Lukas Schauer
c62f3d91fc
implement certificate aliases as suggested by typingArtist ( fixes #396 )
2017-12-17 23:50:46 +01:00
typingArtist
eb1c4ac41d
make certdir a parameter to sign_domain
2017-12-17 22:55:12 +01:00
Daniel Molkentin
3ec54e7e0f
Add man page
2017-12-14 00:35:54 +01:00
sirrkitt
88267db7e2
Update wellknown.md
...
add Hiawatha to list
2017-12-14 00:33:11 +01:00
Lukas Schauer
eb4aaefda1
also inform about still-valid ocsp stapling files ( fixes #457 )
2017-12-14 00:11:40 +01:00
Lukas Schauer
3d97799d6a
always revalidate challenges if --force is set ( fixes #370 )
2017-11-07 14:43:41 +01:00
Exagone313
742c0ad176
fix ocsp.der symlink
2017-10-22 16:31:25 +02:00
Andreas Loibl
7f410e9bff
fix account command
...
backup file path generation should split the filename on the last dot instead of the first
2017-10-17 16:39:46 +02:00
Lukas Schauer
da3428a84a
use nullglob, disable warning on empty CONFIG_D directory
2017-09-21 18:10:01 +02:00
Lukas Schauer
b5e178ea75
allow for spaces when extracting commonName from csr ( fixes #423 )
2017-09-20 15:44:05 +02:00
Lukas Schauer
bc20ec79f3
also show freebsd version
2017-09-20 15:31:38 +02:00
Marcin Gryszkalis
ce9b42d8ad
fix issue #426 - version info on FreeBSD
2017-09-20 15:28:57 +02:00
Lukas Schauer
f838d93f40
stop verification loop after invalid challenge ( fixes #431 )
2017-09-20 15:17:30 +02:00
typingArtist
0be0ab083f
replace ${CERTDIR}/${domain} with ${certdir} everywhere
...
• improves readability
• allows ${certdir} to be changed independent from ${domain} more easily
2017-07-18 15:46:25 +02:00
Lukas Schauer
58647cab65
added OPENSSL variable to example config ( #414 )
2017-07-18 15:46:25 +02:00
Lukas Schauer
c57ad87e7c
fixed error handling on non-2xx http status codes ( #413 )
2017-07-18 03:29:39 +02:00
Lukas Schauer
2687054d25
cut path from url for ocsp host
2017-07-13 00:53:32 +02:00
Lukas Schauer
2b76d038d3
ocsp fetching should now also work with older openssl versions
2017-07-12 16:00:25 +02:00
Lukas Schauer
e339b28159
add host header to ocsp request
2017-07-12 15:33:56 +02:00
Lukas Schauer
4f3bd3e956
fixed exit_hook
2017-07-11 10:06:42 +02:00
Lukas Schauer
f86290ea52
revocation: don't fail if certificate already has been revoked ( fixes #236 )
2017-07-11 01:30:30 +02:00
Lukas Schauer
f1bc2b14ba
cleanup old ocsp response files
2017-07-11 00:50:05 +02:00
Lukas Schauer
367ef574f1
export altnames so it can be used in hook scripts ( fixes #360 )
2017-07-11 00:47:37 +02:00
Lukas Schauer
4e7fb80bcd
support otherName SAN entries for domain verification ( fixes #356 )
2017-07-11 00:35:59 +02:00
Lukas Schauer
ee75c5dca7
Initial support for fetching OCSP status to be used for OCSP stapling (as suggested in #385 )
2017-07-11 00:28:36 +02:00
Lukas Schauer
82ca3ffcd3
added giant donation section to readme (please send me all your money)
2017-07-10 22:48:50 +02:00
Lukas Schauer
bb99742aa7
load config for version information but disable verification
2017-07-10 21:36:32 +02:00
Lukas Schauer
60583d3ef9
added hook to run before cron command ( fixes #371 )
2017-07-10 21:36:10 +02:00
Lukas Schauer
cbb661ca17
specify openssl config location when converting CSR to DER ( fixes #397 )
2017-07-10 20:32:05 +02:00
Lukas Schauer
67cf20765c
updated changelog
2017-07-10 20:28:38 +02:00
Lukas Schauer
89377a1004
git: ignore chains directory
2017-07-10 20:28:20 +02:00
Lukas Schauer
dc600e39b8
cleanup: also move .pem-revoked files ( fixes #237 )
2017-07-10 20:27:42 +02:00
Lukas Schauer
16e91b415b
added auto-cleanup feature to changelog
2017-07-10 20:23:27 +02:00
Lukas Schauer
e6d6882c78
added option to automatically run cleanup routine (implements #389 )
2017-07-10 20:21:30 +02:00
Herman van Rink
14a5f63077
Redirect additional errors to STDERR
2017-07-10 19:59:52 +02:00
Herman van Rink
5787cd6a47
Remove double output redirection, _exiterr already does >&2
2017-07-10 19:59:52 +02:00
ProBackup-nl
875c1f74e5
Add some formatting to improve human scannability (while reading)
2017-07-10 19:53:39 +02:00
Lukas Schauer
db18820991
made openssl binary configurable ( closes #393 , closes #379 )
2017-07-10 19:13:52 +02:00
Lukas Schauer
2f775d0e2a
remove duplicate -a short option from --account ( fixes #410 )
2017-07-10 18:21:06 +02:00
Lukas Schauer
f2b589430c
added version command
2017-07-10 17:21:22 +02:00
Lukas Schauer
533aa80129
replaced source url with dehydrated.de
2017-07-10 17:15:29 +02:00
Lukas Schauer
d1f215b652
fixed typos as suggested by @jwilk ( closes #369 )
2017-07-10 16:55:18 +02:00
Andreas Thienemann
bd57777c62
Ability to provide extra curl options
...
In some situations it might be necessary to pass extra commands to
the curl binary, e.g. proxy authentication credentials.
Adds the CURL_OPTS config option.
2017-07-10 16:44:39 +02:00
Haddon CD
ba31a505d2
Add MSYS support
2017-07-10 16:40:36 +02:00
Chase Bolt
0dcf94dd3d
dont strip for docker containers that cwd is /
2017-07-10 16:36:14 +02:00
Andreas Thienemann
9ea75e7cfb
Support older bash releases
...
Bash 3.0 and others seem to have serious issues running dehydrated.
https://github.com/lukas2511/dehydrated/issues/284 tracks the
problem but got closed as it seems too hard to support "stone age"
distributions.
Turns out it is actually only a three line change. ;-)
2017-07-10 15:29:30 +02:00
Ben Elliston
33c77e6daa
Add some comments about IPv6.
2017-07-10 15:26:50 +02:00
Lukas Schauer
d685463673
implemented issuer-chain cache
2017-07-10 15:06:50 +02:00
Lukas Schauer
98ad01a110
allow using parts of dehydrated without running the main script (intended for testing parts of the script)
2017-07-10 14:51:55 +02:00
Lukas Schauer
8709d21ef2
updated usage instructions in readme (added --account)
2017-07-10 14:08:29 +02:00
