starred/dehydrated
1
0
Fork 0
mirror of https://github.com/dehydrated-io/dehydrated.git synced 2026-08-27 06:04:07 +02:00
Code Issues 79 Packages Projects Releases 10 Wiki Activity
705 Commits 5 Branches 15 Tags
2e6933464e1d68352e9f58e36373ac9f092ecebb
Commit Graph
45 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Lukas Schauer 2e6933464e remove noout flag from time-based validity check 2026-02-03 22:01:15 +01:00
Lukas Schauer 1dbbc64ce9 implement workaround for openssl regression (fixes #981) 
The introduction of the `-multi` option to the x509 subcommand
introduced a regression to the `-checkend` behaviour, preventing
openssl to correctly indicate the certificate expiry status via
its exit code.

This commit introduces a (maybe temporary) workaround by instead
checking the output string.
 2025-10-24 09:22:31 +02:00
Lukas Schauer 12877bb238 throw error with information about OCSP deprecation if certificate doesn't indicate OCSP support 2025-07-05 11:13:45 +02:00
Lukas Schauer ad43e250b2 allow KEEP_GOING to also skip over ocsp stapling errors, update ocsp error message with a hint about deprecation on some CAs 2025-07-05 10:55:33 +02:00
Lukas Schauer 8e9e5ef9c7 also allow setting KEEP_GOING as a config option 2025-07-05 10:54:29 +02:00
Lukas Schauer a7deeaedbc set empty subject for ip-certificates 
as suggested by @candlerb in #783
 2025-07-05 10:28:13 +02:00
Lukas Schauer ce9eb300e2 implemented domain validation timeout 2025-06-17 19:51:27 +02:00
Lukas Schauer 9cfcd66f15 small addition to 0.7.2 changelog 2025-05-18 02:28:57 +02:00
Lukas Schauer 73bb54a4b2 updated changelog 2025-05-18 02:16:14 +02:00
Lukas Schauer 3a71a7ad94 only validate existance of wellknown directory or hook script when actually necessary (fixes #965) 2025-05-18 02:07:04 +02:00
Lukas Schauer 0290338853 post-v0.7.2-release 2025-05-18 01:36:16 +02:00
Lukas Schauer fcca67b53c release v0.7.2 2025-05-18 01:34:32 +02:00
Lukas Schauer cf9e6a33fd Allow for automatic deletion of old files 2025-05-02 15:00:48 +02:00
Lukas Schauer bec154f070 Added a configuration parameter to allow for timeouts during order processing (fixes #955) 2025-05-02 14:42:57 +02:00
Lukas Schauer 0141d86267 Update README (closes #964) 2025-05-02 14:38:45 +02:00
Lukas Schauer a86a176805 use temporary csr file instead of stdin (keeps compatibility to older openssl versions) 2025-04-23 11:24:42 +02:00
Lukas Schauer 200cd68e7e updated changelog 2025-04-14 19:49:31 +02:00
Lukas Schauer 7c438c484f added google ca to example config and added documentation link to error message 2025-04-14 19:12:59 +02:00
Lukas Schauer f6d82e2715 fix small issue with certificate profile selection (use key instead of value) 2025-04-14 18:49:44 +02:00
Lukas Schauer 1a1cb94a61 added changelog + default config entries for certificate profile selection 2025-04-14 18:41:38 +02:00
Lukas Schauer 4ea5081640 renew certificates with 32 days remaining (instead of 30) to avoid issues with monthly cronjobs (fixes #963) 2025-04-11 10:33:07 +02:00
Lukas Schauer e3ef43c816 fix zsh compatibility (fixes #896) 2023-01-16 22:41:05 +01:00
Lukas Schauer 5c4adf6baa added note about dehydrated irc channel 2022-10-31 15:46:28 +01:00
Lukas Schauer 35bfea55b6 increase dehydrated version for git master use 2022-10-31 15:46:07 +01:00
Lukas Schauer ea84199863 release 0.7.1 (it finally happened!) 2022-10-31 15:12:38 +01:00
Lukas Schauer 6fb8eba56a implemented workaround for retrying on badNonce errors 2022-09-07 15:09:57 +02:00
Lukas Schauer 7128e6b63c rfc8738: fix CN on certs with mixed ip+dns 2022-04-07 01:34:21 +02:00
Lukas Schauer 861f4c733d rfc8738: only replace ip with reverse dns thingy if tls-alpn-01 is used 2022-04-07 01:33:48 +02:00
Lukas Schauer ad3f08084c implemented rfc 8738 support 2022-04-06 22:23:43 +02:00
Lukas Schauer 784fb806c8 really reverted regression in somehow broken array expansion from e963438c.. 2021-11-02 09:05:19 +01:00
Lukas Schauer b2574b16d1 reverted regression in somehow broken array expansion from e963438c (fixes #850) 2021-11-02 09:01:00 +01:00
Lukas Schauer b347bc9086 added some changes to changelog 2021-10-31 22:58:06 +01:00
Lukas Schauer 08477170e9 Exit with error if somebody is trying to use EC account keys with ACME v1 2021-10-31 22:36:40 +01:00
Lukas Schauer f4cf92bae5 extend ec algorithms with secp521r1 (not yet supported by LetsEncrypt, but maybe by other CAs) 2021-10-31 22:31:09 +01:00
Lukas Schauer 93573cda3c experimental support for ec account keys (fixes #827) 2021-10-31 22:29:44 +01:00
Lukas Schauer 607a6088d3 Avoid writing ec-parameters to private-key file (fixes #830) 2021-10-31 20:20:40 +01:00
Lukas Schauer 880c99aa63 Better solution for issue #845 2021-10-31 20:11:31 +01:00
Lukas Schauer 7ac25358ef Show error if chain is configured for a CA which doesn't offer alternate chains (fixes #845) 2021-10-31 20:06:50 +01:00
Lukas Schauer 5733863b93 added warning about possible behaviour-change with new domains.txt.d feature 2021-10-31 19:55:41 +01:00
Lukas Schauer e963438c5a make shellcheck happy again 2021-10-31 19:33:03 +01:00
Lukas Schauer ab016803dd expand documentation on using letsencrypt staging ca 2021-04-18 03:48:47 +02:00
Lukas Schauer fb06530097 command_sign_csr: redirect fds after init_system (fixes #816) 2021-04-16 14:32:05 +02:00
Lukas Schauer 5c1551e946 remove some dots :) 2021-03-29 20:20:52 +02:00
Lukas Schauer 24f66a3473 generic support for weird curl versions with lower-case headers and no whitespace 2021-03-21 20:51:10 +01:00
Lukas Schauer dd0bbd2405 update copyright year 2021-02-18 16:47:23 +01:00