lacme/debian/control, branch debian/bullseye Small ACME client written with process isolation and minimal privileges in mind d/control: Remove versioned Recommends: on lacme-accountd. 2021-02-22T02:31:12+00:00 Guilhem Moulin guilhem@debian.org 2021-02-15T23:19:09+00:00 cb691a42e91c15743f7d28c296dddfa9e8f0a789 lacme also works with earlier accountds, but might yield bad suprises when the 'keyid' setting is set. 
lacme also works with earlier accountds, but might yield bad suprises
when the 'keyid' setting is set.
d/control: lacme now require openssl 1.1.0 or later. 2021-02-22T02:31:12+00:00 Guilhem Moulin guilhem@debian.org 2021-02-14T23:42:17+00:00 e7895f77ecf4100b7114cc67b87c0fabb7ac123b 






d/control: Remove libtypes-serialiser-perl from lacme's Depends.
2021-02-22T02:31:12+00:00

Guilhem Moulin
guilhem@debian.org

2021-02-14T23:31:48+00:00

bcb82f6cb7acf03f736f105799c886f813e4c454

See b54d248515357297d84a01cf45a42a6787c21240.





See b54d248515357297d84a01cf45a42a6787c21240.







Use dedicated system users for internal components.
2021-02-22T02:31:12+00:00

Guilhem Moulin
guilhem@debian.org

2021-02-14T23:32:29+00:00

a321c90db4a6d323f1a9bc06c4d861cee8868664

  * The internal webserver now runs as a dedicated system user _lacme-www
    (and group nogroup) instead of www-data:www-data.  This is configurable
    in the [webserver] section of the lacme(8) configuration file.
  * The internal ACME client now runs as a dedicated system user _lacme-client
    (and group nogroup) instead of nobody:nogroup.  This is configurable in
    the [client] section of the lacme(8) configuration file.
  * The _lacme-www and _lacme-client system users are created automatically by
    lacme.postinst (hence a new Depends: adduser), and deleted on purge.  (So
    make sure not to chown any file to these internal users.)





  * The internal webserver now runs as a dedicated system user _lacme-www
    (and group nogroup) instead of www-data:www-data.  This is configurable
    in the [webserver] section of the lacme(8) configuration file.
  * The internal ACME client now runs as a dedicated system user _lacme-client
    (and group nogroup) instead of nobody:nogroup.  This is configurable in
    the [client] section of the lacme(8) configuration file.
  * The _lacme-www and _lacme-client system users are created automatically by
    lacme.postinst (hence a new Depends: adduser), and deleted on purge.  (So
    make sure not to chown any file to these internal users.)







d/control: Point Vcs-* to salsa.
2021-02-15T00:33:27+00:00

Guilhem Moulin
guilhem@debian.org

2021-02-14T23:13:36+00:00

c814a371656f7ebf30a2f6633eccb27b780c8b26












d/control: Bump Standards-Version to 4.5.1 (no changes necessary).
2021-02-15T00:33:27+00:00

Guilhem Moulin
guilhem@debian.org

2021-02-14T23:08:16+00:00

73ed00327e240041fd809bf75a8bef593e93e20b












New lacme-accountd Suggests: openssl, gpg.
2020-12-09T19:14:15+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-09T19:14:15+00:00

e8b2103f22f075217fc00cce56c0e91823a29310

For account key generation using genpkey(1ssl) resp. decryption.





For account key generation using genpkey(1ssl) resp. decryption.







d/control: Bump debhelper compatibility level to 13.
2020-08-03T23:42:56+00:00

Guilhem Moulin
guilhem@fripost.org

2020-08-03T22:55:04+00:00

fbe07d7b32c5a5b52480a1d42870d2d6923e1541












d/control: Bump Standards-Version to 4.5.0 (no changes necessary).
2020-04-05T15:46:47+00:00

Guilhem Moulin
guilhem@fripost.org

2020-04-05T15:46:47+00:00

1af87ee3264bb4d0a0174f529d90f502f178e97e












d/control: Add "debhelper-compat (= 12)" to Build-Depends.
2020-04-05T15:40:26+00:00

Guilhem Moulin
guilhem@fripost.org

2020-04-05T15:40:26+00:00

fcc35c3e8eb720b43b0b9fda0e4c5a0990f92188