Lukas Schauer
b3abc41dbe
tmpfix: log error if acmev1 validation is denied + fix unbound variable
2020-09-15 17:27:24 +02:00
Lukas Schauer
b3b2fee496
eab: use hex key instead of binary (fixes issue with nullbytes)
2020-09-14 18:59:41 +02:00
Lukas Schauer
416fd0fd1b
do not fail on challenge in "processing" state ( fixes #759 )
2020-09-14 18:31:24 +02:00
Lukas Schauer
142c69dd90
fixed bad typo..
2020-09-14 18:28:05 +02:00
Lukas Schauer
74c136905b
readme+changelog
2020-09-14 18:24:01 +02:00
Lukas Schauer
5fc1175aef
EAB + ZeroSSL support
2020-09-14 18:22:36 +02:00
Lukas Schauer
4b91fcf498
read boolean values from json
2020-09-14 18:19:08 +02:00
Lukas Schauer
11323d0727
removed accidental shebang
2020-09-14 18:18:35 +02:00
Lukas Schauer
a9a64c9fd0
use presets for some CAs instead of requiring full urls
2020-09-14 16:37:16 +02:00
Lukas Schauer
e119d9136b
fixed some typos ( fixes #725 , fixes #741 , fixes #740 )
2020-07-05 22:29:57 +02:00
Lukas Schauer
7e92850957
fixed zsh compatibility
2020-07-05 04:13:11 +02:00
Lukas Schauer
bb5a1473d1
merged temporary json.sh into dehydrated, fixed authorization "pending" loop
2020-07-04 21:51:32 +02:00
Lukas Schauer
7f970b527c
experimental json.sh support
2020-07-04 21:36:23 +02:00
Lukas Schauer
9827a411b3
removed instructions for importing from "official" client (certbot) as it probably doesn't work anymore and there isn't really much use for it anyway
2020-04-28 21:29:24 +02:00
Lukas Schauer
4a55f93896
fix link to wiki in documentation ( fixes #690 )
2020-04-28 21:27:49 +02:00
Lukas Schauer
a07c8d14f6
reworked dependency check and moved it up a bit in code ( fixes #715 , resolves #717 again...)
2020-04-28 21:25:08 +02:00
Lukas Schauer
42047fdf11
added changelog
2020-04-28 21:10:22 +02:00
Lukas Schauer
76d7e31981
added note about newline encoded in accounts directory hashes ( resolves #730 )
2020-04-28 21:03:55 +02:00
Lukas Schauer
4fd4d4d3c2
temporarily store raw curl version output to fix check ( fixes #717 )
2020-04-28 20:58:46 +02:00
Lukas Schauer
229f7186a6
store errorcode while using KEEP_GOING ( fixes #659 )
2020-04-28 20:39:04 +02:00
Lukas Schauer
4b7a1e4ce6
report issues with hook scripts instead of silently exiting ( fixes #733 , fixes #686 )
2020-04-28 20:13:03 +02:00
Lukas Schauer
871efe653b
skip exit_hook in _exiterr if KEEP_GOING is enabled ( fixes #686 )
2020-04-28 18:36:02 +02:00
Lukas Schauer
fcfb077a95
redirect output of cert expiry check ( fixes #713 )
2020-04-02 12:44:40 +02:00
Lukas Schauer
bc9344392a
fixed typo ( closes #712 )
2020-04-02 12:23:09 +02:00
Lukas Schauer
5b7c898b63
only show order processing/pending message when waiting
2020-04-02 12:15:17 +02:00
Lukas Schauer
307eaadddf
updated notice about move
2020-01-30 22:51:25 +01:00
Lukas Schauer
dfffb1b88b
added note about moving the repository
2020-01-30 01:45:17 +01:00
Lukas Schauer
e2eeaf7ec6
added funding.yml
2019-11-11 22:46:13 +01:00
Lukas Schauer
946e5712ba
fixed small logic bug
2019-10-09 02:05:54 +02:00
Lukas Schauer
018254974c
Merge tag 'v0.6.5'
2019-07-06 19:25:32 +02:00
Lukas Schauer
05eda91a2f
release 0.6.5 (fixed apiv1 compatibility...)
2019-06-26 12:33:35 +02:00
Lukas Schauer
f60f2f81e8
release 0.6.5 (fixed apiv1 compatibility...)
2019-06-26 12:29:39 +02:00
Lukas Schauer
4f358e22f4
release 0.6.4 (fixed account id handling, again)
2019-06-25 15:28:09 +02:00
Lukas Schauer
f9d0b1bd70
release 0.6.3
2019-06-25 12:50:45 +02:00
Lukas Schauer
be13dcd454
fixed fetching of account information ( fixes #652 , fixes #647 , fixes #650 , closes #648 )
2019-06-25 12:19:20 +02:00
Lukas Schauer
74a536c161
added documentation about possible future removal of api version 1
2019-03-04 23:23:40 +01:00
Lukas Schauer
444cea4669
Revert "cleanup: removed api version 1 support ( closes #510 )"
...
Since a few CAs out there actually seem to (only) support ACME v1 I
decided to revert the removal and keep ACME v1 around, at least until
it eventually becomes a bigger inconvenience to maintain.
This reverts commit aadf7d5e64 .
2019-03-04 23:11:07 +01:00
Lukas Schauer
ea93170959
BSD bugfixes for version command ( closes #619 )
2019-03-03 21:51:01 +01:00
Lukas Schauer
133e31de0b
tiny documentation fix: per-certificate-config can override PRIVATE_KEY_ROLLOVER ( closes #614 )
2019-03-03 20:38:47 +01:00
Lukas Schauer
aadf7d5e64
cleanup: removed api version 1 support ( closes #510 )
2019-03-03 20:32:10 +01:00
Lukas Schauer
e4a32acbe2
new hook: sync_cert ( closes #609 )
2019-03-03 20:22:41 +01:00
Lukas Schauer
1c77730373
call exit_hook with error message ( fixes #630 )
2019-03-03 20:08:18 +01:00
Lukas Schauer
e623fcc024
implement POST-as-GET ( closes #626 )
2019-03-03 20:00:13 +01:00
Lukas Schauer
585ed5404b
updated oid for tls-alpn verification token ( fixes #624 )
2019-01-18 13:25:57 +01:00
Lukas Schauer
92aa1ecd5a
document DOMAINS_D parameter in example config ( fixes #575 , closes #582 )
2018-10-20 13:05:20 +02:00
Lukas Schauer
5783a2dd45
fixed a bug that resulted in a deleted domains.txt when using incorrect parameters in combination with signcsr ( fixes #597 )
2018-10-20 12:27:23 +02:00
Lukas Schauer
fba49ba28e
implemented initial support for tls-alpn-01 verification
2018-07-26 04:44:29 +02:00
Lukas Schauer
10d4b98e7f
Only match Replace-Nonce header at beginning of line
2018-05-09 21:01:57 +02:00
Lukas Schauer
2a8af8fda7
made ocsp refresh interval configurable
2018-05-07 03:31:43 +02:00
Lukas Schauer
9165cfdebf
added dns-txt-foo to troubleshooting.md
2018-05-01 17:54:13 +02:00
Lukas Schauer
b5dddd7a2b
prepare for next version
2018-04-27 13:08:44 +02:00
Lukas Schauer
ce3d658377
release 0.6.2
2018-04-25 23:22:40 +02:00
Lukas Schauer
89de83c994
add explanation on HEADERS parameter to request_failure hook ( fixes #545 )
2018-04-25 22:48:16 +02:00
Lukas Schauer
52c2c19994
added workaround for use with advanced filesystem ACLs (as originally suggested in #467 )
2018-04-20 02:55:07 +02:00
Lukas Schauer
ba5928776f
fix behaviour for fetching missing additional account information with unknown keys
2018-04-13 22:09:52 +02:00
Lukas Schauer
dff7d4ea35
allow registration using cli-specified private key ( #534 )
2018-04-13 21:34:11 +02:00
Lukas Schauer
0262997451
also call clean_challenge hook for http-01 challenges ( fixes #536 )
2018-04-13 20:59:27 +02:00
Lukas Schauer
8ba56a8048
renamed ocsp hook to deploy_ocsp, exported altnames, added example hook
2018-04-08 22:44:28 +02:00
Lukas Schauer
a67816468a
also run request_failure and invalid_challenge when HOOK_CHAIN is defined ( fixes #450 )
2018-04-08 22:18:30 +02:00
Lukas Schauer
ea46aee44f
fixed cleanup for invalid challenges
2018-04-08 22:18:16 +02:00
Lukas Schauer
537877a0e2
allow for widely-used non-standard CSR label ( fixes #488 )
2018-03-26 00:00:50 +02:00
Lukas Schauer
981179a770
hail hydra! 🐙
2018-03-24 16:18:01 +01:00
Lukas Schauer
ff18d39aa8
strip validationRecord from challenge before grepping for "url" string... ( fixes #515 )
2018-03-18 20:12:04 +01:00
Lukas Schauer
9f1ff67870
removed dual use of challenge_identifiers variable ( fixes #511 )
2018-03-17 01:40:19 +01:00
Lukas Schauer
b116e6bc2b
close weird external file descriptors
2018-03-15 13:52:51 +01:00
Lukas Schauer
6083218501
removed some unused code
2018-03-15 13:52:15 +01:00
Lukas Schauer
2533931cf1
don't walk certificate chain for ACMEv2 (certificate contains chain by default)
2018-03-14 18:54:51 +01:00
Lukas Schauer
b93eac3893
fixed CA url in example config
2018-03-13 21:08:20 +01:00
Lukas Schauer
e374d21d45
prepare for next version
2018-03-13 20:59:20 +01:00
Lukas Schauer
70d261a729
release v0.6.1
2018-03-13 20:57:52 +01:00
Lukas Schauer
947dbb9e29
use new acme-v02 endpoint by default
2018-03-13 20:48:42 +01:00
Lukas Schauer
8a414e55bc
prepare for next version
2018-03-11 20:22:38 +01:00
Lukas Schauer
fd3fc8af62
release 0.6.0
2018-03-11 20:19:25 +01:00
Lukas Schauer
6e802ddc19
include content-type in post requests ( fixes #491 )
2018-03-09 12:25:37 +01:00
Lukas Schauer
0211d24577
require a valid alias to be set for certain wildcard certificates ( fixes #483 )
2018-03-02 18:53:00 +01:00
Lukas Schauer
68274646bb
curl: use custom user agent (temporarily using a bit of 1337)
2018-03-01 21:39:00 +01:00
Lukas Schauer
c0bcf91410
show error details on ocsp update failure
2018-02-22 22:32:39 +01:00
Lukas Schauer
a91074b707
fixed undefined-variable bug on early connection failure (while accessing ca directory)
2018-02-22 22:22:04 +01:00
Lukas Schauer
a6e6aa7445
fixed spurious return code from hook bricker...
2018-02-14 15:20:26 +01:00
Lukas Schauer
dcdb2940fb
removed random prefix from hook bricker
2018-02-14 14:58:11 +01:00
Lukas Schauer
0ade30cc74
hook-bricker now also warns users on per-certificate-config-hooks
2018-02-13 21:45:30 +01:00
Lukas Schauer
bc34f3aa86
merged random hook with human-readable-message
2018-02-13 21:34:02 +01:00
Lukas Schauer
5940c55e18
prepared future migration to new acmev2 endpoint
2018-02-07 03:14:29 +01:00
Lukas Schauer
2eedd69ee9
request_failure hook: added http response headers as new parameter
2018-02-06 23:33:28 +01:00
Lukas Schauer
be252c7db9
updated changelog
2018-02-06 23:22:53 +01:00
Lukas Schauer
9ebab3e026
added call to random hook to make it clear to hook authors that unknown hooks should just be ignored
2018-02-06 23:16:28 +01:00
Lukas Schauer
ad291207d0
fetch account information if missing
2018-02-06 23:08:40 +01:00
Lukas Schauer
a7b2af2b92
http_request: make http headers available on fd 4
2018-02-06 23:08:16 +01:00
Lukas Schauer
082ed17a0a
added acmev2 staging information to docs
2018-02-06 21:58:42 +01:00
Lukas Schauer
dec5ad5840
read url to terms of service from ca directory
2018-02-06 21:58:42 +01:00
Lukas Schauer
da67297288
only write csr file if renewal will be requested
2018-02-06 21:19:33 +01:00
Lukas Schauer
83bf2664b0
added a few simple example use cases to example hook script
2018-02-06 21:13:37 +01:00
Lukas Schauer
63854b752b
New hook: generate_csr (see example hook script for more information, implements #475 , replaces #377 )
2018-02-06 20:57:33 +01:00
Lukas Schauer
901f9f76e2
pre-bump version
2018-02-06 20:53:09 +01:00
Lukas Schauer
b5de2e26eb
sign_domain: Use existing CSR with matching timestamp
2018-02-06 20:41:26 +01:00
Lukas Schauer
73a116e879
Create required certificate and chaincache directories outside of sign_domain
2018-02-06 20:40:32 +01:00
Lukas Schauer
9c35fce61e
Pre-generate timestamp outside of sign_domain
2018-02-06 20:39:23 +01:00
Lukas Schauer
87194f6596
Remove additional whitespace from extract_altnames
2018-02-06 20:38:02 +01:00
Lukas Schauer
b53cb6643b
moved manpage to docs directory
2018-02-06 18:53:21 +01:00
Lukas Schauer
fb41783885
automatic discovery of remote acme api version
2018-02-05 19:20:28 +01:00