Lukas Schauer
e2eeaf7ec6
added funding.yml
2019-11-11 22:46:13 +01:00
Lukas Schauer
946e5712ba
fixed small logic bug
2019-10-09 02:05:54 +02:00
Lukas Schauer
018254974c
Merge tag 'v0.6.5'
2019-07-06 19:25:32 +02:00
Lukas Schauer
05eda91a2f
release 0.6.5 (fixed apiv1 compatibility...)
2019-06-26 12:33:35 +02:00
Lukas Schauer
f60f2f81e8
release 0.6.5 (fixed apiv1 compatibility...)
2019-06-26 12:29:39 +02:00
Lukas Schauer
4f358e22f4
release 0.6.4 (fixed account id handling, again)
2019-06-25 15:28:09 +02:00
Lukas Schauer
f9d0b1bd70
release 0.6.3
2019-06-25 12:50:45 +02:00
Lukas Schauer
be13dcd454
fixed fetching of account information ( fixes #652 , fixes #647 , fixes #650 , closes #648 )
2019-06-25 12:19:20 +02:00
Lukas Schauer
74a536c161
added documentation about possible future removal of api version 1
2019-03-04 23:23:40 +01:00
Lukas Schauer
444cea4669
Revert "cleanup: removed api version 1 support ( closes #510 )"
...
Since a few CAs out there actually seem to (only) support ACME v1 I
decided to revert the removal and keep ACME v1 around, at least until
it eventually becomes a bigger inconvenience to maintain.
This reverts commit aadf7d5e64
2019-03-04 23:11:07 +01:00
Lukas Schauer
ea93170959
BSD bugfixes for version command ( closes #619 )
2019-03-03 21:51:01 +01:00
Lukas Schauer
133e31de0b
tiny documentation fix: per-certificate-config can override PRIVATE_KEY_ROLLOVER ( closes #614 )
2019-03-03 20:38:47 +01:00
Lukas Schauer
aadf7d5e64
cleanup: removed api version 1 support ( closes #510 )
2019-03-03 20:32:10 +01:00
Lukas Schauer
e4a32acbe2
new hook: sync_cert ( closes #609 )
2019-03-03 20:22:41 +01:00
Lukas Schauer
1c77730373
call exit_hook with error message ( fixes #630 )
2019-03-03 20:08:18 +01:00
Lukas Schauer
e623fcc024
implement POST-as-GET ( closes #626 )
2019-03-03 20:00:13 +01:00
Lukas Schauer
585ed5404b
updated oid for tls-alpn verification token ( fixes #624 )
2019-01-18 13:25:57 +01:00
Lukas Schauer
92aa1ecd5a
document DOMAINS_D parameter in example config ( fixes #575 , closes #582 )
2018-10-20 13:05:20 +02:00
Lukas Schauer
5783a2dd45
fixed a bug that resulted in a deleted domains.txt when using incorrect parameters in combination with signcsr ( fixes #597 )
2018-10-20 12:27:23 +02:00
Lukas Schauer
fba49ba28e
implemented initial support for tls-alpn-01 verification
2018-07-26 04:44:29 +02:00
Lukas Schauer
10d4b98e7f
Only match Replace-Nonce header at beginning of line
2018-05-09 21:01:57 +02:00
Lukas Schauer
2a8af8fda7
made ocsp refresh interval configurable
2018-05-07 03:31:43 +02:00
Lukas Schauer
9165cfdebf
added dns-txt-foo to troubleshooting.md
2018-05-01 17:54:13 +02:00
Lukas Schauer
b5dddd7a2b
prepare for next version
2018-04-27 13:08:44 +02:00
Lukas Schauer
ce3d658377
release 0.6.2
2018-04-25 23:22:40 +02:00
Lukas Schauer
89de83c994
add explanation on HEADERS parameter to request_failure hook ( fixes #545 )
2018-04-25 22:48:16 +02:00
Lukas Schauer
52c2c19994
added workaround for use with advanced filesystem ACLs (as originally suggested in #467 )
2018-04-20 02:55:07 +02:00
Lukas Schauer
ba5928776f
fix behaviour for fetching missing additional account information with unknown keys
2018-04-13 22:09:52 +02:00
Lukas Schauer
dff7d4ea35
allow registration using cli-specified private key ( #534 )
2018-04-13 21:34:11 +02:00
Lukas Schauer
0262997451
also call clean_challenge hook for http-01 challenges ( fixes #536 )
2018-04-13 20:59:27 +02:00
Lukas Schauer
8ba56a8048
renamed ocsp hook to deploy_ocsp, exported altnames, added example hook
2018-04-08 22:44:28 +02:00
Lukas Schauer
a67816468a
also run request_failure and invalid_challenge when HOOK_CHAIN is defined ( fixes #450 )
2018-04-08 22:18:30 +02:00
Lukas Schauer
ea46aee44f
fixed cleanup for invalid challenges
2018-04-08 22:18:16 +02:00
Lukas Schauer
537877a0e2
allow for widely-used non-standard CSR label ( fixes #488 )
2018-03-26 00:00:50 +02:00
Lukas Schauer
981179a770
hail hydra! 🐙
2018-03-24 16:18:01 +01:00
Lukas Schauer
ff18d39aa8
strip validationRecord from challenge before grepping for "url" string... ( fixes #515 )
2018-03-18 20:12:04 +01:00
Lukas Schauer
9f1ff67870
removed dual use of challenge_identifiers variable ( fixes #511 )
2018-03-17 01:40:19 +01:00
Lukas Schauer
b116e6bc2b
close weird external file descriptors
2018-03-15 13:52:51 +01:00
Lukas Schauer
6083218501
removed some unused code
2018-03-15 13:52:15 +01:00
Lukas Schauer
2533931cf1
don't walk certificate chain for ACMEv2 (certificate contains chain by default)
2018-03-14 18:54:51 +01:00
Lukas Schauer
b93eac3893
fixed CA url in example config
2018-03-13 21:08:20 +01:00
Lukas Schauer
e374d21d45
prepare for next version
2018-03-13 20:59:20 +01:00
Lukas Schauer
70d261a729
release v0.6.1
2018-03-13 20:57:52 +01:00
Lukas Schauer
947dbb9e29
use new acme-v02 endpoint by default
2018-03-13 20:48:42 +01:00
Lukas Schauer
8a414e55bc
prepare for next version
2018-03-11 20:22:38 +01:00
Lukas Schauer
fd3fc8af62
release 0.6.0
2018-03-11 20:19:25 +01:00
Lukas Schauer
6e802ddc19
include content-type in post requests ( fixes #491 )
2018-03-09 12:25:37 +01:00
Lukas Schauer
0211d24577
require a valid alias to be set for certain wildcard certificates ( fixes #483 )
2018-03-02 18:53:00 +01:00
Lukas Schauer
68274646bb
curl: use custom user agent (temporarily using a bit of 1337)
2018-03-01 21:39:00 +01:00
Lukas Schauer
c0bcf91410
show error details on ocsp update failure
2018-02-22 22:32:39 +01:00
Lukas Schauer
a91074b707
fixed undefined-variable bug on early connection failure (while accessing ca directory)
2018-02-22 22:22:04 +01:00
Lukas Schauer
a6e6aa7445
fixed spurious return code from hook bricker...
2018-02-14 15:20:26 +01:00
Lukas Schauer
dcdb2940fb
removed random prefix from hook bricker
2018-02-14 14:58:11 +01:00
Lukas Schauer
0ade30cc74
hook-bricker now also warns users on per-certificate-config-hooks
2018-02-13 21:45:30 +01:00
Lukas Schauer
bc34f3aa86
merged random hook with human-readable-message
2018-02-13 21:34:02 +01:00
Lukas Schauer
5940c55e18
prepared future migration to new acmev2 endpoint
2018-02-07 03:14:29 +01:00
Lukas Schauer
2eedd69ee9
request_failure hook: added http response headers as new parameter
2018-02-06 23:33:28 +01:00
Lukas Schauer
be252c7db9
updated changelog
2018-02-06 23:22:53 +01:00
Lukas Schauer
9ebab3e026
added call to random hook to make it clear to hook authors that unknown hooks should just be ignored
2018-02-06 23:16:28 +01:00
Lukas Schauer
ad291207d0
fetch account information if missing
2018-02-06 23:08:40 +01:00
Lukas Schauer
a7b2af2b92
http_request: make http headers available on fd 4
2018-02-06 23:08:16 +01:00
Lukas Schauer
082ed17a0a
added acmev2 staging information to docs
2018-02-06 21:58:42 +01:00
Lukas Schauer
dec5ad5840
read url to terms of service from ca directory
2018-02-06 21:58:42 +01:00
Lukas Schauer
da67297288
only write csr file if renewal will be requested
2018-02-06 21:19:33 +01:00
Lukas Schauer
83bf2664b0
added a few simple example use cases to example hook script
2018-02-06 21:13:37 +01:00
Lukas Schauer
63854b752b
New hook: generate_csr (see example hook script for more information, implements #475 , replaces #377 )
2018-02-06 20:57:33 +01:00
Lukas Schauer
901f9f76e2
pre-bump version
2018-02-06 20:53:09 +01:00
Lukas Schauer
b5de2e26eb
sign_domain: Use existing CSR with matching timestamp
2018-02-06 20:41:26 +01:00
Lukas Schauer
73a116e879
Create required certificate and chaincache directories outside of sign_domain
2018-02-06 20:40:32 +01:00
Lukas Schauer
9c35fce61e
Pre-generate timestamp outside of sign_domain
2018-02-06 20:39:23 +01:00
Lukas Schauer
87194f6596
Remove additional whitespace from extract_altnames
2018-02-06 20:38:02 +01:00
Lukas Schauer
b53cb6643b
moved manpage to docs directory
2018-02-06 18:53:21 +01:00
Lukas Schauer
fb41783885
automatic discovery of remote acme api version
2018-02-05 19:20:28 +01:00
Lukas Schauer
6d02bfdb42
shrink "logo" a bit
2018-02-03 22:14:43 +01:00
Lukas Schauer
727443483d
added acmev2 information to readme
2018-02-03 22:12:32 +01:00
Lukas Schauer
7a0e71c6c2
follow location on http get-requests
2018-02-03 22:03:58 +01:00
Lukas Schauer
45f5c17260
fixed altname extraction of csr with wildcard domains, moved altname extraction from sign_csr to command_sign_csr
2018-02-02 23:47:29 +01:00
Lukas Schauer
61083cf522
disable globbing globally (only allow for cleanup routine)
2018-02-02 23:45:34 +01:00
Lukas Schauer
afba7c694c
moved deploy_challenge to earlier loop so it works with multiple challenge tokens on the same identifier (important for wildcard certificate), fixed array-name, removed hook-chain warning
2018-01-28 19:48:25 +01:00
Lukas Schauer
ec5dbcc816
updated changelog
2018-01-28 06:14:44 +01:00
Lukas Schauer
0f69481e2b
rewrote challenge validation to iterate over authorizations instead of altnames (fixes some acmev2 validation edgecases), also removed broken test-script (for now)
2018-01-28 06:13:37 +01:00
Lukas Schauer
6f3fed496d
rewrote donation section in readme
2018-01-28 06:13:01 +01:00
Lukas Schauer
5fd93ea874
be more verbose for acme v2 challenge handling
2018-01-27 22:51:39 +01:00
Lukas Schauer
656af8cadc
don't fail on nested json array in challenge info
2018-01-13 23:10:31 +01:00
Lukas Schauer
3e521e1c01
fixed domains.txt parsing (theoretically compatible with wildcard domains)
2018-01-13 20:54:55 +01:00
Lukas Schauer
35a9f31643
changelog template, year update
2018-01-13 20:10:32 +01:00
Lukas Schauer
4a811759dc
version 0.5.0
2018-01-13 20:08:12 +01:00
Lukas Schauer
2adc57791c
Add optional user and group configuration ( fixes #434 )
2017-12-18 00:35:26 +01:00
Lukas Schauer
f35aed6ae6
replace backticks with escaped dollarbracethingy ( fixes #438 )
2017-12-18 00:01:47 +01:00
Lukas Schauer
b6b56d0df7
export certificate alias to be used in hook scripts
2017-12-17 23:54:19 +01:00
Lukas Schauer
13c853d43b
also reset configvars after domains loop
2017-12-17 23:51:23 +01:00
Lukas Schauer
c62f3d91fc
implement certificate aliases as suggested by typingArtist ( fixes #396 )
2017-12-17 23:50:46 +01:00
Lukas Schauer
eb4aaefda1
also inform about still-valid ocsp stapling files ( fixes #457 )
2017-12-14 00:11:40 +01:00
Lukas Schauer
3d97799d6a
always revalidate challenges if --force is set ( fixes #370 )
2017-11-07 14:43:41 +01:00
Lukas Schauer
da3428a84a
use nullglob, disable warning on empty CONFIG_D directory
2017-09-21 18:10:01 +02:00
Lukas Schauer
b5e178ea75
allow for spaces when extracting commonName from csr ( fixes #423 )
2017-09-20 15:44:05 +02:00
Lukas Schauer
bc20ec79f3
also show freebsd version
2017-09-20 15:31:38 +02:00
Lukas Schauer
f838d93f40
stop verification loop after invalid challenge ( fixes #431 )
2017-09-20 15:17:30 +02:00
Lukas Schauer
58647cab65
added OPENSSL variable to example config ( #414 )
2017-07-18 15:46:25 +02:00
Lukas Schauer
c57ad87e7c
fixed error handling on non-2xx http status codes ( #413 )
2017-07-18 03:29:39 +02:00
Lukas Schauer