lacme/config, branch debian/0.7-1 Small ACME client written with process isolation and minimal privileges in mind Use upstream certicate chain instead of an hardcoded one. 2020-11-25T23:16:06+00:00 Guilhem Moulin guilhem@fripost.org 2020-11-25T18:58:13+00:00 51369e3955cdc5bf3f1ba0f6e2d7c4d73406c111 This is a breaking change. The certificate indicated by 'CAfile' is no longer used as is in 'certificate-chain' (along with the leaf cert). The chain returned by the ACME v2 endpoint is used instead. This allows for more flexbility with respect to key/CA rotation, cf. https://letsencrypt.org/2020/11/06/own-two-feet.html and https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018 Moreover 'CAfile' now defaults to @@datadir@@/lacme/ca-certificates.crt which is a concatenation of all known active CA certificates (which includes the previous default). 
This is a breaking change.  The certificate indicated by 'CAfile' is no
longer used as is in 'certificate-chain' (along with the leaf cert).
The chain returned by the ACME v2 endpoint is used instead.  This allows
for more flexbility with respect to key/CA rotation, cf.
https://letsencrypt.org/2020/11/06/own-two-feet.html and
https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018

Moreover 'CAfile' now defaults to @@datadir@@/lacme/ca-certificates.crt
which is a concatenation of all known active CA certificates (which
includes the previous default).
Ignore [accountd] section from lacme.conf when the --socket option is defined. 2020-08-03T23:39:39+00:00 Guilhem Moulin guilhem@fripost.org 2020-08-03T20:57:32+00:00 e419eb68718085fa2e2505eb4b4aa08145f7dc1c This allows remotely-controlled lacme processes being controlled without modifying an config files. See https://bugs.debian.org/955767 . 
This allows remotely-controlled lacme processes being controlled without
modifying an config files.  See https://bugs.debian.org/955767 .
Makefile: Use variables for target directories etc. 2020-08-03T23:39:35+00:00 Guilhem Moulin guilhem@fripost.org 2020-08-03T22:00:58+00:00 da8b727f156d23553eecb90e8731d39c6027cb02 






Change default libexec dir from /usr/lib/lacme to /usr/libexec/lacme.
2020-08-03T20:31:35+00:00

Guilhem Moulin
guilhem@fripost.org

2020-08-03T20:29:37+00:00

294bc39102e9263a268b58fe29e03c9983ccfeca












Install lacme manpage to section 8.
2020-08-03T20:31:20+00:00

Guilhem Moulin
guilhem@fripost.org

2020-08-03T20:15:14+00:00

f6913c09b9987ae8a6f65f5acfa7673278c701be

As it's a system command, see hier(7) for details.





As it's a system command, see hier(7) for details.







Use /run for the listening socket of the webserver component.
2019-08-21T22:34:04+00:00

Guilhem Moulin
guilhem@fripost.org

2019-08-21T22:30:11+00:00

89f8c948d7b39314d7fc997643874adc6be92462












Use ACME v2 endpoints
2018-04-26T23:43:03+00:00

Guilhem Moulin
guilhem@fripost.org

2018-04-26T18:29:44+00:00

d1bc3ad109a3000bda8a7876673ff9a0281e8c7b

https://tools.ietf.org/html/draft-ietf-acme-acme-12





https://tools.ietf.org/html/draft-ietf-acme-acme-12







Bind webserver to /var/run/lacme-www.socket by default.
2017-07-08T19:02:36+00:00

Guilhem Moulin
guilhem@fripost.org

2017-07-08T19:02:36+00:00

8cdd29841d0dbb89e866aad36173bb26182d0c97












mv config/{apache2.conf,nginx.conf} snippets/
2017-07-08T18:59:11+00:00

Guilhem Moulin
guilhem@fripost.org

2017-07-08T18:59:11+00:00

8349b801a5f7e5f11b0a758d7ab28d8b79eb08ea












wibble
2017-06-30T07:26:41+00:00

Guilhem Moulin
guilhem@fripost.org

2017-06-30T07:26:41+00:00

7f674213fb08129bd379d2f87e401a42899a60b8