aboutsummaryrefslogtreecommitdiffstats
path: root/Changelog
Commit message (Expand)AuthorAgeFiles
* lacme: pass a temporary JSON file with the client configuration to the intern...HEADmasterGuilhem Moulin2021-02-251
* lacme: split certificates using Net::SSLeay::PEM_* instead of calling openssl.Guilhem Moulin2021-02-251
* lacme: Return an error when the 'mode'/'chown' isn't a number.Guilhem Moulin2021-02-241
* lacme: Add 'owner' resp. 'mode' as (prefered) alias for 'chown' resp. 'chmod'.Guilhem Moulin2021-02-241
* lacme: Default mode for certificate(-chain) creation is 0644 minus umask rest...Guilhem Moulin2021-02-241
* lacme: Don't write certificate(-chain) file on chown/chmod failure.Guilhem Moulin2021-02-241
* If restricting access via umask() fails, don't include errno in the error mes...Guilhem Moulin2021-02-241
* lacme: Ignore empty values in 'chown'/'chmod'/'certificate'/'certificate-chain'.Guilhem Moulin2021-02-241
* tests/cert-install: Include tests for failing chown(2).Guilhem Moulin2021-02-241
* tests/drop-privileges: Ensure failure to drop privileges yields an error.Guilhem Moulin2021-02-241
* lacme: When getpwnam()/getgrnam()'s errno is 0, exclude it from error messages.Guilhem Moulin2021-02-241
* lacme-accountd: Refactor logging logic.Guilhem Moulin2021-02-231
* lacme-accountd: don't log debug messages unless --debug is set.Guilhem Moulin2021-02-231
* lacme-accountd: Refuse to sign JWS with an invalid Protected Header.Guilhem Moulin2021-02-221
* lacme-account: Improve log messages.Guilhem Moulin2021-02-221
* In lacme's the [accountd] config, let lacme-accountd(1) do the %-expansion fo...Guilhem Moulin2021-02-221
* Prepare new release v0.8.0.v0.8.0Guilhem Moulin2021-02-221
* client: Print Terms of Service URL for 'account' command.Guilhem Moulin2021-02-221
* lacme-accountd(1): new setting 'keyid'.Guilhem Moulin2021-02-221
* accountd: Pass JWA and JWK thumbprint via extended greeting data.Guilhem Moulin2021-02-211
* lacme-accountd: new setting 'logfile' to log signature requests.Guilhem Moulin2021-02-211
* lacme-accountd(1): base64url-decode incoming signature requests.Guilhem Moulin2021-02-211
* Document `lacme-accountd --stdio`.Guilhem Moulin2021-02-201
* Add %-specifiers support.Guilhem Moulin2021-02-201
* Remove dependency on List::Util (core module).Guilhem Moulin2021-02-201
* Deprecate setting 'privkey' in [accountd] section of the lacme(8) configurati...Guilhem Moulin2021-02-201
* lacme(8)'s 'config' option in the [accountd] section no longer have a default...Guilhem Moulin2021-02-201
* Add test suite against Let's Encrypt's staging environment.Guilhem Moulin2021-02-201
* Use File::Basename::dirname().Guilhem Moulin2021-02-201
* accountd: replace internal option --conn-fd=FD with flag --stdio.Guilhem Moulin2021-02-181
* Split client/webserver/accountd commands on whitespace.Guilhem Moulin2021-02-181
* Set the DEBUG environment variable to 0/1 instead of ""/1.Guilhem Moulin2021-02-181
* Use 'acme-challenge.XXXXXXXXXX' as template for the temporary ACME challenge ...Guilhem Moulin2021-02-181
* webserver: reopen stdin from /dev/null.Guilhem Moulin2021-02-181
* Split Nginx and Apapche2 static configuration snippets into seperate files.Guilhem Moulin2021-02-181
* Sanitize environment when spawning children.Guilhem Moulin2021-02-181
* Consolidate error messages for consistency.Guilhem Moulin2021-02-181
* client: avoid "Use of uninitialized value in pattern match (m//)" perl warnings.Guilhem Moulin2021-02-181
* Makefile: set executable bit for $(bindir)/lacme-accountd and $(sbindir)/lacme.Guilhem Moulin2021-02-181
* Don't load configuration files from ./ by default.Guilhem Moulin2021-02-181
* client: use "lacme-client/$VERSION" as User-Agent header.Guilhem Moulin2021-02-181
* Add support for TLS Feature extension from RFC 7633.Guilhem Moulin2021-02-151
* Add (self-signed) ISRG Roots to the CA bundle.Guilhem Moulin2021-02-151
* Improve nginx/apache2 snippets for direct serving of challenge files.Guilhem Moulin2021-02-141
* challenge-directory now needs to be set to an *existing* directory.Guilhem Moulin2021-02-141
* client: fail immediately when the accountd is unreachable.Guilhem Moulin2021-02-121
* Replace Types::Serialiser::true with JSON::true.Guilhem Moulin2021-02-121
* Raise client timeout from 10 to 30s.Guilhem Moulin2021-02-121
* lacme: new flag `--force`.Guilhem Moulin2020-12-091
* Make unprivileged user/group for the internal client resp. webserver configur...Guilhem Moulin2020-12-091