lacme/client, branch debian/bullseye

Prepare new release v0.8.0.

2021-02-22T02:19:57+00:00

client: Print Terms of Service URL for 'account' command.

2021-02-22T00:05:06+00:00

lacme-accountd(1): new setting 'keyid'.

2021-02-21T23:14:51+00:00

This saves a round trip and provides a safeguard against malicious
clients.

accountd: Pass JWA and JWK thumbprint via extended greeting data.

2021-02-21T18:41:40+00:00

Passing the JWA to the ACME client is required if we want to support
account keys other than RSA.  As of 0.7 both lacme-accountd(1) and
lacme(8) hardcode “RS256” (SHA256withRSA per RFC 7518 sec. A.1).

Passing the JWK thumbprint is handy as it gives more flexibility if RFC
8555 sec. 8.1 were to be updated with another digest algorithm (it's
currently hardcoded to SHA-256).  A single lacme-account(1) instance
might be used to sign requests from many clients, and it's easier to
upgrade a single ‘lacme-accountd’ than many ‘lacme’.  Moreover, in some
restricted environments lacme-accountd might hide the JWK from the
client to prevent ‘newAccount’ requests (such as contact updates);
passing its thumbprint is enough for ‘newOrder’ requests.

Make the ACME API server URL configurable at build time.

2021-02-21T02:00:48+00:00

Consolidate error messages for consistency.

2021-02-17T23:42:32+00:00

client: avoid "Use of uninitialized value in pattern match (m//)" perl warnings.

2021-02-17T23:42:32+00:00

When the accountd socket can't be reached.

client: use "lacme-client/$VERSION" as User-Agent header.

2021-02-17T23:42:32+00:00

typofix

2021-02-17T23:40:53+00:00

Bump copyright years.

2021-02-15T00:31:29+00:00