diff options
Diffstat (limited to 'debian/changelog')
| -rw-r--r-- | debian/changelog | 52 |
1 files changed, 52 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index f359a55..ca3e7b3 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,55 @@ +lacme (0.8.3-1) unstable; urgency=high + + * New upstream bugfix release. + + Fix post-issuance validation logic. We avoid pinning the intermediate + certificates in the bundle and instead validate the leaf certificate + with intermediates supplied during issuance as untrusted (used for chain + building only). Only the root certificates are used as trust anchor. + Not pinning intermediate certificates is in line with Let's Encrypt's + latest recommendations. + Closes: #1072847 + + Pass `-in /dev/stdin` option to openssl(1) to avoid warning with OpenSSL + 3.2 or later. + + Fix test suite to account for Let's Encrypt's (staging) ACME server + changes. + * d/control: Update Standards-Version to 4.7.0 (no changes necessary). + + -- Guilhem Moulin <guilhem@debian.org> Thu, 13 Jun 2024 17:56:33 +0200 + +lacme (0.8.2-1) unstable; urgency=medium + + * New upstream bugfix release. + + client: Handle "ready" → "processing" → "valid" status change during + newOrder, instead of just "ready" → "valid". The latter may be what we + observe when the server is fast enough, but according to RFC 8555 sec. + 7.1.6 the state actually transitions via "processing" state and we need + to account for that. Closes: #1034834. + + Test suite: Point stretch's archive URL to archive.d.o. + + -- Guilhem Moulin <guilhem@debian.org> Tue, 25 Apr 2023 20:08:21 +0200 + +lacme (0.8.1-1) unstable; urgency=medium + + [ Guilhem Moulin ] + * New upstream bugfix release. + * Salsa CI: Remove default configuration file. + * d/control: Improve long package descriptions. + * Set field Upstream-Name in debian/copyright. + * Update standards version to 4.6.2, no changes needed. + + [ Debian Janitor ] + * d/control: Add 'Multi-Arch: foreign' mark. + + -- Guilhem Moulin <guilhem@debian.org> Wed, 25 Jan 2023 03:33:11 +0100 + +lacme (0.8.0-2) unstable; urgency=medium + + * d/lacme.postrm: Don't delete system users on purge. There might be files + on disk owned by _lacme-client when 'challenge-directory' is set in the + configuration (closes: #988032). + + -- Guilhem Moulin <guilhem@debian.org> Tue, 04 May 2021 01:37:13 +0200 + lacme (0.8.0-1) unstable; urgency=low * New upstream release (closes: #970458, #970800, #972456). |