Merge tag 'upstream/0.7' into debian

New release 0.7

1 files changed, 14 insertions, 0 deletions

diff --git a/Changelog b/Changelog
index b71cce7..13db236 100644
--- a/Changelog
+++ b/Changelog
@@ -1,3 +1,17 @@
+lacme (0.7) upstream;
+
+ * Breaking change: the certificate indicated by 'CAfile' is no longer
+   used as is in 'certificate-chain' (along with the leaf cert).  The
+   chain returned by the ACME v2 endpoint is used instead.  This allows
+   for more flexibility with respect to key/CA rotation, cf.
+   https://letsencrypt.org/2020/11/06/own-two-feet.html and
+   https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018
+ + 'CAfile' now defaults to @@datadir@@/lacme/ca-certificates.crt which
+   is a concatenation of all known active CA certificates (which
+   includes the previous default).
+
+ -- Guilhem Moulin <guilhem@fripost.org>  Wed, 25 Nov 2020 23:39:39 +0100
+
 lacme (0.6.1) upstream;
 
  + Adapt Apache2 snippet to Apache2 2.4.