lacme - Small ACME client written with process isolation and minimal privileges in mind

	Commit message (Collapse)	Author	Age	Files
*	Add %-specifiers support.	Guilhem Moulin	2021-02-20	1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	lacme(8): for --config=, --socket=, --config-certs= (and ‘socket’/ ‘config-certs’/‘challenge-directory’ configuration options before privilege drop; and for the [accountd] section ‘command’/‘config’ configuration options after privilege drop). lacme-accountd(1): for --config=, --socket= and --privkey= (and ‘socket’/‘privkey’ configuration options). This also changes the default configuration file location. lacme(8) and lacme-accountd(1) now respectively use /etc/lacme/lacme.conf resp. /etc/lacme/lacme-accountd.conf when running as root, and $XDG_CONFIG_HOME/lacme/lacme.conf resp. $XDG_CONFIG_HOME/lacme/lacme-accountd.conf when running as a normal user. There is no fallback to /etc anymore.
*	lacme-accountd: Don't error out when the default configuration file is missing.	Guilhem Moulin	2021-02-20	1
\| \| \| \| \|	Instead, treat it as an empty file. This makes it possible to use lacme-accountd(1) without configuration file under ~/.config/lacme.
*	Use File::Basename::dirname().	Guilhem Moulin	2021-02-20	1
\| \| \| \| \| \|	To correctly extract the parent directory of the socket path. The previous returned an empty string when the socket path didn't contain ‘/’.
*	accountd: replace internal option --conn-fd=FD with flag --stdio.	Guilhem Moulin	2021-02-18	1
\| \| \| \| \|	Using stdin/stdout makes it possible to tunnel the accountd connection through ssh.
*	Consolidate error messages for consistency.	Guilhem Moulin	2021-02-18	1
\|
*	Don't load configuration files from ./ by default.	Guilhem Moulin	2021-02-18	1
\| \| \| \| \| \| \|	This is a breaking change: lacme(8) resp. lacme-accountd(1) no longer consider ./lacme.conf resp. ./lacme-accountd.conf as default location for the configuration file. Doing so has security implications when running these program from insecure directories.
*	Bump copyright years.	Guilhem Moulin	2021-02-15	1
\|
*	wibble	Guilhem Moulin	2021-02-12	1
\|
*	documentation: suggest to generate private key material with genpkey(1ssl).	Guilhem Moulin	2020-12-09	1
\| \| \| \| \|	* Also suggest a command to generate an ECDSA key not just RSA. * Hint at which key algorithms are supported.
*	Upgrade links to secure HTTP.	Guilhem Moulin	2020-08-04	1
\|
*	Makefile: Use variables for target directories etc.	Guilhem Moulin	2020-08-04	1
\|
*	Update copyright infoupstream/0.3	Guilhem Moulin	2017-07-09	1
\|
*	Specify minimum required Perl versions.	Guilhem Moulin	2017-07-01	1
\|
*	Ensure fdopen is called with an integer.	Guilhem Moulin	2017-07-01	1
\|
*	lacme(1), lacme-accountd(1): fix version number.	Guilhem Moulin	2017-06-29	1
\|
*	s/fd-conn/conn-fd/	Guilhem Moulin	2016-12-05	1
\|
*	s/--fdopen/--fd-conn/	Guilhem Moulin	2016-12-03	1
\|
*	Make lacme able to spawn lacme-accountd.	Guilhem Moulin	2016-12-01	1
\|
*	Add the short description in headers and manpages.	Guilhem Moulin	2016-06-14	1
\|
*	accountd: Don't mention "Let's Encrypt" in log messages.	Guilhem Moulin	2016-06-14	1
\|
*	Rename ‘letsencrypt-tiny’ to ‘lacme’.	Guilhem Moulin	2016-06-13	1