lacme - Small ACME client written with process isolation and minimal privileges in mind

	Commit message (Collapse)	Author	Age	Files
*	Wording: s/option/setting/.	Guilhem Moulin	2021-02-20	1
\|
*	Deprecate setting 'privkey' in [accountd] section of the lacme(8) ↵	Guilhem Moulin	2021-02-20	1
\| \| \| \| \| \| \|	configuration file. One need to use the lacme-accountd(1) configuration file for that instead.
*	lacme(8)'s 'config' option in the [accountd] section no longer have a ↵	Guilhem Moulin	2021-02-20	1
\| \| \| \| \| \| \| \|	default value. The previous default, namely /etc/lacme/lacme-accountd.conf, is still honored when there is the user running lacme doesn't have a ~/.config/lacme/lacme-account.conf configuration file.
*	Split client/webserver/accountd commands on whitespace.	Guilhem Moulin	2021-02-18	1
\| \| \| \|	This doesn't change the default behavior.
*	challenge-directory now needs to be set to an existing directory.	Guilhem Moulin	2021-02-14	1
\| \| \| \| \| \| \|	Since lacme(8) spawns a builtin webserver by default the change doesn't affect default configurations. See https://bugs.debian.org/970800 for the rationale.
*	lacme: allow direct use challenge-directory .well-known/acme-challenge	Benjamin Tietz	2021-02-14	1
\|
*	Raise client timeout from 10 to 30s.	Guilhem Moulin	2021-02-12	1
\|
*	Make unprivileged user/group for the internal client resp. webserver ↵	Guilhem Moulin	2020-12-09	1
\| \| \| \|	configurable.
*	Ignore [accountd] section from lacme.conf when the --socket option is defined.	Guilhem Moulin	2020-08-04	1
\| \| \| \| \|	This allows remotely-controlled lacme processes being controlled without modifying an config files. See https://bugs.debian.org/955767 .
*	Makefile: Use variables for target directories etc.	Guilhem Moulin	2020-08-04	1
\|
*	Change default libexec dir from /usr/lib/lacme to /usr/libexec/lacme.	Guilhem Moulin	2020-08-03	1
\|
*	Install lacme manpage to section 8.	Guilhem Moulin	2020-08-03	1
\| \| \| \|	As it's a system command, see hier(7) for details.
*	Use /run for the listening socket of the webserver component.	Guilhem Moulin	2019-08-22	1
\|
*	Use ACME v2 endpoints	Guilhem Moulin	2018-04-27	1
\| \| \| \|	https://tools.ietf.org/html/draft-ietf-acme-acme-12
*	Bind webserver to /var/run/lacme-www.socket by default.	Guilhem Moulin	2017-07-08	1
\|
*	webserver: allow listening to multiple addresses.	Guilhem Moulin	2017-06-28	1
\| \| \| \| \| \| \| \| \| \|	(Useful when dual-stack IPv4/IPv6 is not supported.) Also, change the default to listen to a UNIX-domain socket </var/run/lacme.socket>. Moreover temporary iptables rules are no longer installed. Hosts without a public HTTP daemon listening on port 80 need to set the 'listen' option to [::] and/or 0.0.0.0, and possibly set the 'iptables' option to Yes.
*	s/lacme-certs.d/lacme-certs.conf.d/upstream/0.2	Guilhem Moulin	2016-12-05	1
\|
*	"config-certs" now points to a list of files or directories.	Guilhem Moulin	2016-12-05	1
\|
*	Improve formatting of config files.	Guilhem Moulin	2016-12-01	1
\|
*	lacme.conf: mention the default groupname for the ACME client.	Guilhem Moulin	2016-12-01	1
\|
*	wibble	Guilhem Moulin	2016-12-01	1
\|
*	Make lacme able to spawn lacme-accountd.	Guilhem Moulin	2016-12-01	1
\|
*	typo	Guilhem Moulin	2016-11-30	1
\|
*	typo	Guilhem Moulin	2016-06-14	1
\|
*	Rename ‘letsencrypt-tiny’ to ‘lacme’.	Guilhem Moulin	2016-06-13	1