lacme, branch v0.8.2 Small ACME client written with process isolation and minimal privileges in mind Prepare new release v0.8.2. 2023-04-25T18:06:22+00:00 Guilhem Moulin guilhem@fripost.org 2023-04-25T18:06:22+00:00 c80a2530eb014b34a314e078fec2589bc7969e33 






tests: Point stretch's archive URL to archive.d.o.
2023-04-25T09:59:39+00:00

Guilhem Moulin
guilhem@fripost.org

2023-04-25T09:59:39+00:00

5d9d1ce570c0fa613e1dc2345047a0ff95f781c5

See https://lists.debian.org/msgid-search/87tty79lwo.fsf@43-1.org .





See https://lists.debian.org/msgid-search/87tty79lwo.fsf@43-1.org .







client: Handle "ready" → "processing" → "valid" status change during newOrder.
2023-04-25T09:11:03+00:00

Guilhem Moulin
guilhem@fripost.org

2023-04-25T08:51:36+00:00

53238c70f7a12e233a6ca83cf2b50168e5b9592e

Instead of just "ready" → "valid", which may be what we observe when the
server is fast enough, but according to RFC 8555 sec. 7.1.6 the state
actually transitions via "processing" state and we need to account for
that.

It appears Let's Encrypt staging environment now has different timing
conditions and lacme is unable to request certificates due to this
issue.

Thanks to Alexander Borkowski for the report!





Instead of just "ready" → "valid", which may be what we observe when the
server is fast enough, but according to RFC 8555 sec. 7.1.6 the state
actually transitions via "processing" state and we need to account for
that.

It appears Let's Encrypt staging environment now has different timing
conditions and lacme is unable to request certificates due to this
issue.

Thanks to Alexander Borkowski for the report!







Prepare new release v0.8.1.
2023-01-25T02:23:51+00:00

Guilhem Moulin
guilhem@fripost.org

2023-01-25T02:23:51+00:00

b3af3526b293f396da02a6276ea86ca17dcd2d03












Adjust test suite against current Let's Encrypt staging environment.
2023-01-25T02:23:45+00:00

Guilhem Moulin
guilhem@fripost.org

2023-01-25T02:12:13+00:00

cb0b301e7a62a71d9e4454f9f7af5358c857c48c












Replace '$(dir $@)' with '$(@D)' in Makefile.
2023-01-25T02:11:22+00:00

Guilhem Moulin
guilhem@fripost.org

2023-01-25T02:11:22+00:00

40a4c9b9be51f9c41edd8b421dd629e001659fb4












lacme: pass a temporary JSON file with the client configuration to the internal client.
2021-02-25T09:30:22+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-25T00:41:59+00:00

9a8f705eddd18ccc9a24fe0e7efe6b5a87b2be09

So it doesn't have to parse the INI file again.  Also, while lacme.conf
is world-readable by default, one might restrict permissions and add
private information in there, not realizing that everything, including
comments, will be readable by the client.





So it doesn't have to parse the INI file again.  Also, while lacme.conf
is world-readable by default, one might restrict permissions and add
private information in there, not realizing that everything, including
comments, will be readable by the client.







lacme: split certificates using Net::SSLeay::PEM_* instead of calling openssl.
2021-02-24T23:37:17+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-24T23:30:37+00:00

f09c95ea97c9bdee92f7c7622689aed540373a73












lacme: improve install_cert()'s handling of temporary files.
2021-02-24T20:56:10+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-24T20:50:11+00:00

491998131f18d136ca37f15898d07062ad7a1fae












lacme: Return an error when the 'mode'/'chown' isn't a number.
2021-02-24T20:32:06+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-24T20:28:31+00:00

ea5a51ecaa72c8277b4f878cf3635025d757fa37

oct("foobar") is 0, definitely not what we want.





oct("foobar") is 0, definitely not what we want.