aboutsummaryrefslogtreecommitdiffstats
path: root/Changelog
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2021-02-16 17:24:31 +0100
committerGuilhem Moulin <guilhem@fripost.org>2021-02-18 00:42:32 +0100
commit2efd4458f4db7f489ecc81f4039b8e8103edf9d9 (patch)
tree96c97c31ae1edd6b2b5bc746d1adf4d7eb8fad96 /Changelog
parentc75bc6c37840b8fc2c57424d24c06a0bfe399de6 (diff)
Don't load configuration files from ./ by default.
This is a breaking change: lacme(8) resp. lacme-accountd(1) no longer consider ./lacme.conf resp. ./lacme-accountd.conf as default location for the configuration file. Doing so has security implications when running these program from insecure directories.
Diffstat (limited to 'Changelog')
-rw-r--r--Changelog3
1 files changed, 3 insertions, 0 deletions
diff --git a/Changelog b/Changelog
index efefb1e..2ccb0e1 100644
--- a/Changelog
+++ b/Changelog
@@ -19,6 +19,9 @@ lacme (0.7.1) upstream;
validate provided X.509 chains using that self-contained bundle,
regardless of which CAs is marqued as trusted under /etc/ssl/certs.
This change bumps the minimum OpenSSL version to 1.1.0.
+ * Breaking change: lacme(8) resp. lacme-accountd(1) no longer consider
+ ./lacme.conf resp. ./lacme-accountd.conf as default location for the
+ configuration file.
+ Improve nginx/apache2 snippets for direct serving of challenge files
(with the new 'challenge-directory' logic symlinks can be disabled).
+ Add support for TLS Feature extension from RFC 7633; this is mostly