index
:
lacme
debian/bookworm
debian/bullseye
debian/buster
debian/latest
debian/wheezy
master
Small ACME client written with process isolation and minimal privileges in mind
Guilhem Moulin
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
Changelog
Commit message (
Expand
)
Author
Age
Files
*
lacme: pass a temporary JSON file with the client configuration to the intern...
Guilhem Moulin
2021-02-25
1
*
lacme: split certificates using Net::SSLeay::PEM_* instead of calling openssl.
Guilhem Moulin
2021-02-25
1
*
lacme: Return an error when the 'mode'/'chown' isn't a number.
Guilhem Moulin
2021-02-24
1
*
lacme: Add 'owner' resp. 'mode' as (prefered) alias for 'chown' resp. 'chmod'.
Guilhem Moulin
2021-02-24
1
*
lacme: Default mode for certificate(-chain) creation is 0644 minus umask rest...
Guilhem Moulin
2021-02-24
1
*
lacme: Don't write certificate(-chain) file on chown/chmod failure.
Guilhem Moulin
2021-02-24
1
*
If restricting access via umask() fails, don't include errno in the error mes...
Guilhem Moulin
2021-02-24
1
*
lacme: Ignore empty values in 'chown'/'chmod'/'certificate'/'certificate-chain'.
Guilhem Moulin
2021-02-24
1
*
tests/cert-install: Include tests for failing chown(2).
Guilhem Moulin
2021-02-24
1
*
tests/drop-privileges: Ensure failure to drop privileges yields an error.
Guilhem Moulin
2021-02-24
1
*
lacme: When getpwnam()/getgrnam()'s errno is 0, exclude it from error messages.
Guilhem Moulin
2021-02-24
1
*
lacme-accountd: Refactor logging logic.
Guilhem Moulin
2021-02-23
1
*
lacme-accountd: don't log debug messages unless --debug is set.
Guilhem Moulin
2021-02-23
1
*
lacme-accountd: Refuse to sign JWS with an invalid Protected Header.
Guilhem Moulin
2021-02-22
1
*
lacme-account: Improve log messages.
Guilhem Moulin
2021-02-22
1
*
In lacme's the [accountd] config, let lacme-accountd(1) do the %-expansion fo...
Guilhem Moulin
2021-02-22
1
*
Prepare new release v0.8.0.
v0.8.0
Guilhem Moulin
2021-02-22
1
*
client: Print Terms of Service URL for 'account' command.
Guilhem Moulin
2021-02-22
1
*
lacme-accountd(1): new setting 'keyid'.
Guilhem Moulin
2021-02-22
1
*
accountd: Pass JWA and JWK thumbprint via extended greeting data.
Guilhem Moulin
2021-02-21
1
*
lacme-accountd: new setting 'logfile' to log signature requests.
Guilhem Moulin
2021-02-21
1
*
lacme-accountd(1): base64url-decode incoming signature requests.
Guilhem Moulin
2021-02-21
1
*
Document `lacme-accountd --stdio`.
Guilhem Moulin
2021-02-20
1
*
Add %-specifiers support.
Guilhem Moulin
2021-02-20
1
*
Remove dependency on List::Util (core module).
Guilhem Moulin
2021-02-20
1
*
Deprecate setting 'privkey' in [accountd] section of the lacme(8) configurati...
Guilhem Moulin
2021-02-20
1
*
lacme(8)'s 'config' option in the [accountd] section no longer have a default...
Guilhem Moulin
2021-02-20
1
*
Add test suite against Let's Encrypt's staging environment.
Guilhem Moulin
2021-02-20
1
*
Use File::Basename::dirname().
Guilhem Moulin
2021-02-20
1
*
accountd: replace internal option --conn-fd=FD with flag --stdio.
Guilhem Moulin
2021-02-18
1
*
Split client/webserver/accountd commands on whitespace.
Guilhem Moulin
2021-02-18
1
*
Set the DEBUG environment variable to 0/1 instead of ""/1.
Guilhem Moulin
2021-02-18
1
*
Use 'acme-challenge.XXXXXXXXXX' as template for the temporary ACME challenge ...
Guilhem Moulin
2021-02-18
1
*
webserver: reopen stdin from /dev/null.
Guilhem Moulin
2021-02-18
1
*
Split Nginx and Apapche2 static configuration snippets into seperate files.
Guilhem Moulin
2021-02-18
1
*
Sanitize environment when spawning children.
Guilhem Moulin
2021-02-18
1
*
Consolidate error messages for consistency.
Guilhem Moulin
2021-02-18
1
*
client: avoid "Use of uninitialized value in pattern match (m//)" perl warnings.
Guilhem Moulin
2021-02-18
1
*
Makefile: set executable bit for $(bindir)/lacme-accountd and $(sbindir)/lacme.
Guilhem Moulin
2021-02-18
1
*
Don't load configuration files from ./ by default.
Guilhem Moulin
2021-02-18
1
*
client: use "lacme-client/$VERSION" as User-Agent header.
Guilhem Moulin
2021-02-18
1
*
Add support for TLS Feature extension from RFC 7633.
Guilhem Moulin
2021-02-15
1
*
Add (self-signed) ISRG Roots to the CA bundle.
Guilhem Moulin
2021-02-15
1
*
Improve nginx/apache2 snippets for direct serving of challenge files.
Guilhem Moulin
2021-02-14
1
*
challenge-directory now needs to be set to an *existing* directory.
Guilhem Moulin
2021-02-14
1
*
client: fail immediately when the accountd is unreachable.
Guilhem Moulin
2021-02-12
1
*
Replace Types::Serialiser::true with JSON::true.
Guilhem Moulin
2021-02-12
1
*
Raise client timeout from 10 to 30s.
Guilhem Moulin
2021-02-12
1
*
lacme: new flag `--force`.
Guilhem Moulin
2020-12-09
1
*
Make unprivileged user/group for the internal client resp. webserver configur...
Guilhem Moulin
2020-12-09
1
[next]