lacme/webserver, branch v0.8.3 Small ACME client written with process isolation and minimal privileges in mind Bump copyright years. 2021-02-15T00:31:29+00:00 Guilhem Moulin guilhem@fripost.org 2021-02-14T16:02:31+00:00 f3e28985165e9ff30907d5da45a4a0bc8c0ccf31 






Upgrade links to secure HTTP.
2020-08-03T23:39:39+00:00

Guilhem Moulin
guilhem@fripost.org

2020-08-03T23:27:09+00:00

89c94e697545c3333277194dfa862daede14a5e8












Update copyright info
2017-07-08T22:33:15+00:00

Guilhem Moulin
guilhem@fripost.org

2017-07-08T22:33:15+00:00

82b5c4803a2ac5a8130d370778bb9f689e9674b7












Specify minimum required Perl versions.
2017-07-01T18:00:55+00:00

Guilhem Moulin
guilhem@fripost.org

2017-07-01T17:55:55+00:00

abb09fac8787c3444f45cf8cc06386dd75719a01












Ensure fdopen is called with an integer.
2017-07-01T17:36:46+00:00

Guilhem Moulin
guilhem@fripost.org

2017-07-01T17:36:46+00:00

7a4e51344423ee3309c258087a69dac29bf30b51












webserver: improve serving logic for ACME challenge responses.
2017-06-29T13:03:02+00:00

Guilhem Moulin
guilhem@fripost.org

2017-06-29T12:53:40+00:00

97b4aad955ea816d7cc2273c1fd85fe139ec6207

In particular, we now return "403 Forbidden" for
/.well-known/acme-challenge/





In particular, we now return "403 Forbidden" for
/.well-known/acme-challenge/







webserver: open ACME challenge files with O_NOFOLLOW.
2017-06-29T10:06:35+00:00

Guilhem Moulin
guilhem@fripost.org

2017-06-29T10:06:35+00:00

a71cce0e99270492dbfa1567c046cd7db79ffd64












webserver: refuse to follow symlink when serving ACME challenge responses.
2017-06-29T08:48:39+00:00

Guilhem Moulin
guilhem@fripost.org

2017-06-29T08:48:35+00:00

15639f5b1aa607ccb4fec1a41643a3b916e0e44a












webserver: allow listening to multiple addresses.
2017-06-28T20:09:43+00:00

Guilhem Moulin
guilhem@fripost.org

2017-06-28T15:19:46+00:00

944407621f313c15f6cfd53267da1ddbdaceec9f

(Useful when dual-stack IPv4/IPv6 is not supported.)  Also, change the
default to listen to a UNIX-domain socket </var/run/lacme.socket>.

Moreover temporary iptables rules are no longer installed.  Hosts
without a public HTTP daemon listening on port 80 need to set the
'listen' option to [::] and/or 0.0.0.0, and possibly set the 'iptables'
option to Yes.





(Useful when dual-stack IPv4/IPv6 is not supported.)  Also, change the
default to listen to a UNIX-domain socket </var/run/lacme.socket>.

Moreover temporary iptables rules are no longer installed.  Hosts
without a public HTTP daemon listening on port 80 need to set the
'listen' option to [::] and/or 0.0.0.0, and possibly set the 'iptables'
option to Yes.







Add the short description in headers and manpages.
2016-06-14T11:45:59+00:00

Guilhem Moulin
guilhem@fripost.org

2016-06-14T11:45:59+00:00

2284fd825bcea047ab595bf769ef13fa763d269a