diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2021-02-16 17:24:31 +0100 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2021-02-18 00:42:32 +0100 |
| commit | 2efd4458f4db7f489ecc81f4039b8e8103edf9d9 (patch) | |
| tree | 96c97c31ae1edd6b2b5bc746d1adf4d7eb8fad96 /Changelog | |
| parent | c75bc6c37840b8fc2c57424d24c06a0bfe399de6 (diff) | |
Don't load configuration files from ./ by default.
This is a breaking change: lacme(8) resp. lacme-accountd(1) no longer
consider ./lacme.conf resp. ./lacme-accountd.conf as default location
for the configuration file. Doing so has security implications when
running these program from insecure directories.
Diffstat (limited to 'Changelog')
| -rw-r--r-- | Changelog | 3 |
1 files changed, 3 insertions, 0 deletions
@@ -19,6 +19,9 @@ lacme (0.7.1) upstream; validate provided X.509 chains using that self-contained bundle, regardless of which CAs is marqued as trusted under /etc/ssl/certs. This change bumps the minimum OpenSSL version to 1.1.0. + * Breaking change: lacme(8) resp. lacme-accountd(1) no longer consider + ./lacme.conf resp. ./lacme-accountd.conf as default location for the + configuration file. + Improve nginx/apache2 snippets for direct serving of challenge files (with the new 'challenge-directory' logic symlinks can be disabled). + Add support for TLS Feature extension from RFC 7633; this is mostly |