aboutsummaryrefslogtreecommitdiffstats
path: root/Makefile
Commit message (Collapse)AuthorAgeFiles
* Make the ACME API server URL configurable at build time.Guilhem Moulin2021-02-211
|
* Add %-specifiers support.Guilhem Moulin2021-02-201
| | | | | | | | | | | | | | | | lacme(8): for --config=, --socket=, --config-certs= (and ‘socket’/ ‘config-certs’/‘challenge-directory’ configuration options *before* privilege drop; and for the [accountd] section ‘command’/‘config’ configuration options *after* privilege drop). lacme-accountd(1): for --config=, --socket= and --privkey= (and ‘socket’/‘privkey’ configuration options). This also changes the default configuration file location. lacme(8) and lacme-accountd(1) now respectively use /etc/lacme/lacme.conf resp. /etc/lacme/lacme-accountd.conf when running as root, and $XDG_CONFIG_HOME/lacme/lacme.conf resp. $XDG_CONFIG_HOME/lacme/lacme-accountd.conf when running as a normal user. There is no fallback to /etc anymore.
* typofixGuilhem Moulin2021-02-201
|
* Symlink $(sysconfdir)/apache2/conf-available/lacme.conf → ↵Guilhem Moulin2021-02-201
| | | | | | | ../../lacme/apache2.conf. This is useful for enabling the snippet with `a2enconf lacme`, cf. https://bugs.debian.org/955859 .
* Makefile wibbleGuilhem Moulin2021-02-201
|
* Update staging hierarchy.Guilhem Moulin2021-02-201
| | | | Cf. https://community.letsencrypt.org/t/staging-hierarchy-new-root-cert/145677 .
* Makefile: set executable bit for $(bindir)/lacme-accountd and $(sbindir)/lacme.Guilhem Moulin2021-02-181
|
* client: use "lacme-client/$VERSION" as User-Agent header.Guilhem Moulin2021-02-181
|
* Add certs-staging/fake*.pem for tests using the staging environment.Guilhem Moulin2021-02-181
| | | | See https://letsencrypt.org/docs/staging-environment/ .
* Makefile: new 'release' target.Guilhem Moulin2021-02-151
|
* Add (self-signed) ISRG Roots to the CA bundle.Guilhem Moulin2021-02-151
| | | | | | | | | | | | | | | This allows us to fully validate provided X.509 chains using that self-contained bundle, regardless of which CAs is marqued as trusted under /etc/ssl/certs. Also, remove cross-signed intermediate CAs from the bundle as they're useless in a self-contained bundle. Also, remove decomissioned intermediate CAs Authority X3 and X4 from the bundle. This change bumps the minimum OpenSSL version to 1.1.0 (for verify(1ssl)'s ‘-trusted’ and ‘-show_chain’ options).
* Make unprivileged user/group for the internal client resp. webserver ↵Guilhem Moulin2020-12-091
| | | | configurable.
* Use upstream certicate chain instead of an hardcoded one.upstream/0.7Guilhem Moulin2020-11-261
| | | | | | | | | | | | | This is a breaking change. The certificate indicated by 'CAfile' is no longer used as is in 'certificate-chain' (along with the leaf cert). The chain returned by the ACME v2 endpoint is used instead. This allows for more flexbility with respect to key/CA rotation, cf. https://letsencrypt.org/2020/11/06/own-two-feet.html and https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018 Moreover 'CAfile' now defaults to @@datadir@@/lacme/ca-certificates.crt which is a concatenation of all known active CA certificates (which includes the previous default).
* Makefile: Use variables for target directories etc.Guilhem Moulin2020-08-041
|
* Change default libexec dir from /usr/lib/lacme to /usr/libexec/lacme.Guilhem Moulin2020-08-031
|
* Install lacme manpage to section 8.Guilhem Moulin2020-08-031
| | | | As it's a system command, see hier(7) for details.
* Makefile: Major refactoring, add install and uninstall targets.Guilhem Moulin2020-08-031
| | | | Honor BUILD_DOCDIR and DESTDIR variables.
* factor out jq-script from MakefileBenjamin Tietz2020-08-031
| | | | the script is just a plain copy, but now accessible without make
* Fix manpage generation with pandoc >=2.1Guilhem Moulin2018-04-261
|
* Copy snippets/*.conf to /etc/lacmeupstream/0.4Guilhem Moulin2017-07-281
|
* Fix generation of manpages with pandoc >=1.18Guilhem Moulin2017-07-281
|
* s/lacme-certs.d/lacme-certs.conf.d/upstream/0.2Guilhem Moulin2016-12-051
|
* "config-certs" now points to a list of files or directories.Guilhem Moulin2016-12-051
|
* Install lacme(1) into /usr/sbin.Guilhem Moulin2016-06-141
|
* Move X.509 certs to a separate directory.Guilhem Moulin2016-06-141
|
* Convert the manpages to pandoc(1) markdown.Guilhem Moulin2016-06-141
|
* Rename ‘letsencrypt-tiny’ to ‘lacme’.Guilhem Moulin2016-06-131
|
* Install LE X[34] intermediate CA.Guilhem Moulin2016-03-271
|
* Add a Makefile.Guilhem Moulin2016-03-021