| Commit message (Collapse) | Author | Age | Files | |
|---|---|---|---|---|
| * | Ignore [accountd] section from lacme.conf when the --socket option is defined. | Guilhem Moulin | 2020-08-04 | 1 |
| | | | | | | This allows remotely-controlled lacme processes being controlled without modifying an config files. See https://bugs.debian.org/955767 . | |||
| * | Makefile: Use variables for target directories etc. | Guilhem Moulin | 2020-08-04 | 1 |
| | | ||||
| * | Adapt Apache2 snippet to Apache2 2.4. | Guilhem Moulin | 2020-08-04 | 1 |
| | | ||||
| * | Change default libexec dir from /usr/lib/lacme to /usr/libexec/lacme. | Guilhem Moulin | 2020-08-03 | 1 |
| | | ||||
| * | Install lacme manpage to section 8. | Guilhem Moulin | 2020-08-03 | 1 |
| | | | | | As it's a system command, see hier(7) for details. | |||
| * | Makefile: Major refactoring, add install and uninstall targets. | Guilhem Moulin | 2020-08-03 | 1 |
| | | | | | Honor BUILD_DOCDIR and DESTDIR variables. | |||
| * | Use /run for the listening socket of the webserver component. | Guilhem Moulin | 2019-08-22 | 1 |
| | | ||||
| * | New release 0.6.upstream/0.6 | Guilhem Moulin | 2019-08-21 | 1 |
| | | ||||
| * | lacme: new option 'account --deactivate' | Guilhem Moulin | 2019-08-21 | 1 |
| | | | | | For client-initiated account deactivation. See RFC 8555 sec. 7.3.6. | |||
| * | Issue GET and POST-as-GET requests (RFC 8555 sec. 6.3) | Guilhem Moulin | 2019-08-21 | 1 |
| | | | | | | For the authorizations, order and certificate URLs. See RFC 8555 sec. 7.1. | |||
| * | Link to RFC 8555 instead of the ACME I-D URL. | Guilhem Moulin | 2019-08-21 | 1 |
| | | ||||
| * | Call iptables binaries from /usr/sbin not /sbin. | Guilhem Moulin | 2019-08-21 | 1 |
| | | | | | | | | As of Buster this is the case, and the maintainer plans to drop compatibility symlinks once Bullseye is released. See /usr/share/doc/iptables/NEWS.Debian.gz . | |||
| * | lacme, client: new dependency Date::Parse. | Guilhem Moulin | 2019-01-21 | 1 |
| | | ||||
| * | client: poll order URL instead of each authz URL successively. | Guilhem Moulin | 2019-01-21 | 1 |
| | | | | | We were blocking on https://github.com/letsencrypt/boulder/issues/3530 . | |||
| * | Use ACME v2 endpoints | Guilhem Moulin | 2018-04-27 | 1 |
| | | | | | https://tools.ietf.org/html/draft-ietf-acme-acme-12 | |||
| * | Fix manpage generation with pandoc >=2.1 | Guilhem Moulin | 2018-04-26 | 1 |
| | | ||||
| * | Copy snippets/*.conf to /etc/lacmeupstream/0.4 | Guilhem Moulin | 2017-07-28 | 1 |
| | | ||||
| * | Fix generation of manpages with pandoc >=1.18 | Guilhem Moulin | 2017-07-28 | 1 |
| | | ||||
| * | Update copyright infoupstream/0.3 | Guilhem Moulin | 2017-07-09 | 1 |
| | | ||||
| * | Bind webserver to /var/run/lacme-www.socket by default. | Guilhem Moulin | 2017-07-08 | 1 |
| | | ||||
| * | lacme: Specify minimum required Socket version 1.95. | Guilhem Moulin | 2017-07-01 | 1 |
| | | ||||
| * | Specify minimum required Perl versions. | Guilhem Moulin | 2017-07-01 | 1 |
| | | ||||
| * | Ensure fdopen is called with an integer. | Guilhem Moulin | 2017-07-01 | 1 |
| | | ||||
| * | Provide apache2 configuration snippet. | Guilhem Moulin | 2017-06-29 | 1 |
| | | ||||
| * | Remove potential race when creating ACME challenge response files. | Guilhem Moulin | 2017-06-29 | 1 |
| | | ||||
| * | lacme(1), lacme-accountd(1): fix version number. | Guilhem Moulin | 2017-06-29 | 1 |
| | | ||||
| * | webserver: refuse to follow symlink when serving ACME challenge responses. | Guilhem Moulin | 2017-06-29 | 1 |
| | | ||||
| * | Provide nginx configuration snippet. | Guilhem Moulin | 2017-06-28 | 1 |
| | | ||||
| * | Change the default 'min-days' from 10 to 21. | Guilhem Moulin | 2017-06-28 | 1 |
| | | | | | | | This avoids expiration notices from Let's Encrypt when auto-renewal is done by a cronjob: Let's Encrypt sends a notice 19 (then 9) days before expiration. | |||
| * | webserver: allow listening to multiple addresses. | Guilhem Moulin | 2017-06-28 | 1 |
| | | | | | | | | | | | (Useful when dual-stack IPv4/IPv6 is not supported.) Also, change the default to listen to a UNIX-domain socket </var/run/lacme.socket>. Moreover temporary iptables rules are no longer installed. Hosts without a public HTTP daemon listening on port 80 need to set the 'listen' option to [::] and/or 0.0.0.0, and possibly set the 'iptables' option to Yes. | |||
| * | new-cert: create certificate files atomically. | Guilhem Moulin | 2017-02-24 | 1 |
| | | ||||
| * | new-cert: mark basicConstraints and keyUsage x509v3 extensions as critical ↵ | Guilhem Moulin | 2017-02-22 | 1 |
| | | | | | | | | in the CSR. Boulder's issue #565 "Golang errors on extensions marked critical" was fixed upstream, cf. https://github.com/letsencrypt/boulder/issues/565 . | |||
| * | Changelog: prefix bugfixes with '+'. | Guilhem Moulin | 2017-02-22 | 1 |
| | | ||||
| * | new-cert: new CLI option "min-days" | Guilhem Moulin | 2017-02-19 | 1 |
| | | ||||
| * | new-cert: sort section names if not passed explicitely. | Guilhem Moulin | 2017-02-19 | 1 |
| | | ||||
| * | Ensure lacme's config file descriptor has the FD_CLOEXEC bit set. | Guilhem Moulin | 2017-02-19 | 1 |
| | | ||||
| * | config-cert: import the default section of files already read. | Guilhem Moulin | 2017-02-19 | 1 |
| | | ||||
| * | s/lacme-certs.d/lacme-certs.conf.d/upstream/0.2 | Guilhem Moulin | 2016-12-05 | 1 |
| | | ||||
| * | "config-certs" now points to a list of files or directories. | Guilhem Moulin | 2016-12-05 | 1 |
| | | ||||
| * | Prepare new release. | Guilhem Moulin | 2016-12-03 | 1 |
| | | ||||
| * | Add a Changelog. | Guilhem Moulin | 2016-06-14 | 1 |
 |
index : lacme | |
| Small ACME client written with process isolation and minimal privileges in mind | Guilhem Moulin |
| aboutsummaryrefslogtreecommitdiffstats |