Skip to content

crypto: Add ED25519 and ED448 support to the certificate builder#19465

Merged
BeryJu merged 3 commits intomainfrom
certificate-builder-update
Feb 3, 2026
Merged

crypto: Add ED25519 and ED448 support to the certificate builder#19465
BeryJu merged 3 commits intomainfrom
certificate-builder-update

Conversation

@PeshekDotDev
Copy link
Contributor

Details

Closes #19432


Checklist

  • Local tests pass (ak test authentik/)
  • The code has been formatted (make lint-fix)

If an API change has been made

  • The API schema has been updated (make gen-build)

If changes to the frontend have been made

  • The code has been formatted (make web)

If applicable

  • The documentation has been updated
  • The documentation has been formatted (make docs)

@PeshekDotDev PeshekDotDev requested review from a team as code owners January 15, 2026 03:31
@netlify
Copy link

netlify bot commented Jan 15, 2026

Deploy Preview for authentik-storybook ready!

Name Link
🔨 Latest commit 88335ec
🔍 Latest deploy log https://app.netlify.com/projects/authentik-storybook/deploys/69804d7c90576700086afaf1
😎 Deploy Preview https://deploy-preview-19465--authentik-storybook.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify
Copy link

netlify bot commented Jan 15, 2026

Deploy Preview for authentik-docs ready!

Name Link
🔨 Latest commit 0b791bc
🔍 Latest deploy log https://app.netlify.com/projects/authentik-docs/deploys/69685faba1418e00078c2673
😎 Deploy Preview https://deploy-preview-19465--authentik-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify
Copy link

netlify bot commented Jan 15, 2026

Deploy Preview for authentik-integrations ready!

Name Link
🔨 Latest commit 0b791bc
🔍 Latest deploy log https://app.netlify.com/projects/authentik-integrations/deploys/69685fabce43900007f03251
😎 Deploy Preview https://deploy-preview-19465--authentik-integrations.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@codecov
Copy link

codecov bot commented Jan 15, 2026

Codecov Report

❌ Patch coverage is 57.14286% with 6 lines in your changes missing coverage. Please review.
✅ Project coverage is 93.25%. Comparing base (3812823) to head (084ca08).
⚠️ Report is 33 commits behind head on main.
✅ All tests successful. No failed tests found.

Files with missing lines Patch % Lines
authentik/crypto/builder.py 57.14% 6 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main   #19465      +/-   ##
==========================================
- Coverage   93.27%   93.25%   -0.03%     
==========================================
  Files         968      968              
  Lines       53331    53345      +14     
==========================================
+ Hits        49746    49747       +1     
- Misses       3585     3598      +13     
Flag Coverage Δ
conformance 38.08% <57.14%> (+<0.01%) ⬆️
e2e 44.08% <57.14%> (-0.01%) ⬇️
integration 22.92% <28.57%> (+<0.01%) ⬆️
unit 91.40% <57.14%> (-0.01%) ⬇️
unit-migrate 91.44% <57.14%> (-0.03%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@github-actions
Copy link
Contributor

github-actions bot commented Jan 15, 2026

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-084ca086293fc46c7cf2a0d386350e2bf167d860
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-084ca086293fc46c7cf2a0d386350e2bf167d860

Afterwards, run the upgrade commands from the latest release notes.

@rissson rissson changed the title Add ED25519 and ED448 support to the certificate builder. crypto: Add ED25519 and ED448 support to the certificate builder Jan 15, 2026
@PeshekDotDev PeshekDotDev self-assigned this Jan 15, 2026
@PeshekDotDev PeshekDotDev moved this from Todo to Needs review in authentik Core Jan 15, 2026
@github-project-automation github-project-automation bot moved this from Needs review to In Progress in authentik Core Feb 3, 2026
@BeryJu BeryJu merged commit ff87929 into main Feb 3, 2026
101 of 102 checks passed
@BeryJu BeryJu deleted the certificate-builder-update branch February 3, 2026 13:29
@github-project-automation github-project-automation bot moved this from In Progress to Done in authentik Core Feb 3, 2026
kensternberg-authentik added a commit that referenced this pull request Feb 4, 2026
* main: (26 commits)
  providers/saml: auto pull signature algorithm options (#17614)
  core, web: bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in /packages/prettier-config (#19990)
  web: bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in /web (#19989)
  stages/authenticator_webauthn: fix double JSON encoding of webauthn options (#19952)
  core: bump django from 5.2.10 to 5.2.11 (#19988)
  ci: allow setting assignee to fail (#19985)
  root: revert enterprise loading behaviour (#19485)
  web/flows: update flow background (#19974)
  providers/oauth2: use compare_digest for client_secret comparison (#19979)
  recovery: consume token in transaction (#19967)
  core: ask for token duration on recovery link/email by admin (#19875)
  core: bump aws-cdk-lib from 2.236.0 to 2.237.0 (#19958)
  web: bump the storybook group across 1 directory with 5 updates (#19960)
  core: bump library/nginx from `c881927` to `7fe5dda` in /website (#19961)
  core: bump gunicorn from 25.0.0 to 25.0.1 (#19959)
  core: bump goauthentik.io/api/v3 to 3.2026.2.0-rc1-1770129730 (#19973)
  lifecycle: bump shm size (#19369)
  crypto: Add ED25519 and ED448 support to the certificate builder (#19465)
  web/admin: Register stage elements. Fix linter warnings (#19948)
  web: bump knip from 5.82.1 to 5.83.0 in /web (#19962)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

Upgrade cert generator to support ed448 and ed25519

3 participants