lacme, branch debian/buster Small ACME client written with process isolation and minimal privileges in mind Use upstream certificate chain instead of an hardcoded one. 2020-11-26T01:10:05+00:00 Guilhem Moulin guilhem@fripost.org 2020-11-26T00:19:45+00:00 f2514b36b8c9f519452106fbc84ca69f1955ada1 This is a breaking change. The certificate indicated by 'CAfile' is no longer used as is in 'certificate-chain' (along with the leaf cert). The chain returned by the ACME v2 endpoint is used instead. This allows for more flexbility with respect to key/CA rotation, cf. https://letsencrypt.org/2020/11/06/own-two-feet.html and https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018 Moreover 'CAfile' now defaults to @@datadir@@/lacme/ca-certificates.crt which is a concatenation of all known active CA certificates (which includes the previous default). 
This is a breaking change.  The certificate indicated by 'CAfile' is no
longer used as is in 'certificate-chain' (along with the leaf cert).
The chain returned by the ACME v2 endpoint is used instead.  This allows
for more flexbility with respect to key/CA rotation, cf.
https://letsencrypt.org/2020/11/06/own-two-feet.html and
https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018

Moreover 'CAfile' now defaults to @@datadir@@/lacme/ca-certificates.crt
which is a concatenation of all known active CA certificates (which
includes the previous default).
Issue GET and POST-as-GET requests (RFC 8555 sec. 6.3) 2019-08-26T10:35:58+00:00 Guilhem Moulin guilhem@fripost.org 2019-08-21T16:55:48+00:00 aa779d1f1658a1244e2cba03b07ea9be3c4ee2a0 For the authorizations, order and certificate URLs. See RFC 8555 sec. 7.1. Let's Encrypt will remove support of unauthenticated GETs from the V2 API on 01 Nov 2019: https://community.letsencrypt.org/t/acme-v2-scheduled-deprecation-of-unauthenticated-resource-gets/74380 
For the  authorizations, order and certificate URLs.
See RFC 8555 sec. 7.1.

Let's Encrypt will remove support of unauthenticated GETs from the V2
API on 01 Nov 2019:

    https://community.letsencrypt.org/t/acme-v2-scheduled-deprecation-of-unauthenticated-resource-gets/74380
Prepare new release. 2018-05-09T12:17:31+00:00 Guilhem Moulin guilhem@fripost.org 2018-05-09T12:17:31+00:00 7f4db501dfc80b4571833f95c090bdd0e1da240d 






Apply wrap-and-sort(1)
2018-05-09T12:17:11+00:00

Guilhem Moulin
guilhem@fripost.org

2018-05-09T12:17:11+00:00

c8ccc1ac5ded293b968c30d2efcced936759f925












New dependency (lacme): libtypes-serialiser-perl
2018-05-09T12:16:54+00:00

Guilhem Moulin
guilhem@fripost.org

2018-05-09T12:16:54+00:00

ed37ed5eb5bcd1b030ac9c9fc605ff30b1abe556












Build-Depends on pandoc >= 2.1
2018-05-09T12:12:44+00:00

Guilhem Moulin
guilhem@fripost.org

2018-05-09T11:52:29+00:00

26379ce8c68ea73f7c263a9fff964fb15c58e566












Bump Standards-Version to 4.1.4 (no changes necessary).
2018-05-09T12:12:39+00:00

Guilhem Moulin
guilhem@fripost.org

2018-05-09T11:51:03+00:00

c99ff96213f8b69c7f22e041875b15857eaa1618












Refresh patches
2018-05-09T12:12:33+00:00

Guilhem Moulin
guilhem@fripost.org

2018-05-09T11:48:04+00:00

3e997bd0c7cf11fa260ae24639c825744a6514c1












Bump Debian version
2018-05-09T12:12:28+00:00

Guilhem Moulin
guilhem@fripost.org

2018-05-09T11:47:14+00:00

a374542e6c3fdd54db99e348d9ecab57684ef3df












Updated version 0.5 from 'upstream/0.5'
2018-05-09T12:12:01+00:00

Guilhem Moulin
guilhem@fripost.org

2018-05-09T12:12:01+00:00

39c8e6b055981a16b7e641c5201b1d280f2c6ad0