Martin Strobel
68cb1e0661
ACME v02 Support
2018-01-13 20:17:25 +01:00
Lukas Schauer
4a811759dc
version 0.5.0
2018-01-13 20:08:12 +01:00
Lukas Schauer
2adc57791c
Add optional user and group configuration ( fixes #434 )
2017-12-18 00:35:26 +01:00
Lukas Schauer
f35aed6ae6
replace backticks with escaped dollarbracethingy ( fixes #438 )
2017-12-18 00:01:47 +01:00
Lukas Schauer
b6b56d0df7
export certificate alias to be used in hook scripts
2017-12-17 23:54:19 +01:00
Lukas Schauer
13c853d43b
also reset configvars after domains loop
2017-12-17 23:51:23 +01:00
Lukas Schauer
c62f3d91fc
implement certificate aliases as suggested by typingArtist ( fixes #396 )
2017-12-17 23:50:46 +01:00
typingArtist
eb1c4ac41d
make certdir a parameter to sign_domain
2017-12-17 22:55:12 +01:00
Lukas Schauer
eb4aaefda1
also inform about still-valid ocsp stapling files ( fixes #457 )
2017-12-14 00:11:40 +01:00
Lukas Schauer
3d97799d6a
always revalidate challenges if --force is set ( fixes #370 )
2017-11-07 14:43:41 +01:00
Exagone313
742c0ad176
fix ocsp.der symlink
2017-10-22 16:31:25 +02:00
Andreas Loibl
7f410e9bff
fix account command
...
backup file path generation should split the filename on the last dot instead of the first
2017-10-17 16:39:46 +02:00
Lukas Schauer
da3428a84a
use nullglob, disable warning on empty CONFIG_D directory
2017-09-21 18:10:01 +02:00
Lukas Schauer
b5e178ea75
allow for spaces when extracting commonName from csr ( fixes #423 )
2017-09-20 15:44:05 +02:00
Lukas Schauer
bc20ec79f3
also show freebsd version
2017-09-20 15:31:38 +02:00
Marcin Gryszkalis
ce9b42d8ad
fix issue #426 - version info on FreeBSD
2017-09-20 15:28:57 +02:00
Lukas Schauer
f838d93f40
stop verification loop after invalid challenge ( fixes #431 )
2017-09-20 15:17:30 +02:00
typingArtist
0be0ab083f
replace ${CERTDIR}/${domain} with ${certdir} everywhere
...
• improves readability
• allows ${certdir} to be changed independent from ${domain} more easily
2017-07-18 15:46:25 +02:00
Lukas Schauer
c57ad87e7c
fixed error handling on non-2xx http status codes ( #413 )
2017-07-18 03:29:39 +02:00
Lukas Schauer
2687054d25
cut path from url for ocsp host
2017-07-13 00:53:32 +02:00
Lukas Schauer
2b76d038d3
ocsp fetching should now also work with older openssl versions
2017-07-12 16:00:25 +02:00
Lukas Schauer
e339b28159
add host header to ocsp request
2017-07-12 15:33:56 +02:00
Lukas Schauer
4f3bd3e956
fixed exit_hook
2017-07-11 10:06:42 +02:00
Lukas Schauer
f86290ea52
revocation: don't fail if certificate already has been revoked ( fixes #236 )
2017-07-11 01:30:30 +02:00
Lukas Schauer
f1bc2b14ba
cleanup old ocsp response files
2017-07-11 00:50:05 +02:00
Lukas Schauer
367ef574f1
export altnames so it can be used in hook scripts ( fixes #360 )
2017-07-11 00:47:37 +02:00
Lukas Schauer
4e7fb80bcd
support otherName SAN entries for domain verification ( fixes #356 )
2017-07-11 00:35:59 +02:00
Lukas Schauer
ee75c5dca7
Initial support for fetching OCSP status to be used for OCSP stapling (as suggested in #385 )
2017-07-11 00:28:36 +02:00
Lukas Schauer
bb99742aa7
load config for version information but disable verification
2017-07-10 21:36:32 +02:00
Lukas Schauer
60583d3ef9
added hook to run before cron command ( fixes #371 )
2017-07-10 21:36:10 +02:00
Lukas Schauer
cbb661ca17
specify openssl config location when converting CSR to DER ( fixes #397 )
2017-07-10 20:32:05 +02:00
Lukas Schauer
dc600e39b8
cleanup: also move .pem-revoked files ( fixes #237 )
2017-07-10 20:27:42 +02:00
Lukas Schauer
e6d6882c78
added option to automatically run cleanup routine (implements #389 )
2017-07-10 20:21:30 +02:00
Herman van Rink
14a5f63077
Redirect additional errors to STDERR
2017-07-10 19:59:52 +02:00
Herman van Rink
5787cd6a47
Remove double output redirection, _exiterr already does >&2
2017-07-10 19:59:52 +02:00
Lukas Schauer
db18820991
made openssl binary configurable ( closes #393 , closes #379 )
2017-07-10 19:13:52 +02:00
Lukas Schauer
2f775d0e2a
remove duplicate -a short option from --account ( fixes #410 )
2017-07-10 18:21:06 +02:00
Lukas Schauer
f2b589430c
added version command
2017-07-10 17:21:22 +02:00
Lukas Schauer
533aa80129
replaced source url with dehydrated.de
2017-07-10 17:15:29 +02:00
Lukas Schauer
d1f215b652
fixed typos as suggested by @jwilk ( closes #369 )
2017-07-10 16:55:18 +02:00
Andreas Thienemann
bd57777c62
Ability to provide extra curl options
...
In some situations it might be necessary to pass extra commands to
the curl binary, e.g. proxy authentication credentials.
Adds the CURL_OPTS config option.
2017-07-10 16:44:39 +02:00
Haddon CD
ba31a505d2
Add MSYS support
2017-07-10 16:40:36 +02:00
Chase Bolt
0dcf94dd3d
dont strip for docker containers that cwd is /
2017-07-10 16:36:14 +02:00
Andreas Thienemann
9ea75e7cfb
Support older bash releases
...
Bash 3.0 and others seem to have serious issues running dehydrated.
https://github.com/lukas2511/dehydrated/issues/284 tracks the
problem but got closed as it seems too hard to support "stone age"
distributions.
Turns out it is actually only a three line change. ;-)
2017-07-10 15:29:30 +02:00
Lukas Schauer
d685463673
implemented issuer-chain cache
2017-07-10 15:06:50 +02:00
Lukas Schauer
98ad01a110
allow using parts of dehydrated without running the main script (intended for testing parts of the script)
2017-07-10 14:51:55 +02:00
Anton Avramov
ec1599e3b6
Added new feature Update registration contact #239
2017-07-10 14:02:21 +02:00
Lukas Schauer
aed4272e97
improved register command ( closes #350 )
2017-02-05 15:32:29 +01:00
Lukas Schauer
3d8d320c9f
trying to fix compatibility with mawk
2017-02-04 13:32:56 +01:00
Lukas Schauer
ee65261ea8
exclude root certificate from certificate chain
2017-01-30 03:45:21 +01:00
