aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--debian/lacme-accountd.NEWS8
-rw-r--r--debian/lacme.NEWS19
2 files changed, 27 insertions, 0 deletions
diff --git a/debian/lacme-accountd.NEWS b/debian/lacme-accountd.NEWS
new file mode 100644
index 0000000..531c8f8
--- /dev/null
+++ b/debian/lacme-accountd.NEWS
@@ -0,0 +1,8 @@
+lacme (0.8.0-1) UNRELEASED; urgency=medium
+
+ lacme-accountd(1) now loads its configuration file from
+ /etc/lacme/lacme-accountd.conf when running as root, and from
+ $XDG_CONFIG_HOME/lacme/lacme-accountd.conf otherwise. There is no lookup in
+ the current directory anymore, nor fallback lookup to /etc.
+
+ -- Guilhem Moulin <guilhem@debian.org> Mon, 22 Feb 2021 02:00:00 +0100
diff --git a/debian/lacme.NEWS b/debian/lacme.NEWS
index d20acdc..91ddd30 100644
--- a/debian/lacme.NEWS
+++ b/debian/lacme.NEWS
@@ -1,3 +1,22 @@
+lacme (0.8.0-1) UNRELEASED; urgency=medium
+
+ The internal webserver now runs as system user _lacme-www:nogroup instead of
+ www-data:www-data by default. The internal ACME client now runs as system
+ user _lacme-client:nogroup instead of nobody:nogroup by default. Both
+ settings are configurable in the lacme(8) configuration file.
+
+ lacme(8) loads its configuration file from /etc/lacme/lacme.conf when
+ running as root, and from $XDG_CONFIG_HOME/lacme/lacme.conf otherwise.
+ There is no lookup in the current directory anymore, nor fallback lookup to
+ /etc.
+
+ 'challenge-directory' now needs to be set to an *existing* directory
+ (writable by the lacme client user). Since lacme(8) spawns a builtin
+ webserver by default the change only affects configurations with a custom
+ 'challenge-directory' setting.
+
+ -- Guilhem Moulin <guilhem@debian.org> Mon, 22 Feb 2021 02:00:00 +0100
+
lacme (0.7-1) unstable; urgency=high
The certificate indicated by 'CAfile' is no longer used as is in