lacme/client, branch debian/0.7-1 Small ACME client written with process isolation and minimal privileges in mind Use upstream certicate chain instead of an hardcoded one. 2020-11-25T23:16:06+00:00 Guilhem Moulin guilhem@fripost.org 2020-11-25T18:58:13+00:00 51369e3955cdc5bf3f1ba0f6e2d7c4d73406c111 This is a breaking change. The certificate indicated by 'CAfile' is no longer used as is in 'certificate-chain' (along with the leaf cert). The chain returned by the ACME v2 endpoint is used instead. This allows for more flexbility with respect to key/CA rotation, cf. https://letsencrypt.org/2020/11/06/own-two-feet.html and https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018 Moreover 'CAfile' now defaults to @@datadir@@/lacme/ca-certificates.crt which is a concatenation of all known active CA certificates (which includes the previous default). 
This is a breaking change.  The certificate indicated by 'CAfile' is no
longer used as is in 'certificate-chain' (along with the leaf cert).
The chain returned by the ACME v2 endpoint is used instead.  This allows
for more flexbility with respect to key/CA rotation, cf.
https://letsencrypt.org/2020/11/06/own-two-feet.html and
https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018

Moreover 'CAfile' now defaults to @@datadir@@/lacme/ca-certificates.crt
which is a concatenation of all known active CA certificates (which
includes the previous default).
Upgrade links to secure HTTP. 2020-08-03T23:39:39+00:00 Guilhem Moulin guilhem@fripost.org 2020-08-03T23:27:09+00:00 89c94e697545c3333277194dfa862daede14a5e8 






lacme: new option 'account --deactivate'
2019-08-21T16:08:41+00:00

Guilhem Moulin
guilhem@fripost.org

2019-08-21T15:57:15+00:00

8a2d319476dbcd7840893616b1399658ddd71b27

For client-initiated account deactivation.  See RFC 8555 sec. 7.3.6.





For client-initiated account deactivation.  See RFC 8555 sec. 7.3.6.







Issue GET and POST-as-GET requests (RFC 8555 sec. 6.3)
2019-08-21T16:05:43+00:00

Guilhem Moulin
guilhem@fripost.org

2019-08-21T15:29:19+00:00

f9d5e53cac1c002e5983efc18e42f5a21444b182

For the  authorizations, order and certificate URLs.
See RFC 8555 sec. 7.1.





For the  authorizations, order and certificate URLs.
See RFC 8555 sec. 7.1.







Link to RFC 8555 instead of the ACME I-D URL.
2019-08-21T15:21:24+00:00

Guilhem Moulin
guilhem@fripost.org

2019-08-21T15:19:59+00:00

a3978219bab85e650d963276823cb142ecde6a21












lacme, client: new dependency Date::Parse.
2019-01-21T01:13:06+00:00

Guilhem Moulin
guilhem@fripost.org

2019-01-21T01:13:06+00:00

57ddc5ca505adeb3e44542335b01a6f0e8887ddc












client: poll order URL instead of each authz URL successively.
2019-01-21T01:11:33+00:00

Guilhem Moulin
guilhem@fripost.org

2019-01-21T01:07:22+00:00

d5d7aed46cc34dfbba521dc216f6f75a4309de10

We were blocking on https://github.com/letsencrypt/boulder/issues/3530 .





We were blocking on https://github.com/letsencrypt/boulder/issues/3530 .







Use ACME v2 endpoints
2018-04-26T23:43:03+00:00

Guilhem Moulin
guilhem@fripost.org

2018-04-26T18:29:44+00:00

d1bc3ad109a3000bda8a7876673ff9a0281e8c7b

https://tools.ietf.org/html/draft-ietf-acme-acme-12





https://tools.ietf.org/html/draft-ietf-acme-acme-12







Update copyright info
2017-07-08T22:33:15+00:00

Guilhem Moulin
guilhem@fripost.org

2017-07-08T22:33:15+00:00

82b5c4803a2ac5a8130d370778bb9f689e9674b7












Specify minimum required Perl versions.
2017-07-01T18:00:55+00:00

Guilhem Moulin
guilhem@fripost.org

2017-07-01T17:55:55+00:00

abb09fac8787c3444f45cf8cc06386dd75719a01