lacme - Small ACME client written with process isolation and minimal privileges in mind

	Commit message (Collapse)	Author	Age	Files
*	client: poll order URL instead of each authz URL successively.	Guilhem Moulin	2019-01-21	1
\| \| \| \|	We were blocking on https://github.com/letsencrypt/boulder/issues/3530 .
*	Use ACME v2 endpoints	Guilhem Moulin	2018-04-27	1
\| \| \| \|	https://tools.ietf.org/html/draft-ietf-acme-acme-12
*	Fix manpage generation with pandoc >=2.1	Guilhem Moulin	2018-04-26	1
\|
*	Copy snippets/*.conf to /etc/lacmeupstream/0.4	Guilhem Moulin	2017-07-28	1
\|
*	Fix generation of manpages with pandoc >=1.18	Guilhem Moulin	2017-07-28	1
\|
*	Update copyright infoupstream/0.3	Guilhem Moulin	2017-07-09	1
\|
*	Bind webserver to /var/run/lacme-www.socket by default.	Guilhem Moulin	2017-07-08	1
\|
*	lacme: Specify minimum required Socket version 1.95.	Guilhem Moulin	2017-07-01	1
\|
*	Specify minimum required Perl versions.	Guilhem Moulin	2017-07-01	1
\|
*	Ensure fdopen is called with an integer.	Guilhem Moulin	2017-07-01	1
\|
*	Provide apache2 configuration snippet.	Guilhem Moulin	2017-06-29	1
\|
*	Remove potential race when creating ACME challenge response files.	Guilhem Moulin	2017-06-29	1
\|
*	lacme(1), lacme-accountd(1): fix version number.	Guilhem Moulin	2017-06-29	1
\|
*	webserver: refuse to follow symlink when serving ACME challenge responses.	Guilhem Moulin	2017-06-29	1
\|
*	Provide nginx configuration snippet.	Guilhem Moulin	2017-06-28	1
\|
*	Change the default 'min-days' from 10 to 21.	Guilhem Moulin	2017-06-28	1
\| \| \| \| \| \|	This avoids expiration notices from Let's Encrypt when auto-renewal is done by a cronjob: Let's Encrypt sends a notice 19 (then 9) days before expiration.
*	webserver: allow listening to multiple addresses.	Guilhem Moulin	2017-06-28	1
\| \| \| \| \| \| \| \| \| \|	(Useful when dual-stack IPv4/IPv6 is not supported.) Also, change the default to listen to a UNIX-domain socket </var/run/lacme.socket>. Moreover temporary iptables rules are no longer installed. Hosts without a public HTTP daemon listening on port 80 need to set the 'listen' option to [::] and/or 0.0.0.0, and possibly set the 'iptables' option to Yes.
*	new-cert: create certificate files atomically.	Guilhem Moulin	2017-02-24	1
\|
*	new-cert: mark basicConstraints and keyUsage x509v3 extensions as critical ↵	Guilhem Moulin	2017-02-22	1
\| \| \| \| \| \| \|	in the CSR. Boulder's issue #565 "Golang errors on extensions marked critical" was fixed upstream, cf. https://github.com/letsencrypt/boulder/issues/565 .
*	Changelog: prefix bugfixes with '+'.	Guilhem Moulin	2017-02-22	1
\|
*	new-cert: new CLI option "min-days"	Guilhem Moulin	2017-02-19	1
\|
*	new-cert: sort section names if not passed explicitely.	Guilhem Moulin	2017-02-19	1
\|
*	Ensure lacme's config file descriptor has the FD_CLOEXEC bit set.	Guilhem Moulin	2017-02-19	1
\|
*	config-cert: import the default section of files already read.	Guilhem Moulin	2017-02-19	1
\|
*	s/lacme-certs.d/lacme-certs.conf.d/upstream/0.2	Guilhem Moulin	2016-12-05	1
\|
*	"config-certs" now points to a list of files or directories.	Guilhem Moulin	2016-12-05	1
\|
*	Prepare new release.	Guilhem Moulin	2016-12-03	1
\|
*	Add a Changelog.	Guilhem Moulin	2016-06-14	1