lacme/config/lacme-certs.conf, branch v0.8.4 Small ACME client written with process isolation and minimal privileges in mind lacme: Add 'owner' resp. 'mode' as (prefered) alias for 'chown' resp. 'chmod'. 2021-02-24T20:32:06+00:00 Guilhem Moulin guilhem@fripost.org 2021-02-24T20:24:13+00:00 c6a4aaa6128d55ba5f7f3cd2bd75f789f69ae407 






Wording: s/option/setting/.
2021-02-20T19:16:34+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-19T17:11:09+00:00

4a502836164821b9faa56d363c8fb116ce032321












Improve keyUsage documentation.
2021-02-12T21:30:35+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-12T21:13:31+00:00

681bf10e103b84b278491e6fff88e9d600ada72d












s/\.pem$/.crt/
2020-12-09T19:10:30+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-09T19:10:30+00:00

e751a1e0215342be52da2c086ad2e7bc8901229e












documentation: emphasize default values in the config file.
2020-12-09T18:53:45+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-09T18:51:56+00:00

79edb6eea5e009e5b49876728f7477a8524e98ec

Also, move the most common options ('hash', 'keyUsage', 'CAfile',
'min-days') to the default section.





Also, move the most common options ('hash', 'keyUsage', 'CAfile',
'min-days') to the default section.







Use upstream certicate chain instead of an hardcoded one.
2020-11-25T23:16:06+00:00

Guilhem Moulin
guilhem@fripost.org

2020-11-25T18:58:13+00:00

51369e3955cdc5bf3f1ba0f6e2d7c4d73406c111

This is a breaking change.  The certificate indicated by 'CAfile' is no
longer used as is in 'certificate-chain' (along with the leaf cert).
The chain returned by the ACME v2 endpoint is used instead.  This allows
for more flexbility with respect to key/CA rotation, cf.
https://letsencrypt.org/2020/11/06/own-two-feet.html and
https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018

Moreover 'CAfile' now defaults to @@datadir@@/lacme/ca-certificates.crt
which is a concatenation of all known active CA certificates (which
includes the previous default).





This is a breaking change.  The certificate indicated by 'CAfile' is no
longer used as is in 'certificate-chain' (along with the leaf cert).
The chain returned by the ACME v2 endpoint is used instead.  This allows
for more flexbility with respect to key/CA rotation, cf.
https://letsencrypt.org/2020/11/06/own-two-feet.html and
https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018

Moreover 'CAfile' now defaults to @@datadir@@/lacme/ca-certificates.crt
which is a concatenation of all known active CA certificates (which
includes the previous default).







Makefile: Use variables for target directories etc.
2020-08-03T23:39:35+00:00

Guilhem Moulin
guilhem@fripost.org

2020-08-03T22:00:58+00:00

da8b727f156d23553eecb90e8731d39c6027cb02












Change the default 'min-days' from 10 to 21.
2017-06-28T20:09:50+00:00

Guilhem Moulin
guilhem@fripost.org

2017-06-28T19:33:40+00:00

40a54d2ad35630b1c8a7cd88791db032a7983d4d

This avoids expiration notices from Let's Encrypt when auto-renewal is
done by a cronjob: Let's Encrypt sends a notice 19 (then 9) days before
expiration.





This avoids expiration notices from Let's Encrypt when auto-renewal is
done by a cronjob: Let's Encrypt sends a notice 19 (then 9) days before
expiration.







Improve formatting of config files.
2016-12-01T12:59:25+00:00

Guilhem Moulin
guilhem@fripost.org

2016-12-01T12:59:25+00:00

ac0362fb5a5e83b0ed6c1e31c2c1f3d1dfbc1ced












wibble
2016-12-01T12:52:14+00:00

Guilhem Moulin
guilhem@fripost.org

2016-12-01T12:52:14+00:00

d39ec1c01a622996b5470ec6ce359be254f5274e