 Lukas Schauer
|
9165cfdebf
|
added dns-txt-foo to troubleshooting.md
|
2018-05-01 17:54:13 +02:00 |
|
|
Lukas Schauer
|
b5dddd7a2b
|
prepare for next version
|
2018-04-27 13:08:44 +02:00 |
|
|
Lukas Schauer
|
ce3d658377
|
release 0.6.2
|
2018-04-25 23:22:40 +02:00 |
|
|
Lukas Schauer
|
89de83c994
|
add explanation on HEADERS parameter to request_failure hook (fixes #545)
|
2018-04-25 22:48:16 +02:00 |
|
|
Lukas Schauer
|
52c2c19994
|
added workaround for use with advanced filesystem ACLs (as originally suggested in #467)
|
2018-04-20 02:55:07 +02:00 |
|
|
Lukas Schauer
|
ba5928776f
|
fix behaviour for fetching missing additional account information with unknown keys
|
2018-04-13 22:09:52 +02:00 |
|
|
Lukas Schauer
|
dff7d4ea35
|
allow registration using cli-specified private key (#534)
|
2018-04-13 21:34:11 +02:00 |
|
|
Lukas Schauer
|
0262997451
|
also call clean_challenge hook for http-01 challenges (fixes #536)
|
2018-04-13 20:59:27 +02:00 |
|
|
Lukas Schauer
|
8ba56a8048
|
renamed ocsp hook to deploy_ocsp, exported altnames, added example hook
|
2018-04-08 22:44:28 +02:00 |
|
|
Lukas Schauer
|
a67816468a
|
also run request_failure and invalid_challenge when HOOK_CHAIN is defined (fixes #450)
|
2018-04-08 22:18:30 +02:00 |
|
|
Lukas Schauer
|
ea46aee44f
|
fixed cleanup for invalid challenges
|
2018-04-08 22:18:16 +02:00 |
|
|
Lukas Schauer
|
537877a0e2
|
allow for widely-used non-standard CSR label (fixes #488)
|
2018-03-26 00:00:50 +02:00 |
|
|
Lukas Schauer
|
981179a770
|
hail hydra! 🐙
|
2018-03-24 16:18:01 +01:00 |
|
|
Lukas Schauer
|
ff18d39aa8
|
strip validationRecord from challenge before grepping for "url" string... (fixes #515)
|
2018-03-18 20:12:04 +01:00 |
|
|
Lukas Schauer
|
9f1ff67870
|
removed dual use of challenge_identifiers variable (fixes #511)
|
2018-03-17 01:40:19 +01:00 |
|
|
Lukas Schauer
|
b116e6bc2b
|
close weird external file descriptors
|
2018-03-15 13:52:51 +01:00 |
|
|
Lukas Schauer
|
6083218501
|
removed some unused code
|
2018-03-15 13:52:15 +01:00 |
|
|
Lukas Schauer
|
2533931cf1
|
don't walk certificate chain for ACMEv2 (certificate contains chain by default)
|
2018-03-14 18:54:51 +01:00 |
|
|
Lukas Schauer
|
b93eac3893
|
fixed CA url in example config
|
2018-03-13 21:08:20 +01:00 |
|
|
Lukas Schauer
|
e374d21d45
|
prepare for next version
|
2018-03-13 20:59:20 +01:00 |
|
|
Lukas Schauer
|
70d261a729
|
release v0.6.1
|
2018-03-13 20:57:52 +01:00 |
|
|
Lukas Schauer
|
947dbb9e29
|
use new acme-v02 endpoint by default
|
2018-03-13 20:48:42 +01:00 |
|
|
Lukas Schauer
|
8a414e55bc
|
prepare for next version
|
2018-03-11 20:22:38 +01:00 |
|
|
Lukas Schauer
|
fd3fc8af62
|
release 0.6.0
|
2018-03-11 20:19:25 +01:00 |
|
|
Lukas Schauer
|
6e802ddc19
|
include content-type in post requests (fixes #491)
|
2018-03-09 12:25:37 +01:00 |
|
|
Lukas Schauer
|
0211d24577
|
require a valid alias to be set for certain wildcard certificates (fixes #483)
|
2018-03-02 18:53:00 +01:00 |
|
|
Lukas Schauer
|
68274646bb
|
curl: use custom user agent (temporarily using a bit of 1337)
|
2018-03-01 21:39:00 +01:00 |
|
|
Lukas Schauer
|
c0bcf91410
|
show error details on ocsp update failure
|
2018-02-22 22:32:39 +01:00 |
|
|
Lukas Schauer
|
a91074b707
|
fixed undefined-variable bug on early connection failure (while accessing ca directory)
|
2018-02-22 22:22:04 +01:00 |
|
|
Lukas Schauer
|
a6e6aa7445
|
fixed spurious return code from hook bricker...
|
2018-02-14 15:20:26 +01:00 |
|
|
Lukas Schauer
|
dcdb2940fb
|
removed random prefix from hook bricker
|
2018-02-14 14:58:11 +01:00 |
|
|
Lukas Schauer
|
0ade30cc74
|
hook-bricker now also warns users on per-certificate-config-hooks
|
2018-02-13 21:45:30 +01:00 |
|
|
Lukas Schauer
|
bc34f3aa86
|
merged random hook with human-readable-message
|
2018-02-13 21:34:02 +01:00 |
|
|
Lukas Schauer
|
5940c55e18
|
prepared future migration to new acmev2 endpoint
|
2018-02-07 03:14:29 +01:00 |
|
|
Lukas Schauer
|
2eedd69ee9
|
request_failure hook: added http response headers as new parameter
|
2018-02-06 23:33:28 +01:00 |
|
|
Lukas Schauer
|
be252c7db9
|
updated changelog
|
2018-02-06 23:22:53 +01:00 |
|
|
Lukas Schauer
|
9ebab3e026
|
added call to random hook to make it clear to hook authors that unknown hooks should just be ignored
|
2018-02-06 23:16:28 +01:00 |
|
|
Lukas Schauer
|
ad291207d0
|
fetch account information if missing
|
2018-02-06 23:08:40 +01:00 |
|
|
Lukas Schauer
|
a7b2af2b92
|
http_request: make http headers available on fd 4
|
2018-02-06 23:08:16 +01:00 |
|
|
Lukas Schauer
|
082ed17a0a
|
added acmev2 staging information to docs
|
2018-02-06 21:58:42 +01:00 |
|
|
Lukas Schauer
|
dec5ad5840
|
read url to terms of service from ca directory
|
2018-02-06 21:58:42 +01:00 |
|
|
Lukas Schauer
|
da67297288
|
only write csr file if renewal will be requested
|
2018-02-06 21:19:33 +01:00 |
|
|
Lukas Schauer
|
83bf2664b0
|
added a few simple example use cases to example hook script
|
2018-02-06 21:13:37 +01:00 |
|
|
Lukas Schauer
|
63854b752b
|
New hook: generate_csr (see example hook script for more information, implements #475, replaces #377)
|
2018-02-06 20:57:33 +01:00 |
|
|
Lukas Schauer
|
901f9f76e2
|
pre-bump version
|
2018-02-06 20:53:09 +01:00 |
|
|
Lukas Schauer
|
b5de2e26eb
|
sign_domain: Use existing CSR with matching timestamp
|
2018-02-06 20:41:26 +01:00 |
|
|
Lukas Schauer
|
73a116e879
|
Create required certificate and chaincache directories outside of sign_domain
|
2018-02-06 20:40:32 +01:00 |
|
|
Lukas Schauer
|
9c35fce61e
|
Pre-generate timestamp outside of sign_domain
|
2018-02-06 20:39:23 +01:00 |
|
|
Lukas Schauer
|
87194f6596
|
Remove additional whitespace from extract_altnames
|
2018-02-06 20:38:02 +01:00 |
|
|
Lukas Schauer
|
b53cb6643b
|
moved manpage to docs directory
|
2018-02-06 18:53:21 +01:00 |
|
|
Lukas Schauer
|
fb41783885
|
automatic discovery of remote acme api version
|
2018-02-05 19:20:28 +01:00 |
|
|
Lukas Schauer
|
6d02bfdb42
|
shrink "logo" a bit
|
2018-02-03 22:14:43 +01:00 |
|
|
Lukas Schauer
|
727443483d
|
added acmev2 information to readme
|
2018-02-03 22:12:32 +01:00 |
|
|
Lukas Schauer
|
7a0e71c6c2
|
follow location on http get-requests
|
2018-02-03 22:03:58 +01:00 |
|
|
Lukas Schauer
|
45f5c17260
|
fixed altname extraction of csr with wildcard domains, moved altname extraction from sign_csr to command_sign_csr
|
2018-02-02 23:47:29 +01:00 |
|
|
Lukas Schauer
|
61083cf522
|
disable globbing globally (only allow for cleanup routine)
|
2018-02-02 23:45:34 +01:00 |
|
|
Lukas Schauer
|
afba7c694c
|
moved deploy_challenge to earlier loop so it works with multiple challenge tokens on the same identifier (important for wildcard certificate), fixed array-name, removed hook-chain warning
|
2018-01-28 19:48:25 +01:00 |
|
|
Lukas Schauer
|
ec5dbcc816
|
updated changelog
|
2018-01-28 06:14:44 +01:00 |
|
|
Lukas Schauer
|
0f69481e2b
|
rewrote challenge validation to iterate over authorizations instead of altnames (fixes some acmev2 validation edgecases), also removed broken test-script (for now)
|
2018-01-28 06:13:37 +01:00 |
|
|
Lukas Schauer
|
6f3fed496d
|
rewrote donation section in readme
|
2018-01-28 06:13:01 +01:00 |
|
|
Lukas Schauer
|
5fd93ea874
|
be more verbose for acme v2 challenge handling
|
2018-01-27 22:51:39 +01:00 |
|
|
Lukas Schauer
|
656af8cadc
|
don't fail on nested json array in challenge info
|
2018-01-13 23:10:31 +01:00 |
|
|
Lukas Schauer
|
3e521e1c01
|
fixed domains.txt parsing (theoretically compatible with wildcard domains)
|
2018-01-13 20:54:55 +01:00 |
|
|
Lukas Schauer
|
35a9f31643
|
changelog template, year update
|
2018-01-13 20:10:32 +01:00 |
|
|
Lukas Schauer
|
4a811759dc
|
version 0.5.0
|
2018-01-13 20:08:12 +01:00 |
|
|
Lukas Schauer
|
2adc57791c
|
Add optional user and group configuration (fixes #434)
|
2017-12-18 00:35:26 +01:00 |
|
|
Lukas Schauer
|
f35aed6ae6
|
replace backticks with escaped dollarbracethingy (fixes #438)
|
2017-12-18 00:01:47 +01:00 |
|
|
Lukas Schauer
|
b6b56d0df7
|
export certificate alias to be used in hook scripts
|
2017-12-17 23:54:19 +01:00 |
|
|
Lukas Schauer
|
13c853d43b
|
also reset configvars after domains loop
|
2017-12-17 23:51:23 +01:00 |
|
|
Lukas Schauer
|
c62f3d91fc
|
implement certificate aliases as suggested by typingArtist (fixes #396)
|
2017-12-17 23:50:46 +01:00 |
|
|
Lukas Schauer
|
eb4aaefda1
|
also inform about still-valid ocsp stapling files (fixes #457)
|
2017-12-14 00:11:40 +01:00 |
|
|
Lukas Schauer
|
3d97799d6a
|
always revalidate challenges if --force is set (fixes #370)
|
2017-11-07 14:43:41 +01:00 |
|
|
Lukas Schauer
|
da3428a84a
|
use nullglob, disable warning on empty CONFIG_D directory
|
2017-09-21 18:10:01 +02:00 |
|
|
Lukas Schauer
|
b5e178ea75
|
allow for spaces when extracting commonName from csr (fixes #423)
|
2017-09-20 15:44:05 +02:00 |
|
|
Lukas Schauer
|
bc20ec79f3
|
also show freebsd version
|
2017-09-20 15:31:38 +02:00 |
|
|
Lukas Schauer
|
f838d93f40
|
stop verification loop after invalid challenge (fixes #431)
|
2017-09-20 15:17:30 +02:00 |
|
|
Lukas Schauer
|
58647cab65
|
added OPENSSL variable to example config (#414)
|
2017-07-18 15:46:25 +02:00 |
|
|
Lukas Schauer
|
c57ad87e7c
|
fixed error handling on non-2xx http status codes (#413)
|
2017-07-18 03:29:39 +02:00 |
|
|
Lukas Schauer
|
2687054d25
|
cut path from url for ocsp host
|
2017-07-13 00:53:32 +02:00 |
|
|
Lukas Schauer
|
2b76d038d3
|
ocsp fetching should now also work with older openssl versions
|
2017-07-12 16:00:25 +02:00 |
|
|
Lukas Schauer
|
e339b28159
|
add host header to ocsp request
|
2017-07-12 15:33:56 +02:00 |
|
|
Lukas Schauer
|
4f3bd3e956
|
fixed exit_hook
|
2017-07-11 10:06:42 +02:00 |
|
|
Lukas Schauer
|
f86290ea52
|
revocation: don't fail if certificate already has been revoked (fixes #236)
|
2017-07-11 01:30:30 +02:00 |
|
|
Lukas Schauer
|
f1bc2b14ba
|
cleanup old ocsp response files
|
2017-07-11 00:50:05 +02:00 |
|
|
Lukas Schauer
|
367ef574f1
|
export altnames so it can be used in hook scripts (fixes #360)
|
2017-07-11 00:47:37 +02:00 |
|
|
Lukas Schauer
|
4e7fb80bcd
|
support otherName SAN entries for domain verification (fixes #356)
|
2017-07-11 00:35:59 +02:00 |
|
|
Lukas Schauer
|
ee75c5dca7
|
Initial support for fetching OCSP status to be used for OCSP stapling (as suggested in #385)
|
2017-07-11 00:28:36 +02:00 |
|
|
Lukas Schauer
|
82ca3ffcd3
|
added giant donation section to readme (please send me all your money)
|
2017-07-10 22:48:50 +02:00 |
|
|
Lukas Schauer
|
bb99742aa7
|
load config for version information but disable verification
|
2017-07-10 21:36:32 +02:00 |
|
|
Lukas Schauer
|
60583d3ef9
|
added hook to run before cron command (fixes #371)
|
2017-07-10 21:36:10 +02:00 |
|
|
Lukas Schauer
|
cbb661ca17
|
specify openssl config location when converting CSR to DER (fixes #397)
|
2017-07-10 20:32:05 +02:00 |
|
|
Lukas Schauer
|
67cf20765c
|
updated changelog
|
2017-07-10 20:28:38 +02:00 |
|
|
Lukas Schauer
|
89377a1004
|
git: ignore chains directory
|
2017-07-10 20:28:20 +02:00 |
|
|
Lukas Schauer
|
dc600e39b8
|
cleanup: also move .pem-revoked files (fixes #237)
|
2017-07-10 20:27:42 +02:00 |
|
|
Lukas Schauer
|
16e91b415b
|
added auto-cleanup feature to changelog
|
2017-07-10 20:23:27 +02:00 |
|
|
Lukas Schauer
|
e6d6882c78
|
added option to automatically run cleanup routine (implements #389)
|
2017-07-10 20:21:30 +02:00 |
|
|
Lukas Schauer
|
db18820991
|
made openssl binary configurable (closes #393, closes #379)
|
2017-07-10 19:13:52 +02:00 |
|
|
Lukas Schauer
|
2f775d0e2a
|
remove duplicate -a short option from --account (fixes #410)
|
2017-07-10 18:21:06 +02:00 |
|
|
Lukas Schauer
|
f2b589430c
|
added version command
|
2017-07-10 17:21:22 +02:00 |
|
|
Lukas Schauer
|
533aa80129
|
replaced source url with dehydrated.de
|
2017-07-10 17:15:29 +02:00 |
|