lacme/config, branch v0.8.3 Small ACME client written with process isolation and minimal privileges in mind lacme: Add 'owner' resp. 'mode' as (prefered) alias for 'chown' resp. 'chmod'. 2021-02-24T20:32:06+00:00 Guilhem Moulin guilhem@fripost.org 2021-02-24T20:24:13+00:00 c6a4aaa6128d55ba5f7f3cd2bd75f789f69ae407 






Add 'logfile' to lacme-account.conf.
2021-02-21T23:19:14+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-21T23:19:14+00:00

3d7cbb119cae717e0a3e5546d9a2b6ae982c514b












lacme-accountd(1): new setting 'keyid'.
2021-02-21T23:14:51+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-21T17:49:14+00:00

9898b1877ce2973bbc336921969bd7f16d3698fa

This saves a round trip and provides a safeguard against malicious
clients.





This saves a round trip and provides a safeguard against malicious
clients.







Make the ACME API server URL configurable at build time.
2021-02-21T02:00:48+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-21T01:55:46+00:00

626c0418b3d8c3747a7be8e2620d7c85a8c2c613












Add %-specifiers support.
2021-02-20T21:13:41+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-18T20:07:01+00:00

0ef94d85e58497dcb2c4c954cadcac918032467a

lacme(8): for --config=, --socket=, --config-certs= (and ‘socket’/
‘config-certs’/‘challenge-directory’ configuration options *before*
privilege drop; and for the [accountd] section ‘command’/‘config’
configuration options *after* privilege drop).

lacme-accountd(1): for --config=, --socket= and --privkey= (and
‘socket’/‘privkey’ configuration options).

This also changes the default configuration file location.  lacme(8) and
lacme-accountd(1) now respectively use /etc/lacme/lacme.conf resp.
/etc/lacme/lacme-accountd.conf when running as root, and
$XDG_CONFIG_HOME/lacme/lacme.conf resp. $XDG_CONFIG_HOME/lacme/lacme-accountd.conf
when running as a normal user.  There is no fallback to /etc anymore.





lacme(8): for --config=, --socket=, --config-certs= (and ‘socket’/
‘config-certs’/‘challenge-directory’ configuration options *before*
privilege drop; and for the [accountd] section ‘command’/‘config’
configuration options *after* privilege drop).

lacme-accountd(1): for --config=, --socket= and --privkey= (and
‘socket’/‘privkey’ configuration options).

This also changes the default configuration file location.  lacme(8) and
lacme-accountd(1) now respectively use /etc/lacme/lacme.conf resp.
/etc/lacme/lacme-accountd.conf when running as root, and
$XDG_CONFIG_HOME/lacme/lacme.conf resp. $XDG_CONFIG_HOME/lacme/lacme-accountd.conf
when running as a normal user.  There is no fallback to /etc anymore.







Wording: s/option/setting/.
2021-02-20T19:16:34+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-19T17:11:09+00:00

4a502836164821b9faa56d363c8fb116ce032321












Deprecate setting 'privkey' in [accountd] section of the lacme(8) configuration file.
2021-02-20T19:16:34+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-18T00:14:23+00:00

ad1856777bf108826008b60a1e70c1e3fbb94ec7

One need to use the lacme-accountd(1) configuration file for that
instead.





One need to use the lacme-accountd(1) configuration file for that
instead.







lacme(8)'s 'config' option in the [accountd] section no longer have a default value.
2021-02-20T19:16:34+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-18T00:04:45+00:00

1c4fc8c431e69780625600a4ee8526e1a3cbb3f4

The previous default, namely /etc/lacme/lacme-accountd.conf, is still
honored when there is the user running lacme doesn't have a
~/.config/lacme/lacme-account.conf configuration file.





The previous default, namely /etc/lacme/lacme-accountd.conf, is still
honored when there is the user running lacme doesn't have a
~/.config/lacme/lacme-account.conf configuration file.







Split client/webserver/accountd commands on whitespace.
2021-02-17T23:53:43+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-17T22:53:31+00:00

d72df441f86f759bf143df745ff13fd9b90597bf

This doesn't change the default behavior.





This doesn't change the default behavior.







challenge-directory now needs to be set to an *existing* directory.
2021-02-14T19:04:40+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-14T16:01:17+00:00

a903ea92dd736c560d21fe45063d4914765fa173

Since lacme(8) spawns a builtin webserver by default the change doesn't
affect default configurations.

See https://bugs.debian.org/970800 for the rationale.





Since lacme(8) spawns a builtin webserver by default the change doesn't
affect default configurations.

See https://bugs.debian.org/970800 for the rationale.