aboutsummaryrefslogtreecommitdiffstats
path: root/Changelog
Commit message (Collapse)AuthorAgeFiles
...
* Bind webserver to /var/run/lacme-www.socket by default.Guilhem Moulin2017-07-081
|
* lacme: Specify minimum required Socket version 1.95.Guilhem Moulin2017-07-011
|
* Specify minimum required Perl versions.Guilhem Moulin2017-07-011
|
* Ensure fdopen is called with an integer.Guilhem Moulin2017-07-011
|
* Provide apache2 configuration snippet.Guilhem Moulin2017-06-291
|
* Remove potential race when creating ACME challenge response files.Guilhem Moulin2017-06-291
|
* lacme(1), lacme-accountd(1): fix version number.Guilhem Moulin2017-06-291
|
* webserver: refuse to follow symlink when serving ACME challenge responses.Guilhem Moulin2017-06-291
|
* Provide nginx configuration snippet.Guilhem Moulin2017-06-281
|
* Change the default 'min-days' from 10 to 21.Guilhem Moulin2017-06-281
| | | | | | This avoids expiration notices from Let's Encrypt when auto-renewal is done by a cronjob: Let's Encrypt sends a notice 19 (then 9) days before expiration.
* webserver: allow listening to multiple addresses.Guilhem Moulin2017-06-281
| | | | | | | | | | (Useful when dual-stack IPv4/IPv6 is not supported.) Also, change the default to listen to a UNIX-domain socket </var/run/lacme.socket>. Moreover temporary iptables rules are no longer installed. Hosts without a public HTTP daemon listening on port 80 need to set the 'listen' option to [::] and/or 0.0.0.0, and possibly set the 'iptables' option to Yes.
* new-cert: create certificate files atomically.Guilhem Moulin2017-02-241
|
* new-cert: mark basicConstraints and keyUsage x509v3 extensions as critical ↵Guilhem Moulin2017-02-221
| | | | | | | in the CSR. Boulder's issue #565 "Golang errors on extensions marked critical" was fixed upstream, cf. https://github.com/letsencrypt/boulder/issues/565 .
* Changelog: prefix bugfixes with '+'.Guilhem Moulin2017-02-221
|
* new-cert: new CLI option "min-days"Guilhem Moulin2017-02-191
|
* new-cert: sort section names if not passed explicitely.Guilhem Moulin2017-02-191
|
* Ensure lacme's config file descriptor has the FD_CLOEXEC bit set.Guilhem Moulin2017-02-191
|
* config-cert: import the default section of files already read.Guilhem Moulin2017-02-191
|
* s/lacme-certs.d/lacme-certs.conf.d/upstream/0.2Guilhem Moulin2016-12-051
|
* "config-certs" now points to a list of files or directories.Guilhem Moulin2016-12-051
|
* Prepare new release.Guilhem Moulin2016-12-031
|
* Add a Changelog.Guilhem Moulin2016-06-141