aboutsummaryrefslogtreecommitdiffstats
path: root/lacme-accountd.1.md
Commit message (Collapse)AuthorAgeFiles
* wordingGuilhem Moulin2021-02-211
|
* lacme-accountd: new setting 'logfile' to log signature requests.Guilhem Moulin2021-02-211
| | | | Prefixed with a timestamp.
* Document `lacme-accountd --stdio`.Guilhem Moulin2021-02-201
| | | | | It's an internal flag, but can be useful for authorized_keys(5) restrictions.
* Add %-specifiers support.Guilhem Moulin2021-02-201
| | | | | | | | | | | | | | | | lacme(8): for --config=, --socket=, --config-certs= (and ‘socket’/ ‘config-certs’/‘challenge-directory’ configuration options *before* privilege drop; and for the [accountd] section ‘command’/‘config’ configuration options *after* privilege drop). lacme-accountd(1): for --config=, --socket= and --privkey= (and ‘socket’/‘privkey’ configuration options). This also changes the default configuration file location. lacme(8) and lacme-accountd(1) now respectively use /etc/lacme/lacme.conf resp. /etc/lacme/lacme-accountd.conf when running as root, and $XDG_CONFIG_HOME/lacme/lacme.conf resp. $XDG_CONFIG_HOME/lacme/lacme-accountd.conf when running as a normal user. There is no fallback to /etc anymore.
* Wording: s/option/setting/.Guilhem Moulin2021-02-201
|
* Document spawning a remote lacme-accountd(1) instance.Guilhem Moulin2021-02-201
| | | | And add a test case for this.
* lacme-accountd: Don't error out when the default configuration file is missing.Guilhem Moulin2021-02-201
| | | | | Instead, treat it as an empty file. This makes it possible to use lacme-accountd(1) without configuration file under ~/.config/lacme.
* Don't load configuration files from ./ by default.Guilhem Moulin2021-02-181
| | | | | | | This is a breaking change: lacme(8) resp. lacme-accountd(1) no longer consider ./lacme.conf resp. ./lacme-accountd.conf as default location for the configuration file. Doing so has security implications when running these program from insecure directories.
* documentation: clarify that "file:/path/to/account.key" can point to a ↵Guilhem Moulin2020-12-091
| | | | symmetrically-encrypted private key.
* wibbleGuilhem Moulin2020-12-091
|
* documentation: suggest to generate private key material with genpkey(1ssl).Guilhem Moulin2020-12-091
| | | | | * Also suggest a command to generate an ECDSA key not just RSA. * Hint at which key algorithms are supported.
* Improve long command wrapping.Guilhem Moulin2020-08-041
|
* Upgrade links to secure HTTP.Guilhem Moulin2020-08-041
|
* Makefile: Use variables for target directories etc.Guilhem Moulin2020-08-041
|
* Install lacme manpage to section 8.Guilhem Moulin2020-08-031
| | | | As it's a system command, see hier(7) for details.
* Makefile: Major refactoring, add install and uninstall targets.Guilhem Moulin2020-08-031
Honor BUILD_DOCDIR and DESTDIR variables.