__- Updated
msrestrequirement to >=0.6.0 - Challenge authentication policy requires TLS (#9457)
- Methods no longer raise the internal error
KeyVaultErrorException(#9690)
- First GA release
- Challenge authentication policy preserves request options (#8999)
- Added
vault_urlproperty toCertificateOperation - Removed
id,expires_on,not_before, andrecover_levelproperties fromCertificatePolicy - Removed
vault_urlproperty fromCertificateIssuer - Removed
vault_urlproperty fromIssuerProperties
- Updated
msrestrequirement to >=0.6.0 - Renamed
get_policytoget_certificate_policy - Renamed
update_policytoupdate_certificate_policy - Renamed
create_contactstoset_contacts - Renamed parameter
admin_detailsofcreate_issuerandupdate_issuertoadmin_contacts - Renamed all
nameparameters to include the name of the object whose name we are referring to. For example, thenameparameter ofget_certificateis nowcertificate_name - Renamed
AdministratorDetailstoAdministratorContact - Renamed the
ekusproperty ofCertificatePolicytoenhanced_key_usage - Renamed the
curveproperty ofCertificatePolicytokey_curve_name - Renamed the
san_upnsproperty ofCertificatePolicytosan_user_principal_names - Made the
subject_nameproperty ofCertificatePolicya kwarg and renamed it tosubject - Renamed the
deleted_dateproperty ofDeletedCertificatetodeleted_on - Removed the
issuer_propertiesproperty fromCertificateIssuerand added theproviderproperty directly ontoCertificateIssuer - Renamed property
admin_detailsofCertificateIssuertoadmin_contacts - Renamed the
thumbprintproperty ofCertificatePropertiestox509_thumbprint - Added
WellKnownIssuerNamesenum class that holds popular issuer names - Renamed
SecretContentTypeenum class toCertificateContentType
-
Removed redundant method
get_pending_certificate_signing_request(). A pending CSR can be retrieved viaget_certificate_operation(). -
Renamed the sync method
create_certificatetobegin_create_certificate -
Renamed
restore_certificatetorestore_certificate_backup -
Renamed
get_certificatetoget_certificate_version -
Renamed
get_certificate_with_policytoget_certificate -
Renamed
list_certificatestolist_properties_of_certificates -
Renamed
list_properties_of_issuerstolist_properties_of_issuers -
Renamed
list_certificate_versionstolist_properties_of_certificate_versions -
create_certificatenow has policy as a required parameter -
All optional positional parameters besides
versionhave been moved to kwargs -
Renamed sync method
delete_certificatetobegin_delete_certificate -
Renamed sync method
recover_certificatetobegin_recover_deleted_certificate -
Renamed async method
recover_certificatetorecover_deleted_certificate -
The sync method
begin_delete_certificateand asyncdelete_certificatenow return pollers that return aDeletedCertificate -
The sync method
begin_recover_deleted_certificateand asyncrecover_deleted_certificatenow return pollers that return aKeyVaultCertificate -
Renamed enum
ActionTypetoCertificatePolicyAction -
Renamed
CertificatetoKeyVaultCertificate -
Renamed
ContacttoCertificateContact -
Renamed
IssuertoCertificateIssuer -
Renamed
CertificateErrortoCertificateOperationError -
Renamed
expiresproperty ofCertificatePropertiesandCertificatePolicytoexpires_on -
Renamed
createdproperty ofCertificateProperties,CertificatePolicy, andCertificateIssuertocreated_on -
Renamed
updatedproperty ofCertificateProperties,CertificatePolicy, andCertificateIssuertoupdated_on -
The
vault_endpointparameter ofCertificateClienthas been renamed tovault_url -
The property
vault_endpointhas been renamed tovault_urlin all models -
CertificatePolicynow has a public class methodget_defaultallowing users to get the defaultCertificatePolicy -
Logging can now be enabled properly on the client level
-
Enums
JsonWebKeyCurveNameandJsonWebKeyTypehave been renamed toKeyCurveNameandKeyType, respectively. -
Both async and sync versions of
create_certificatenow return pollers that return the createdCertificateif creation is successful, and aCertificateOperationif not. -
Certificatenow has attributeproperties, which holds certain properties of the certificate, such asversion. This changes the shape of theCertificatetype, as certain properties ofCertificate(such asversion) have to be accessed through thepropertiesproperty. -
update_certificatehas been renamed toupdate_certificate_properties -
The
vault_urlparameter ofCertificateClienthas been renamed tovault_endpoint -
The property
vault_urlhas been renamed tovault_endpointin all models
Version 4.0.0b3 is the first preview of our efforts to create a user-friendly and Pythonic client library for Azure Key Vault's certificates.
This library is not a direct replacement for azure-keyvault. Applications
using that library would require code changes to use azure-keyvault-certificates.
This package's
documentation
and
samples
demonstrate the new API.
- Packages scoped by functionality
azure-keyvault-certificatescontains a client for certificate operations
- Client instances are scoped to vaults (an instance interacts with one vault only)
- Authentication using
azure-identitycredentials- see this package's documentation , and the Azure Identity documentation for more information
- Distributed tracing framework OpenCensus is now supported
- Asynchronous API supported on Python 3.5.3+
- the
azure.keyvault.certificates.aionamespace contains an async equivalent of the synchronous client inazure.keyvault.certificates - Async clients use aiohttp for transport by default. See azure-core documentation for more information about using other transports.
- the