Lukas Schauer
eb4aaefda1
also inform about still-valid ocsp stapling files ( fixes #457 )
2017-12-14 00:11:40 +01:00
Lukas Schauer
3d97799d6a
always revalidate challenges if --force is set ( fixes #370 )
2017-11-07 14:43:41 +01:00
Lukas Schauer
da3428a84a
use nullglob, disable warning on empty CONFIG_D directory
2017-09-21 18:10:01 +02:00
Lukas Schauer
b5e178ea75
allow for spaces when extracting commonName from csr ( fixes #423 )
2017-09-20 15:44:05 +02:00
Lukas Schauer
bc20ec79f3
also show freebsd version
2017-09-20 15:31:38 +02:00
Lukas Schauer
f838d93f40
stop verification loop after invalid challenge ( fixes #431 )
2017-09-20 15:17:30 +02:00
Lukas Schauer
58647cab65
added OPENSSL variable to example config ( #414 )
2017-07-18 15:46:25 +02:00
Lukas Schauer
c57ad87e7c
fixed error handling on non-2xx http status codes ( #413 )
2017-07-18 03:29:39 +02:00
Lukas Schauer
2687054d25
cut path from url for ocsp host
2017-07-13 00:53:32 +02:00
Lukas Schauer
2b76d038d3
ocsp fetching should now also work with older openssl versions
2017-07-12 16:00:25 +02:00
Lukas Schauer
e339b28159
add host header to ocsp request
2017-07-12 15:33:56 +02:00
Lukas Schauer
4f3bd3e956
fixed exit_hook
2017-07-11 10:06:42 +02:00
Lukas Schauer
f86290ea52
revocation: don't fail if certificate already has been revoked ( fixes #236 )
2017-07-11 01:30:30 +02:00
Lukas Schauer
f1bc2b14ba
cleanup old ocsp response files
2017-07-11 00:50:05 +02:00
Lukas Schauer
367ef574f1
export altnames so it can be used in hook scripts ( fixes #360 )
2017-07-11 00:47:37 +02:00
Lukas Schauer
4e7fb80bcd
support otherName SAN entries for domain verification ( fixes #356 )
2017-07-11 00:35:59 +02:00
Lukas Schauer
ee75c5dca7
Initial support for fetching OCSP status to be used for OCSP stapling (as suggested in #385 )
2017-07-11 00:28:36 +02:00
Lukas Schauer
82ca3ffcd3
added giant donation section to readme (please send me all your money)
2017-07-10 22:48:50 +02:00
Lukas Schauer
bb99742aa7
load config for version information but disable verification
2017-07-10 21:36:32 +02:00
Lukas Schauer
60583d3ef9
added hook to run before cron command ( fixes #371 )
2017-07-10 21:36:10 +02:00
Lukas Schauer
cbb661ca17
specify openssl config location when converting CSR to DER ( fixes #397 )
2017-07-10 20:32:05 +02:00
Lukas Schauer
67cf20765c
updated changelog
2017-07-10 20:28:38 +02:00
Lukas Schauer
89377a1004
git: ignore chains directory
2017-07-10 20:28:20 +02:00
Lukas Schauer
dc600e39b8
cleanup: also move .pem-revoked files ( fixes #237 )
2017-07-10 20:27:42 +02:00
Lukas Schauer
16e91b415b
added auto-cleanup feature to changelog
2017-07-10 20:23:27 +02:00
Lukas Schauer
e6d6882c78
added option to automatically run cleanup routine (implements #389 )
2017-07-10 20:21:30 +02:00
Lukas Schauer
db18820991
made openssl binary configurable ( closes #393 , closes #379 )
2017-07-10 19:13:52 +02:00
Lukas Schauer
2f775d0e2a
remove duplicate -a short option from --account ( fixes #410 )
2017-07-10 18:21:06 +02:00
Lukas Schauer
f2b589430c
added version command
2017-07-10 17:21:22 +02:00
Lukas Schauer
533aa80129
replaced source url with dehydrated.de
2017-07-10 17:15:29 +02:00
Lukas Schauer
d1f215b652
fixed typos as suggested by @jwilk ( closes #369 )
2017-07-10 16:55:18 +02:00
Lukas Schauer
d685463673
implemented issuer-chain cache
2017-07-10 15:06:50 +02:00
Lukas Schauer
98ad01a110
allow using parts of dehydrated without running the main script (intended for testing parts of the script)
2017-07-10 14:51:55 +02:00
Lukas Schauer
8709d21ef2
updated usage instructions in readme (added --account)
2017-07-10 14:08:29 +02:00
Lukas Schauer
6ebaae416c
removed build status from readme (test system seems to be broken...)
2017-07-10 14:07:28 +02:00
Lukas Schauer
7fc4040f47
updated changelog with account-update feature
2017-07-10 14:05:45 +02:00
Lukas Schauer
116386486b
release 0.4.0
2017-02-05 15:33:17 +01:00
Lukas Schauer
aed4272e97
improved register command ( closes #350 )
2017-02-05 15:32:29 +01:00
Lukas Schauer
ad21b41e27
also test under osx
2017-02-04 13:54:22 +01:00
Lukas Schauer
3d8d320c9f
trying to fix compatibility with mawk
2017-02-04 13:32:56 +01:00
Lukas Schauer
449490a981
Merge branch 'simondeziel-fix-example-hook'
2017-01-31 02:58:29 +01:00
Lukas Schauer
e5452922e9
whitelist handlers for example hook ( fixes #348 )
2017-01-30 03:53:59 +01:00
Lukas Schauer
ee65261ea8
exclude root certificate from certificate chain
2017-01-30 03:45:21 +01:00
Lukas Schauer
03f0dc18b9
use awk instead of grep for reading trailing line after match ( fixes #255 )
2017-01-30 00:12:01 +01:00
Lukas Schauer
197ca8e82c
Revert "curl: use custom user agent"
...
This reverts commit a5fde931f8
2017-01-29 22:56:42 +01:00
Lukas Schauer
a5fde931f8
curl: use custom user agent
2017-01-29 22:42:02 +01:00
Lukas Schauer
6a32f20e00
ask user to read and accept license, added register-command, fullchain.pem is now actually the full chain
2017-01-29 22:06:53 +01:00
Lukas Schauer
b2376ed437
updated changelog
2017-01-29 16:06:24 +01:00
Lukas Schauer
57197306d7
export some config variables for use within hook scripts
2017-01-29 16:03:59 +01:00
Lukas Schauer
298a7e9aaf
added exit_hook hook
2017-01-29 15:48:03 +01:00
Lukas Schauer
0f299623be
updated changelog
2017-01-29 14:33:41 +01:00
Lukas Schauer
cfc00c42a2
check for diff using command
2017-01-29 14:04:43 +01:00
Lukas Schauer
5d92c3b352
use awk instead of tr for changing case
2017-01-29 14:00:45 +01:00
Lukas Schauer
e2e2c362d2
check for mktemp using command (busybox compatibility)
2017-01-29 13:58:42 +01:00
Lukas Schauer
b36d638a91
missing filename in config path
2017-01-06 00:40:03 +01:00
Lukas Schauer
84274f7436
moved and rewritten config section of readme
2017-01-06 00:38:13 +01:00
Lukas Schauer
de36a63fe6
removed note about project renaming
2017-01-06 00:31:03 +01:00
Lukas Schauer
3c1d2673d1
trying to fix #320 again
2016-12-22 22:56:50 +01:00
Lukas Schauer
69eea9527f
removed some spaces
2016-12-22 10:00:05 +01:00
Lukas Schauer
7f30826a6d
removed temporary wrapper script
2016-12-19 01:21:43 +01:00
Lukas Schauer
607c89cae2
updated ngrok url in test.sh
2016-10-17 22:46:28 +02:00
Lukas Schauer
a316a094df
Revert "strip leading null-bytes from urlbase64" (see #282 )
...
This reverts commit 319852dc8c
2016-09-21 13:20:51 +02:00
Lukas Schauer
319852dc8c
strip leading null-bytes from urlbase64 ( fixes #275 )
2016-09-17 13:15:15 +02:00
Lukas Schauer
7eca8aec5a
use temporary file for DER->PEM conversion ( fixes #279 )
2016-09-17 13:02:48 +02:00
Lukas Schauer
0c1e958d19
added temporary wrapper script for compatibility with old config locations and symlinks, will be removed in a few weeks
2016-09-17 12:46:46 +02:00
Lukas Schauer
ec49a4433b
fixed a few things after project rename
2016-09-13 20:00:43 +02:00
Lukas Schauer
64e35463cb
renamed project to dehydrated and main script to dehydrated.sh
2016-09-13 19:48:27 +02:00
Lukas Schauer
992beecbdb
release v0.3.0
2016-09-07 21:20:28 +02:00
Lukas Schauer
624ce4436a
updated readme
2016-08-04 00:11:08 +02:00
Lukas Schauer
d81eb58536
Only print full chain on signcsr command if --full-chain/-fc is set (related to #150 )
2016-08-04 00:11:02 +02:00
Lukas Schauer
afabfff06e
updated url to letsencrypt license agreement
2016-08-01 20:35:46 +02:00
Lukas Schauer
bd9cc5b0c4
Added option to run letsencrypt.sh without locks
...
This should only be used when letsencrypt.sh is under control by a
different script which makes sure that no two processes are touching the
same files.
2016-07-21 12:34:40 +02:00
Lukas Schauer
194464b04b
Default WELLKNOWN location is now /var/www/letsencrypt
...
With this change private and public files are now separated by default.
2016-07-20 17:04:25 +02:00
Lukas Schauer
f4138efab9
changed dependency check for diff to be compatible with openbsd diff ( fixes #219 )
2016-06-04 04:12:21 +02:00
Lukas Schauer
034ec30c7d
added multi-account support ( fixes #92 , #163 )
2016-06-04 04:01:24 +02:00
Lukas Schauer
ec48906992
initial support for configuration on per-certificate base ( #105 )
2016-05-26 17:11:42 +02:00
Lukas Schauer
64864f5fa6
added signcsr change to CHANGELOG
2016-05-26 16:04:01 +02:00
Lukas Schauer
620c7eb23e
output CA cert for signcsr command ( fixes #150 )
2016-05-26 15:44:59 +02:00
Lukas Schauer
4e8f944b72
added CERTDIR change to CHANGELOG
2016-05-26 15:06:07 +02:00
Lukas Schauer
8e77ba5e02
added option to set csr-flag indicating ocsp stapling to be mandatory
2016-05-26 15:02:23 +02:00
Lukas Schauer
d5b285868e
renamed "config.sh" to "config"
2016-05-22 22:34:28 +02:00
Lukas Schauer
2b50c72b75
release version 0.2.0
2016-05-22 16:10:12 +02:00
Lukas Schauer
561f0626b8
compatibility with "pretty" json ( fixes #202 )
2016-05-18 12:19:48 +02:00
Lukas Schauer
969bebef95
updated docs/wellknown.md
2016-05-16 12:22:42 +02:00
Lukas Schauer
a2867410ca
fixed tests
2016-05-10 22:18:10 +02:00
Lukas Schauer
42f4255693
Updated changelog
2016-05-10 22:16:35 +02:00
Lukas Schauer
e608dc2ba8
Renew private key by default, but keep option to disable this feature
2016-05-10 22:14:23 +02:00
Lukas Schauer
af2bc7a94f
Revert "Removed option to reuse old private keys." (useful for HKPK, see #195 )
...
This reverts commit 4dc9953319
2016-05-10 22:11:57 +02:00
Lukas Schauer
4dc9953319
Removed option to reuse old private keys.
...
I have no idea why I thought reusing the keys would be a good idea
when I first started this...
2016-05-08 15:57:15 +02:00
Lukas Schauer
a7c6af6895
removed donation button
2016-04-27 23:24:58 +02:00
Lukas Schauer
adef40762c
updated config example: PRIVATE_KEY is now ACCOUNT_KEY
2016-04-24 19:56:31 +02:00
Lukas Schauer
8968604caf
updated changelog
2016-04-24 19:54:33 +02:00
Lukas Schauer
8aa1a05bbe
renamed PRIVATE_KEY to ACCOUNT_KEY (as suggested in #183 )
2016-04-24 19:43:15 +02:00
Lukas Schauer
c3dbfe88d4
mktemp: use TMPDIR environment variable or use fallback to /tmp directory
2016-04-23 20:53:29 +02:00
Lukas Schauer
f096c62d49
i hate all software.
2016-04-23 18:30:56 +02:00
Lukas Schauer
b0e2ecde5f
added timestamp parameter to deploy_cert function of example hook script (related to #156 )
2016-04-15 01:34:23 +02:00
Lukas Schauer
230ab45948
reorganized parameters for mktemp ( fixes #180 )
2016-04-14 17:32:05 +02:00
Lukas Schauer
75985c6a8a
make arguments to _mktemp optional ( fixes #178 )
2016-04-05 20:08:40 +02:00
Lukas Schauer
33f07fcc0b
add test and fix bug with upper-case domains ( fixes #176 )
2016-03-30 17:51:47 +02:00
Lukas Schauer
1f6a80a0c7
Make temporary files identifiable ( fixes #169 )
2016-03-30 17:51:47 +02:00
Lukas Schauer