1.1.4

Updates swift-crypto dependency to accept versions in range "3.0.0" ..< "4.0.0"

Update swift-crypto dependency

Updates swift-crypto from 1.x to 2.x

Add privacy manifest file

What's Changed

• Add PrivacyInfo.xcprivacy by @hannesoid in #95

Support SHA256 signed receipts

What's Changed

• Add test and implement sha256-signed receipts by @hannesoid in #93
• Update some other sample receipts in receipt validator tests

Offer automatic and dynamic library

• The default AppReceiptValidator Library is now not of type .dynamic anymore #86
• This may break existing embeddings because if the library is interpreted as static, then there is nothing to embed. In this case remove it from the embedded frameworks and Xcode should be happy.
• If you need .dynamic because of other (duplicate symbol…) linking errors, replace all references/embeddings with AppReceiptValidatorDynamic
• The Module name is AppReceiptValidator in both cases so import statements should remain the same.

Remove unused test resources

• removed two files that were no longer used

(Re-)Add alternative way to get MAC address

• Make legacy-style primary MAC address retrieval available, to facilitate fallback validation in case of .incorrectHash #82

Improve certificate validation

• Verify certificate chain and use custom root certificate if supplied (#80)

Improve mac receipt validation reliability

• Use updated mechanism to retrieve MAC address #79 - thanks to @weichsel

SPM, Linux, removing OpenSSL

This release changes the underlying dependency structure of the framework by removing OpenSSL. For ASN1 parsing we use now a swift package: ASN1Decoder. For signature checks and hash calculation it uses Apple's ´swift/crypto´ package.

This makes the whole package Linux compatible and also allows us to use ASN1Decoder as swift package.