lacme - Small ACME client written with process isolation and minimal privileges in mind

	Commit message (Collapse)	Author	Age	Files
...
*	documentation: suggest to generate private key material with genpkey(1ssl).	Guilhem Moulin	2020-12-09	4
\| \| \| \| \|	* Also suggest a command to generate an ECDSA key not just RSA. * Hint at which key algorithms are supported.
*	lacme: delay webserver socket shutdown.	Guilhem Moulin	2020-12-09	2
\| \| \| \| \| \| \| \| \| \| \|	To after the process has terminated. This solves a race condition spewing accept: Invalid argument at /usr/libexec/lacme/webserver line 80. (harmless) errors. Closes: deb#970458
*	Use upstream certicate chain instead of an hardcoded one.upstream/0.7	Guilhem Moulin	2020-11-26	14
\| \| \| \| \| \| \| \| \| \| \| \| \|	This is a breaking change. The certificate indicated by 'CAfile' is no longer used as is in 'certificate-chain' (along with the leaf cert). The chain returned by the ACME v2 endpoint is used instead. This allows for more flexbility with respect to key/CA rotation, cf. https://letsencrypt.org/2020/11/06/own-two-feet.html and https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018 Moreover 'CAfile' now defaults to @@datadir@@/lacme/ca-certificates.crt which is a concatenation of all known active CA certificates (which includes the previous default).
*	README: Link to /man/lacme.8.html	Guilhem Moulin	2020-08-04	1
\|
*	Improve long command wrapping.	Guilhem Moulin	2020-08-04	1
\|
*	New release 0.6.1upstream/0.6.1	Guilhem Moulin	2020-08-04	1
\|
*	Upgrade links to secure HTTP.	Guilhem Moulin	2020-08-04	7
\|
*	Ignore [accountd] section from lacme.conf when the --socket option is defined.	Guilhem Moulin	2020-08-04	4
\| \| \| \| \|	This allows remotely-controlled lacme processes being controlled without modifying an config files. See https://bugs.debian.org/955767 .
*	Makefile: Use variables for target directories etc.	Guilhem Moulin	2020-08-04	11
\|
*	Adapt Apache2 snippet to Apache2 2.4.	Guilhem Moulin	2020-08-04	2
\|
*	Change default libexec dir from /usr/lib/lacme to /usr/libexec/lacme.	Guilhem Moulin	2020-08-03	5
\|
*	Install lacme manpage to section 8.	Guilhem Moulin	2020-08-03	6
\| \| \| \|	As it's a system command, see hier(7) for details.
*	Makefile: Major refactoring, add install and uninstall targets.	Guilhem Moulin	2020-08-03	5
\| \| \| \|	Honor BUILD_DOCDIR and DESTDIR variables.
*	factor out jq-script from Makefile	Benjamin Tietz	2020-08-03	2
\| \| \| \|	the script is just a plain copy, but now accessible without make
*	Use /run for the listening socket of the webserver component.	Guilhem Moulin	2019-08-22	6
\|
*	New release 0.6.upstream/0.6	Guilhem Moulin	2019-08-21	1
\|
*	lacme: new option 'account --deactivate'	Guilhem Moulin	2019-08-21	3
\| \| \| \|	For client-initiated account deactivation. See RFC 8555 sec. 7.3.6.
*	Issue GET and POST-as-GET requests (RFC 8555 sec. 6.3)	Guilhem Moulin	2019-08-21	2
\| \| \| \| \|	For the authorizations, order and certificate URLs. See RFC 8555 sec. 7.1.
*	Link to RFC 8555 instead of the ACME I-D URL.	Guilhem Moulin	2019-08-21	4
\|
*	Call iptables binaries from /usr/sbin not /sbin.	Guilhem Moulin	2019-08-21	2
\| \| \| \| \| \| \|	As of Buster this is the case, and the maintainer plans to drop compatibility symlinks once Bullseye is released. See /usr/share/doc/iptables/NEWS.Debian.gz .
*	[git] ignore vims' swapfiles	Benjamin Tietz	2019-01-21	1
\|
*	lacme, client: new dependency Date::Parse.	Guilhem Moulin	2019-01-21	3
\|
*	client: poll order URL instead of each authz URL successively.	Guilhem Moulin	2019-01-21	3
\| \| \| \|	We were blocking on https://github.com/letsencrypt/boulder/issues/3530 .
*	New dependency: perl module Types::Serialiserupstream/0.5	Guilhem Moulin	2018-05-09	1
\|
*	Use ACME v2 endpoints	Guilhem Moulin	2018-04-27	6
\| \| \| \|	https://tools.ietf.org/html/draft-ietf-acme-acme-12
*	Fix manpage generation with pandoc >=2.1	Guilhem Moulin	2018-04-26	2
\|
*	Copy snippets/*.conf to /etc/lacmeupstream/0.4	Guilhem Moulin	2017-07-28	2
\|
*	Fix generation of manpages with pandoc >=1.18	Guilhem Moulin	2017-07-28	2
\|
*	Update copyright infoupstream/0.3	Guilhem Moulin	2017-07-09	6
\|
*	Bind webserver to /var/run/lacme-www.socket by default.	Guilhem Moulin	2017-07-08	6
\|
*	mv config/{apache2.conf,nginx.conf} snippets/	Guilhem Moulin	2017-07-08	2
\|
*	lacme: Specify minimum required Socket version 1.95.	Guilhem Moulin	2017-07-01	2
\|
*	Specify minimum required Perl versions.	Guilhem Moulin	2017-07-01	5
\|
*	Avoid hash slices.	Guilhem Moulin	2017-07-01	1
\| \| \| \|	That's mostly what prevents us from supporting Perl older than 5.20.
*	Ensure fdopen is called with an integer.	Guilhem Moulin	2017-07-01	4
\|
*	wibble	Guilhem Moulin	2017-06-30	1
\|
*	Improve docs.	Guilhem Moulin	2017-06-29	1
\|
*	Provide apache2 configuration snippet.	Guilhem Moulin	2017-06-29	3
\|
*	webserver: improve serving logic for ACME challenge responses.	Guilhem Moulin	2017-06-29	1
\| \| \| \| \|	In particular, we now return "403 Forbidden" for /.well-known/acme-challenge/
*	webserver: open ACME challenge files with O_NOFOLLOW.	Guilhem Moulin	2017-06-29	1
\|
*	Remove potential race when creating ACME challenge response files.	Guilhem Moulin	2017-06-29	2
\|
*	lacme(1), lacme-accountd(1): fix version number.	Guilhem Moulin	2017-06-29	3
\|
*	webserver: refuse to follow symlink when serving ACME challenge responses.	Guilhem Moulin	2017-06-29	3
\|
*	wibble	Guilhem Moulin	2017-06-29	1
\|
*	wibble	Guilhem Moulin	2017-06-29	1
\|
*	Improve docs.	Guilhem Moulin	2017-06-29	2
\|
*	Improve docs.	Guilhem Moulin	2017-06-28	1
\|
*	Update README.	Guilhem Moulin	2017-06-28	1
\|
*	Provide nginx configuration snippet.	Guilhem Moulin	2017-06-28	2
\|
*	Change the default 'min-days' from 10 to 21.	Guilhem Moulin	2017-06-28	4
\| \| \| \| \| \|	This avoids expiration notices from Let's Encrypt when auto-renewal is done by a cronjob: Let's Encrypt sends a notice 19 (then 9) days before expiration.