lacme/debian/changelog, branch debian/0.8.0-1 Small ACME client written with process isolation and minimal privileges in mind Prepare new release. 2021-02-22T02:32:01+00:00 Guilhem Moulin guilhem@debian.org 2021-02-22T02:32:01+00:00 ae52bdc9a590a28d89a69cab783973fcffa5cb7f 






d/lacme.install: include new configuration files and snippets.
2021-02-22T02:31:12+00:00

Guilhem Moulin
guilhem@debian.org

2021-02-22T01:16:08+00:00

8e5cb6715422a6b155c5b1dd21a26b77efaf20d8












d/lacme.links: Remove /etc/apache2/conf-available/lacme.conf.
2021-02-22T02:31:12+00:00

Guilhem Moulin
guilhem@debian.org

2021-02-22T01:11:16+00:00

da9717f09c8507e5874233b54a6d4351adb11cd7

Now part of the upstream build system.





Now part of the upstream build system.







d/control: Remove versioned Recommends: on lacme-accountd.
2021-02-22T02:31:12+00:00

Guilhem Moulin
guilhem@debian.org

2021-02-15T23:19:09+00:00

cb691a42e91c15743f7d28c296dddfa9e8f0a789

lacme also works with earlier accountds, but might yield bad suprises
when the 'keyid' setting is set.





lacme also works with earlier accountds, but might yield bad suprises
when the 'keyid' setting is set.







d/copyright: Point Source: to the upstream repository.
2021-02-22T02:31:12+00:00

Guilhem Moulin
guilhem@debian.org

2021-02-14T23:43:19+00:00

552ae5845ce066f335800ca3e1c0413e3d54d391












d/copyright: Bump copyright years.
2021-02-22T02:31:12+00:00

Guilhem Moulin
guilhem@debian.org

2021-02-14T23:42:56+00:00

345381fed7016f0e2edc0be7fa6cbaee37cbde10












d/control: lacme now require openssl 1.1.0 or later.
2021-02-22T02:31:12+00:00

Guilhem Moulin
guilhem@debian.org

2021-02-14T23:42:17+00:00

e7895f77ecf4100b7114cc67b87c0fabb7ac123b












d/control: Remove libtypes-serialiser-perl from lacme's Depends.
2021-02-22T02:31:12+00:00

Guilhem Moulin
guilhem@debian.org

2021-02-14T23:31:48+00:00

bcb82f6cb7acf03f736f105799c886f813e4c454

See b54d248515357297d84a01cf45a42a6787c21240.





See b54d248515357297d84a01cf45a42a6787c21240.







Bump upstream version number.
2021-02-22T02:31:12+00:00

Guilhem Moulin
guilhem@debian.org

2021-02-14T23:28:02+00:00

c40254f6baf896b781b7ecdaca175e4028ca9e21












Use dedicated system users for internal components.
2021-02-22T02:31:12+00:00

Guilhem Moulin
guilhem@debian.org

2021-02-14T23:32:29+00:00

a321c90db4a6d323f1a9bc06c4d861cee8868664

  * The internal webserver now runs as a dedicated system user _lacme-www
    (and group nogroup) instead of www-data:www-data.  This is configurable
    in the [webserver] section of the lacme(8) configuration file.
  * The internal ACME client now runs as a dedicated system user _lacme-client
    (and group nogroup) instead of nobody:nogroup.  This is configurable in
    the [client] section of the lacme(8) configuration file.
  * The _lacme-www and _lacme-client system users are created automatically by
    lacme.postinst (hence a new Depends: adduser), and deleted on purge.  (So
    make sure not to chown any file to these internal users.)





  * The internal webserver now runs as a dedicated system user _lacme-www
    (and group nogroup) instead of www-data:www-data.  This is configurable
    in the [webserver] section of the lacme(8) configuration file.
  * The internal ACME client now runs as a dedicated system user _lacme-client
    (and group nogroup) instead of nobody:nogroup.  This is configurable in
    the [client] section of the lacme(8) configuration file.
  * The _lacme-www and _lacme-client system users are created automatically by
    lacme.postinst (hence a new Depends: adduser), and deleted on purge.  (So
    make sure not to chown any file to these internal users.)