Commit message (Collapse) | Author | Age | Files | |
---|---|---|---|---|
* | Rename debian branch to debian/latest. | Guilhem Moulin | 2021-02-14 | 1 |
| | | | | For DEP-14 compliance. | |||
* | Improve user/group documentation. | Guilhem Moulin | 2021-02-12 | 1 |
| | ||||
* | Improve keyUsage documentation. | Guilhem Moulin | 2021-02-12 | 2 |
| | ||||
* | wibble | Guilhem Moulin | 2021-02-12 | 1 |
| | ||||
* | client: fail immediately when the accountd is unreachable. | Guilhem Moulin | 2021-02-12 | 2 |
| | ||||
* | Replace Types::Serialiser::true with JSON::true. | Guilhem Moulin | 2021-02-12 | 3 |
| | | | | This removes the dependency on Types::Serialiser. | |||
* | Raise client timeout from 10 to 30s. | Guilhem Moulin | 2021-02-12 | 4 |
| | ||||
* | lacme: new flag `--force`. | Guilhem Moulin | 2020-12-09 | 3 |
| | | | | | Which aliases to `--min-days=-1`, i.e., forces renewal regardless of the expiration date of existing certificates. | |||
* | Make unprivileged user/group for the internal client resp. webserver ↵ | Guilhem Moulin | 2020-12-09 | 5 |
| | | | | configurable. | |||
* | s/\.pem$/.crt/ | Guilhem Moulin | 2020-12-09 | 1 |
| | ||||
* | Fix broken URLs. | Guilhem Moulin | 2020-12-09 | 1 |
| | ||||
* | documentation: emphasize default values in the config file. | Guilhem Moulin | 2020-12-09 | 3 |
| | | | | | Also, move the most common options ('hash', 'keyUsage', 'CAfile', 'min-days') to the default section. | |||
* | documentation: clarify that "file:/path/to/account.key" can point to a ↵ | Guilhem Moulin | 2020-12-09 | 3 |
| | | | | symmetrically-encrypted private key. | |||
* | wibble | Guilhem Moulin | 2020-12-09 | 2 |
| | ||||
* | documentation: suggest to generate private key material with genpkey(1ssl). | Guilhem Moulin | 2020-12-09 | 4 |
| | | | | | * Also suggest a command to generate an ECDSA key not just RSA. * Hint at which key algorithms are supported. | |||
* | lacme: delay webserver socket shutdown. | Guilhem Moulin | 2020-12-09 | 2 |
| | | | | | | | | | | | To after the process has terminated. This solves a race condition spewing accept: Invalid argument at /usr/libexec/lacme/webserver line 80. (harmless) errors. Closes: deb#970458 | |||
* | Use upstream certicate chain instead of an hardcoded one.upstream/0.7 | Guilhem Moulin | 2020-11-26 | 14 |
| | | | | | | | | | | | | | This is a breaking change. The certificate indicated by 'CAfile' is no longer used as is in 'certificate-chain' (along with the leaf cert). The chain returned by the ACME v2 endpoint is used instead. This allows for more flexbility with respect to key/CA rotation, cf. https://letsencrypt.org/2020/11/06/own-two-feet.html and https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018 Moreover 'CAfile' now defaults to @@datadir@@/lacme/ca-certificates.crt which is a concatenation of all known active CA certificates (which includes the previous default). | |||
* | README: Link to /man/lacme.8.html | Guilhem Moulin | 2020-08-04 | 1 |
| | ||||
* | Improve long command wrapping. | Guilhem Moulin | 2020-08-04 | 1 |
| | ||||
* | New release 0.6.1upstream/0.6.1 | Guilhem Moulin | 2020-08-04 | 1 |
| | ||||
* | Upgrade links to secure HTTP. | Guilhem Moulin | 2020-08-04 | 7 |
| | ||||
* | Ignore [accountd] section from lacme.conf when the --socket option is defined. | Guilhem Moulin | 2020-08-04 | 4 |
| | | | | | This allows remotely-controlled lacme processes being controlled without modifying an config files. See https://bugs.debian.org/955767 . | |||
* | Makefile: Use variables for target directories etc. | Guilhem Moulin | 2020-08-04 | 11 |
| | ||||
* | Adapt Apache2 snippet to Apache2 2.4. | Guilhem Moulin | 2020-08-04 | 2 |
| | ||||
* | Change default libexec dir from /usr/lib/lacme to /usr/libexec/lacme. | Guilhem Moulin | 2020-08-03 | 5 |
| | ||||
* | Install lacme manpage to section 8. | Guilhem Moulin | 2020-08-03 | 6 |
| | | | | As it's a system command, see hier(7) for details. | |||
* | Makefile: Major refactoring, add install and uninstall targets. | Guilhem Moulin | 2020-08-03 | 5 |
| | | | | Honor BUILD_DOCDIR and DESTDIR variables. | |||
* | factor out jq-script from Makefile | Benjamin Tietz | 2020-08-03 | 2 |
| | | | | the script is just a plain copy, but now accessible without make | |||
* | Use /run for the listening socket of the webserver component. | Guilhem Moulin | 2019-08-22 | 6 |
| | ||||
* | New release 0.6.upstream/0.6 | Guilhem Moulin | 2019-08-21 | 1 |
| | ||||
* | lacme: new option 'account --deactivate' | Guilhem Moulin | 2019-08-21 | 3 |
| | | | | For client-initiated account deactivation. See RFC 8555 sec. 7.3.6. | |||
* | Issue GET and POST-as-GET requests (RFC 8555 sec. 6.3) | Guilhem Moulin | 2019-08-21 | 2 |
| | | | | | For the authorizations, order and certificate URLs. See RFC 8555 sec. 7.1. | |||
* | Link to RFC 8555 instead of the ACME I-D URL. | Guilhem Moulin | 2019-08-21 | 4 |
| | ||||
* | Call iptables binaries from /usr/sbin not /sbin. | Guilhem Moulin | 2019-08-21 | 2 |
| | | | | | | | As of Buster this is the case, and the maintainer plans to drop compatibility symlinks once Bullseye is released. See /usr/share/doc/iptables/NEWS.Debian.gz . | |||
* | [git] ignore vims' swapfiles | Benjamin Tietz | 2019-01-21 | 1 |
| | ||||
* | lacme, client: new dependency Date::Parse. | Guilhem Moulin | 2019-01-21 | 3 |
| | ||||
* | client: poll order URL instead of each authz URL successively. | Guilhem Moulin | 2019-01-21 | 3 |
| | | | | We were blocking on https://github.com/letsencrypt/boulder/issues/3530 . | |||
* | New dependency: perl module Types::Serialiserupstream/0.5 | Guilhem Moulin | 2018-05-09 | 1 |
| | ||||
* | Use ACME v2 endpoints | Guilhem Moulin | 2018-04-27 | 6 |
| | | | | https://tools.ietf.org/html/draft-ietf-acme-acme-12 | |||
* | Fix manpage generation with pandoc >=2.1 | Guilhem Moulin | 2018-04-26 | 2 |
| | ||||
* | Copy snippets/*.conf to /etc/lacmeupstream/0.4 | Guilhem Moulin | 2017-07-28 | 2 |
| | ||||
* | Fix generation of manpages with pandoc >=1.18 | Guilhem Moulin | 2017-07-28 | 2 |
| | ||||
* | Update copyright infoupstream/0.3 | Guilhem Moulin | 2017-07-09 | 6 |
| | ||||
* | Bind webserver to /var/run/lacme-www.socket by default. | Guilhem Moulin | 2017-07-08 | 6 |
| | ||||
* | mv config/{apache2.conf,nginx.conf} snippets/ | Guilhem Moulin | 2017-07-08 | 2 |
| | ||||
* | lacme: Specify minimum required Socket version 1.95. | Guilhem Moulin | 2017-07-01 | 2 |
| | ||||
* | Specify minimum required Perl versions. | Guilhem Moulin | 2017-07-01 | 5 |
| | ||||
* | Avoid hash slices. | Guilhem Moulin | 2017-07-01 | 1 |
| | | | | That's mostly what prevents us from supporting Perl older than 5.20. | |||
* | Ensure fdopen is called with an integer. | Guilhem Moulin | 2017-07-01 | 4 |
| | ||||
* | wibble | Guilhem Moulin | 2017-06-30 | 1 |
| |