diff options
| -rw-r--r-- | debian/lacme-accountd.NEWS | 8 | ||||
| -rw-r--r-- | debian/lacme.NEWS | 19 |
2 files changed, 27 insertions, 0 deletions
diff --git a/debian/lacme-accountd.NEWS b/debian/lacme-accountd.NEWS new file mode 100644 index 0000000..531c8f8 --- /dev/null +++ b/debian/lacme-accountd.NEWS @@ -0,0 +1,8 @@ +lacme (0.8.0-1) UNRELEASED; urgency=medium + + lacme-accountd(1) now loads its configuration file from + /etc/lacme/lacme-accountd.conf when running as root, and from + $XDG_CONFIG_HOME/lacme/lacme-accountd.conf otherwise. There is no lookup in + the current directory anymore, nor fallback lookup to /etc. + + -- Guilhem Moulin <guilhem@debian.org> Mon, 22 Feb 2021 02:00:00 +0100 diff --git a/debian/lacme.NEWS b/debian/lacme.NEWS index d20acdc..91ddd30 100644 --- a/debian/lacme.NEWS +++ b/debian/lacme.NEWS @@ -1,3 +1,22 @@ +lacme (0.8.0-1) UNRELEASED; urgency=medium + + The internal webserver now runs as system user _lacme-www:nogroup instead of + www-data:www-data by default. The internal ACME client now runs as system + user _lacme-client:nogroup instead of nobody:nogroup by default. Both + settings are configurable in the lacme(8) configuration file. + + lacme(8) loads its configuration file from /etc/lacme/lacme.conf when + running as root, and from $XDG_CONFIG_HOME/lacme/lacme.conf otherwise. + There is no lookup in the current directory anymore, nor fallback lookup to + /etc. + + 'challenge-directory' now needs to be set to an *existing* directory + (writable by the lacme client user). Since lacme(8) spawns a builtin + webserver by default the change only affects configurations with a custom + 'challenge-directory' setting. + + -- Guilhem Moulin <guilhem@debian.org> Mon, 22 Feb 2021 02:00:00 +0100 + lacme (0.7-1) unstable; urgency=high The certificate indicated by 'CAfile' is no longer used as is in |