88267db7e2
Update wellknown.md
...
add Hiawatha to list
2017-12-14 00:33:11 +01:00
eb4aaefda1
also inform about still-valid ocsp stapling files ( fixes #457 )
2017-12-14 00:11:40 +01:00
3d97799d6a
always revalidate challenges if --force is set ( fixes #370 )
2017-11-07 14:43:41 +01:00
742c0ad176
fix ocsp.der symlink
2017-10-22 16:31:25 +02:00
7f410e9bff
fix account command
...
backup file path generation should split the filename on the last dot instead of the first
2017-10-17 16:39:46 +02:00
da3428a84a
use nullglob, disable warning on empty CONFIG_D directory
2017-09-21 18:10:01 +02:00
b5e178ea75
allow for spaces when extracting commonName from csr ( fixes #423 )
2017-09-20 15:44:05 +02:00
bc20ec79f3
also show freebsd version
2017-09-20 15:31:38 +02:00
ce9b42d8ad
fix issue #426 - version info on FreeBSD
2017-09-20 15:28:57 +02:00
f838d93f40
stop verification loop after invalid challenge ( fixes #431 )
2017-09-20 15:17:30 +02:00
0be0ab083f
replace ${CERTDIR}/${domain} with ${certdir} everywhere
...
• improves readability
• allows ${certdir} to be changed independent from ${domain} more easily
2017-07-18 15:46:25 +02:00
58647cab65
added OPENSSL variable to example config ( #414 )
2017-07-18 15:46:25 +02:00
c57ad87e7c
fixed error handling on non-2xx http status codes ( #413 )
2017-07-18 03:29:39 +02:00
2687054d25
cut path from url for ocsp host
2017-07-13 00:53:32 +02:00
2b76d038d3
ocsp fetching should now also work with older openssl versions
2017-07-12 16:00:25 +02:00
e339b28159
add host header to ocsp request
2017-07-12 15:33:56 +02:00
4f3bd3e956
fixed exit_hook
2017-07-11 10:06:42 +02:00
f86290ea52
revocation: don't fail if certificate already has been revoked ( fixes #236 )
2017-07-11 01:30:30 +02:00
f1bc2b14ba
cleanup old ocsp response files
2017-07-11 00:50:05 +02:00
367ef574f1
export altnames so it can be used in hook scripts ( fixes #360 )
2017-07-11 00:47:37 +02:00
4e7fb80bcd
support otherName SAN entries for domain verification ( fixes #356 )
2017-07-11 00:35:59 +02:00
ee75c5dca7
Initial support for fetching OCSP status to be used for OCSP stapling (as suggested in #385 )
2017-07-11 00:28:36 +02:00
82ca3ffcd3
added giant donation section to readme (please send me all your money)
2017-07-10 22:48:50 +02:00
bb99742aa7
load config for version information but disable verification
2017-07-10 21:36:32 +02:00
60583d3ef9
added hook to run before cron command ( fixes #371 )
2017-07-10 21:36:10 +02:00
cbb661ca17
specify openssl config location when converting CSR to DER ( fixes #397 )
2017-07-10 20:32:05 +02:00
67cf20765c
updated changelog
2017-07-10 20:28:38 +02:00
89377a1004
git: ignore chains directory
2017-07-10 20:28:20 +02:00
dc600e39b8
cleanup: also move .pem-revoked files ( fixes #237 )
2017-07-10 20:27:42 +02:00
16e91b415b
added auto-cleanup feature to changelog
2017-07-10 20:23:27 +02:00
e6d6882c78
added option to automatically run cleanup routine (implements #389 )
2017-07-10 20:21:30 +02:00
14a5f63077
Redirect additional errors to STDERR
2017-07-10 19:59:52 +02:00
5787cd6a47
Remove double output redirection, _exiterr already does >&2
2017-07-10 19:59:52 +02:00
875c1f74e5
Add some formatting to improve human scannability (while reading)
2017-07-10 19:53:39 +02:00
db18820991
made openssl binary configurable ( closes #393 , closes #379 )
2017-07-10 19:13:52 +02:00
2f775d0e2a
remove duplicate -a short option from --account ( fixes #410 )
2017-07-10 18:21:06 +02:00
f2b589430c
added version command
2017-07-10 17:21:22 +02:00
533aa80129
replaced source url with dehydrated.de
2017-07-10 17:15:29 +02:00
d1f215b652
fixed typos as suggested by @jwilk ( closes #369 )
2017-07-10 16:55:18 +02:00
bd57777c62
Ability to provide extra curl options
...
In some situations it might be necessary to pass extra commands to
the curl binary, e.g. proxy authentication credentials.
Adds the CURL_OPTS config option.
2017-07-10 16:44:39 +02:00
ba31a505d2
Add MSYS support
2017-07-10 16:40:36 +02:00
0dcf94dd3d
dont strip for docker containers that cwd is /
2017-07-10 16:36:14 +02:00
9ea75e7cfb
Support older bash releases
...
Bash 3.0 and others seem to have serious issues running dehydrated.
https://github.com/lukas2511/dehydrated/issues/284 tracks the
problem but got closed as it seems too hard to support "stone age"
distributions.
Turns out it is actually only a three line change. ;-)
2017-07-10 15:29:30 +02:00
33c77e6daa
Add some comments about IPv6.
2017-07-10 15:26:50 +02:00
d685463673
implemented issuer-chain cache
2017-07-10 15:06:50 +02:00
98ad01a110
allow using parts of dehydrated without running the main script (intended for testing parts of the script)
2017-07-10 14:51:55 +02:00
8709d21ef2
updated usage instructions in readme (added --account)
2017-07-10 14:08:29 +02:00
6ebaae416c
removed build status from readme (test system seems to be broken...)
2017-07-10 14:07:28 +02:00
7fc4040f47
updated changelog with account-update feature
2017-07-10 14:05:45 +02:00
ec1599e3b6
Added new feature Update registration contact #239
2017-07-10 14:02:21 +02:00
sirrkitt