lacme/tests, branch debian/bullseye Small ACME client written with process isolation and minimal privileges in mind tests: Check presence of extra greeting data. 2021-02-22T02:19:38+00:00 Guilhem Moulin guilhem@fripost.org 2021-02-22T02:19:38+00:00 903309cb8364047a2939fb6d3cb06da8ecc32726 






Fix `./test --deb`.
2021-02-22T02:19:11+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-22T01:43:48+00:00

9a6a7824a009e1fb1f97afd227181191bc10f0a6

The staging environment wasn't set properly for the Debian packages.





The staging environment wasn't set properly for the Debian packages.







lacme-accountd(1): new setting 'keyid'.
2021-02-21T23:14:51+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-21T17:49:14+00:00

9898b1877ce2973bbc336921969bd7f16d3698fa

This saves a round trip and provides a safeguard against malicious
clients.





This saves a round trip and provides a safeguard against malicious
clients.







accountd: Improve log message for incoming requests.
2021-02-21T18:58:56+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-21T18:54:25+00:00

1bdaeae835b5c9914f9c2107efda150d643cda12












Add IPC tests with an old lacme(8) resp. lacme-accountd(1).
2021-02-21T18:41:40+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-21T17:52:08+00:00

16f7d75ac8e46a7905779931c871ac85c7e1aa04












wording
2021-02-21T18:41:37+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-21T16:34:51+00:00

d56b957dbae6c8214d50ce88d0ea04eb4654b843












lacme-accountd: new setting 'logfile' to log signature requests.
2021-02-20T23:19:51+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-20T21:05:18+00:00

74c0a11722cf1e01b9a9834e89a07b55eaf01080

Prefixed with a timestamp.





Prefixed with a timestamp.







Document `lacme-accountd --stdio`.
2021-02-20T21:13:46+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-20T18:56:15+00:00

8e612e071b8c0fc99ebf91673f53ca5f0d6bdd11

It's an internal flag, but can be useful for authorized_keys(5)
restrictions.





It's an internal flag, but can be useful for authorized_keys(5)
restrictions.







Add %-specifiers support.
2021-02-20T21:13:41+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-18T20:07:01+00:00

0ef94d85e58497dcb2c4c954cadcac918032467a

lacme(8): for --config=, --socket=, --config-certs= (and ‘socket’/
‘config-certs’/‘challenge-directory’ configuration options *before*
privilege drop; and for the [accountd] section ‘command’/‘config’
configuration options *after* privilege drop).

lacme-accountd(1): for --config=, --socket= and --privkey= (and
‘socket’/‘privkey’ configuration options).

This also changes the default configuration file location.  lacme(8) and
lacme-accountd(1) now respectively use /etc/lacme/lacme.conf resp.
/etc/lacme/lacme-accountd.conf when running as root, and
$XDG_CONFIG_HOME/lacme/lacme.conf resp. $XDG_CONFIG_HOME/lacme/lacme-accountd.conf
when running as a normal user.  There is no fallback to /etc anymore.





lacme(8): for --config=, --socket=, --config-certs= (and ‘socket’/
‘config-certs’/‘challenge-directory’ configuration options *before*
privilege drop; and for the [accountd] section ‘command’/‘config’
configuration options *after* privilege drop).

lacme-accountd(1): for --config=, --socket= and --privkey= (and
‘socket’/‘privkey’ configuration options).

This also changes the default configuration file location.  lacme(8) and
lacme-accountd(1) now respectively use /etc/lacme/lacme.conf resp.
/etc/lacme/lacme-accountd.conf when running as root, and
$XDG_CONFIG_HOME/lacme/lacme.conf resp. $XDG_CONFIG_HOME/lacme/lacme-accountd.conf
when running as a normal user.  There is no fallback to /etc anymore.







Symlink $(sysconfdir)/apache2/conf-available/lacme.conf → ../../lacme/apache2.conf.
2021-02-20T19:16:34+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-18T15:11:24+00:00

8d7b50989d1c446b81c73e8ababfce6f0351ee59

This is useful for enabling the snippet with `a2enconf lacme`, cf.
https://bugs.debian.org/955859 .





This is useful for enabling the snippet with `a2enconf lacme`, cf.
https://bugs.debian.org/955859 .