starred/dehydrated
1
0
Fork 0
mirror of https://github.com/dehydrated-io/dehydrated.git synced 2026-07-08 05:55:18 +02:00
Code Issues 79 Packages Projects Releases 10 Wiki Activity

release 0.6.2

Browse Source
This commit is contained in:
Lukas Schauer
2018-04-25 22:57:12 +02:00
parent 89de83c994
commit ce3d658377
3 changed files with 27 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG
+12 -3
View File
@@ -1,12 +1,21 @@
# Change Log # Change Log
This file contains a log of major changes in dehydrated This file contains a log of major changes in dehydrated
## [x.x.x] - xxxx-xx-xx ## [0.6.2] - 2018-04-25
## Added
- New deploy_ocsp hook
- Allow account registration with custom key
## Changed ## Changed
- Don't walk certificate chain for ACMEv2 (certificate contains chain by default) - Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
- Improved documentation on wildcards
## Added ## Fixes
- ?? - Added workaround for compatibility with filesystem ACLs
- Close unwanted external file-descriptors
- Fixed JSON parsing on force-renewal
- Fixed cleanup of challenge files/dns-entries on validation errors
- A few more minor fixes
## [0.6.1] - 2018-03-13 ## [0.6.1] - 2018-03-13
## Changed ## Changed
README.md
+12 -11
View File
@@ -2,20 +2,21 @@
![](docs/logo.jpg) ![](docs/logo.jpg)
This is a client for signing certificates with an ACME-server (currently only provided by Let's Encrypt) implemented as a relatively simple bash-script. Dehydrated is a client for signing certificates with an ACME-server (e.g. Let's Encrypt) implemented as a relatively simple (zsh-compatible) bash-script.
Dehydrated supports both ACME v1 and the new ACME v2 including support for wildcard certificates! This client supports both ACME v1 and the new ACME v2 including support for wildcard certificates!
It uses the `openssl` utility for everything related to actually handling keys and certificates, so you need to have that installed. It uses the `openssl` utility for everything related to actually handling keys and certificates, so you need to have that installed.
Other dependencies are: cURL, sed, grep, mktemp (all found on almost any system, cURL being the only exception) Other dependencies are: cURL, sed, grep, awk, mktemp (all found pre-installed on almost any system, cURL being the only exception).
Current features: Current features:
- Signing of a list of domains - Signing of a list of domains (including wildcard domains!)
- Signing of a CSR - Signing of a custom CSR (either standalone or completely automated using hooks!)
- Renewal if a certificate is about to expire or SAN (subdomains) changed - Renewal if a certificate is about to expire or defined set of domains changed
- Certificate revocation - Certificate revocation
Please keep in mind that this software and even the acme-protocol are relatively young and may still have some unresolved issues. Feel free to report any issues you find with this script or contribute by submitting a pull request. Please keep in mind that this software, the ACME-protocol and all supported CA servers out there are relatively young and there might be a few issues. Feel free to report any issues you find with this script or contribute by submitting a pull request,
but please check for duplicates first (feel free to comment on those to get things rolling).
## Getting started ## Getting started
@@ -87,12 +88,12 @@ Without those hobbies I probably would never have started working on dehydrated
I'd really appreciate if you could [donate a bit of money](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=23P9DSJBTY7C8) I'd really appreciate if you could [donate a bit of money](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=23P9DSJBTY7C8)
so I can buy cool stuff (while still being able to afford food :D). so I can buy cool stuff (while still being able to afford food :D).
If you have hardware laying around that you think I'd enjoy playing with (e.g. decomissioned but still modern-ish servers, If you have hardware laying around that you think I'd enjoy playing with (e.g. decommissioned but still modern-ish servers,
10G networking hardware, enterprise grade routers or APs, interesting ARM/MIPS boards, etc.) and that you would be willing 10G networking hardware, enterprise grade routers or APs, interesting ARM/MIPS boards, etc.) and that you would be willing
to ship to me please contact me at `donations@dehydrated.de` or on Twitter [@lukas2511](https://twitter.com/lukas2511). to ship to me please contact me at `donations@dehydrated.io` or on Twitter [@lukas2511](https://twitter.com/lukas2511).
If you want your name to be added to the [donations list](https://dehydrated.de/donations.html) please add a note or send me an If you want your name to be added to the [donations list](https://dehydrated.io/donations.html) please add a note or send me an
email `donations@dehydrated.de`. I respect your privacy and won't publish your name without permission. email `donations@dehydrated.io`. I respect your privacy and won't publish your name without permission.
Other ways of donating: Other ways of donating:
- [My Amazon Wishlist](http://www.amazon.de/registry/wishlist/1TUCFJK35IO4Q) - [My Amazon Wishlist](http://www.amazon.de/registry/wishlist/1TUCFJK35IO4Q)
dehydrated
+3 -3
View File
@@ -1,7 +1,7 @@
#!/usr/bin/env bash #!/usr/bin/env bash
# dehydrated by lukas2511 # dehydrated by lukas2511
# Source: https://dehydrated.de # Source: https://dehydrated.io
# #
# This script is licensed under The MIT License (see LICENSE for more information). # This script is licensed under The MIT License (see LICENSE for more information).
@@ -17,7 +17,7 @@ umask 077 # paranoid umask, we're creating private keys
exec 3>&- exec 3>&-
exec 4>&- exec 4>&-
VERSION="git-master-after-0.6.1" VERSION="0.6.2"
# Find directory in which this script is stored by traversing all symbolic links # Find directory in which this script is stored by traversing all symbolic links
SOURCE="${0}" SOURCE="${0}"
@@ -1037,7 +1037,7 @@ command_version() {
load_config noverify load_config noverify
echo "Dehydrated by Lukas Schauer" echo "Dehydrated by Lukas Schauer"
echo "https://dehydrated.de" echo "https://dehydrated.io"
echo "" echo ""
echo "Dehydrated version: ${VERSION}" echo "Dehydrated version: ${VERSION}"
revision="$(cd "${SCRIPTDIR}"; git rev-parse HEAD 2>/dev/null || echo "unknown")" revision="$(cd "${SCRIPTDIR}"; git rev-parse HEAD 2>/dev/null || echo "unknown")"