aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@debian.org>2024-06-14 01:21:05 +0200
committerGuilhem Moulin <guilhem@debian.org>2024-06-14 01:45:16 +0200
commitc67e0904613dc0e5f1937a511be4198274d8111d (patch)
treed35f2708d154d73eb2473fa0a8545f53167d1369
parent80e4e3f08ac66871fd953ab4806e1be6f5f130b0 (diff)
Update changelog for 0.8.2-1+deb12u1 release
-rw-r--r--debian/changelog14
1 files changed, 14 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog
index 733c62c..9a0e819 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,17 @@
+lacme (0.8.2-1+deb12u1) bookworm; urgency=medium
+
+ * Backport upstream patches to fix post-issuance validation logic.
+ We avoid pining the intermediate certificates in the bundle and instead
+ validate the leaf certificate with intermediates supplied during issuance
+ as untrusted (used for chain building only). Only the root certificates
+ are used as trust anchor. Not pining intermediate certificates is in line
+ with Let's Encrypt's latest recommendations.
+ Closes: #1072847
+ * Adjust test suite against current Let's Encrypt staging environment.
+ * d/gbp.conf: Set 'debian-branch = debian/bookworm'.
+
+ -- Guilhem Moulin <guilhem@debian.org> Fri, 14 Jun 2024 01:20:13 +0200
+
lacme (0.8.2-1) unstable; urgency=medium
* New upstream bugfix release.