lacme, branch upstream/0.7 Small ACME client written with process isolation and minimal privileges in mind Use upstream certicate chain instead of an hardcoded one. 2020-11-25T23:16:06+00:00 Guilhem Moulin guilhem@fripost.org 2020-11-25T18:58:13+00:00 51369e3955cdc5bf3f1ba0f6e2d7c4d73406c111 This is a breaking change. The certificate indicated by 'CAfile' is no longer used as is in 'certificate-chain' (along with the leaf cert). The chain returned by the ACME v2 endpoint is used instead. This allows for more flexbility with respect to key/CA rotation, cf. https://letsencrypt.org/2020/11/06/own-two-feet.html and https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018 Moreover 'CAfile' now defaults to @@datadir@@/lacme/ca-certificates.crt which is a concatenation of all known active CA certificates (which includes the previous default). 
This is a breaking change.  The certificate indicated by 'CAfile' is no
longer used as is in 'certificate-chain' (along with the leaf cert).
The chain returned by the ACME v2 endpoint is used instead.  This allows
for more flexbility with respect to key/CA rotation, cf.
https://letsencrypt.org/2020/11/06/own-two-feet.html and
https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018

Moreover 'CAfile' now defaults to @@datadir@@/lacme/ca-certificates.crt
which is a concatenation of all known active CA certificates (which
includes the previous default).
README: Link to /man/lacme.8.html 2020-08-04T01:40:58+00:00 Guilhem Moulin guilhem@fripost.org 2020-08-04T01:40:58+00:00 77844de56889ab441607086b554b111a3e7b03cf 






Improve long command wrapping.
2020-08-04T00:59:14+00:00

Guilhem Moulin
guilhem@fripost.org

2020-08-04T00:52:32+00:00

556edde60eefe312f08ea882a53ad3899f87cd26












New release 0.6.1
2020-08-03T23:40:25+00:00

Guilhem Moulin
guilhem@fripost.org

2020-08-03T23:40:25+00:00

49c14fb9faf9aedf1f6c22bff9526ba980d0f23b












Upgrade links to secure HTTP.
2020-08-03T23:39:39+00:00

Guilhem Moulin
guilhem@fripost.org

2020-08-03T23:27:09+00:00

89c94e697545c3333277194dfa862daede14a5e8












Ignore [accountd] section from lacme.conf when the --socket option is defined.
2020-08-03T23:39:39+00:00

Guilhem Moulin
guilhem@fripost.org

2020-08-03T20:57:32+00:00

e419eb68718085fa2e2505eb4b4aa08145f7dc1c

This allows remotely-controlled lacme processes being controlled without
modifying an config files.  See https://bugs.debian.org/955767 .





This allows remotely-controlled lacme processes being controlled without
modifying an config files.  See https://bugs.debian.org/955767 .







Makefile: Use variables for target directories etc.
2020-08-03T23:39:35+00:00

Guilhem Moulin
guilhem@fripost.org

2020-08-03T22:00:58+00:00

da8b727f156d23553eecb90e8731d39c6027cb02












Adapt Apache2 snippet to Apache2 2.4.
2020-08-03T22:00:00+00:00

Guilhem Moulin
guilhem@fripost.org

2020-08-03T20:39:29+00:00

d9946b9ab478026defed364485d970b4041e1a2a












Change default libexec dir from /usr/lib/lacme to /usr/libexec/lacme.
2020-08-03T20:31:35+00:00

Guilhem Moulin
guilhem@fripost.org

2020-08-03T20:29:37+00:00

294bc39102e9263a268b58fe29e03c9983ccfeca












Install lacme manpage to section 8.
2020-08-03T20:31:20+00:00

Guilhem Moulin
guilhem@fripost.org

2020-08-03T20:15:14+00:00

f6913c09b9987ae8a6f65f5acfa7673278c701be

As it's a system command, see hier(7) for details.





As it's a system command, see hier(7) for details.