lacme - Small ACME client written with process isolation and minimal privileges in mind

	Commit message (Collapse)	Author	Age	Files
*	Symlink $(sysconfdir)/apache2/conf-available/lacme.conf → ↵	Guilhem Moulin	2021-02-20	1
\| \| \| \| \| \| \|	../../lacme/apache2.conf. This is useful for enabling the snippet with `a2enconf lacme`, cf. https://bugs.debian.org/955859 .
*	Makefile wibble	Guilhem Moulin	2021-02-20	1
\|
*	Update staging hierarchy.	Guilhem Moulin	2021-02-20	1
\| \| \| \|	Cf. https://community.letsencrypt.org/t/staging-hierarchy-new-root-cert/145677 .
*	Makefile: set executable bit for $(bindir)/lacme-accountd and $(sbindir)/lacme.	Guilhem Moulin	2021-02-18	1
\|
*	client: use "lacme-client/$VERSION" as User-Agent header.	Guilhem Moulin	2021-02-18	1
\|
*	Add certs-staging/fake*.pem for tests using the staging environment.	Guilhem Moulin	2021-02-18	1
\| \| \| \|	See https://letsencrypt.org/docs/staging-environment/ .
*	Makefile: new 'release' target.	Guilhem Moulin	2021-02-15	1
\|
*	Add (self-signed) ISRG Roots to the CA bundle.	Guilhem Moulin	2021-02-15	1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This allows us to fully validate provided X.509 chains using that self-contained bundle, regardless of which CAs is marqued as trusted under /etc/ssl/certs. Also, remove cross-signed intermediate CAs from the bundle as they're useless in a self-contained bundle. Also, remove decomissioned intermediate CAs Authority X3 and X4 from the bundle. This change bumps the minimum OpenSSL version to 1.1.0 (for verify(1ssl)'s ‘-trusted’ and ‘-show_chain’ options).
*	Make unprivileged user/group for the internal client resp. webserver ↵	Guilhem Moulin	2020-12-09	1
\| \| \| \|	configurable.
*	Use upstream certicate chain instead of an hardcoded one.upstream/0.7	Guilhem Moulin	2020-11-26	1
\| \| \| \| \| \| \| \| \| \| \| \| \|	This is a breaking change. The certificate indicated by 'CAfile' is no longer used as is in 'certificate-chain' (along with the leaf cert). The chain returned by the ACME v2 endpoint is used instead. This allows for more flexbility with respect to key/CA rotation, cf. https://letsencrypt.org/2020/11/06/own-two-feet.html and https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018 Moreover 'CAfile' now defaults to @@datadir@@/lacme/ca-certificates.crt which is a concatenation of all known active CA certificates (which includes the previous default).
*	Makefile: Use variables for target directories etc.	Guilhem Moulin	2020-08-04	1
\|
*	Change default libexec dir from /usr/lib/lacme to /usr/libexec/lacme.	Guilhem Moulin	2020-08-03	1
\|
*	Install lacme manpage to section 8.	Guilhem Moulin	2020-08-03	1
\| \| \| \|	As it's a system command, see hier(7) for details.
*	Makefile: Major refactoring, add install and uninstall targets.	Guilhem Moulin	2020-08-03	1
\| \| \| \|	Honor BUILD_DOCDIR and DESTDIR variables.
*	factor out jq-script from Makefile	Benjamin Tietz	2020-08-03	1
\| \| \| \|	the script is just a plain copy, but now accessible without make
*	Fix manpage generation with pandoc >=2.1	Guilhem Moulin	2018-04-26	1
\|
*	Copy snippets/*.conf to /etc/lacmeupstream/0.4	Guilhem Moulin	2017-07-28	1
\|
*	Fix generation of manpages with pandoc >=1.18	Guilhem Moulin	2017-07-28	1
\|
*	s/lacme-certs.d/lacme-certs.conf.d/upstream/0.2	Guilhem Moulin	2016-12-05	1
\|
*	"config-certs" now points to a list of files or directories.	Guilhem Moulin	2016-12-05	1
\|
*	Install lacme(1) into /usr/sbin.	Guilhem Moulin	2016-06-14	1
\|
*	Move X.509 certs to a separate directory.	Guilhem Moulin	2016-06-14	1
\|
*	Convert the manpages to pandoc(1) markdown.	Guilhem Moulin	2016-06-14	1
\|
*	Rename ‘letsencrypt-tiny’ to ‘lacme’.	Guilhem Moulin	2016-06-13	1
\|
*	Install LE X[34] intermediate CA.	Guilhem Moulin	2016-03-27	1
\|
*	Add a Makefile.	Guilhem Moulin	2016-03-02	1