lacme - Small ACME client written with process isolation and minimal privileges in mind

	Commit message (Collapse)	Author	Age	Files
*	typofix	Guilhem Moulin	2021-02-24	1
\|
*	tests/drop-privileges: Ensure failure to drop privileges yields an error.	Guilhem Moulin	2021-02-24	1
\| \| \| \|	And doesn't retain root privileges.
*	Consolidate error messages.	Guilhem Moulin	2021-02-23	1
\|
*	lacme-accountd: Refuse to sign JWS with an invalid Protected Header.	Guilhem Moulin	2021-02-22	1
\| \| \| \| \| \| \| \| \| \| \|	“The JWS Protected Header is a JSON object” — RFC 7515 sec. 2. “The JWS Protected Header MUST include the following fields: - "alg" - "nonce" - "url" - either "jwk" or "kid"” — RFC 8555 sec. 6.2.
*	lacme-account: Improve log messages.	Guilhem Moulin	2021-02-22	3
\| \| \| \|	Again…
*	tests: Check presence of extra greeting data.	Guilhem Moulin	2021-02-22	1
\|
*	Fix `./test --deb`.	Guilhem Moulin	2021-02-22	2
\| \| \| \|	The staging environment wasn't set properly for the Debian packages.
*	lacme-accountd(1): new setting 'keyid'.	Guilhem Moulin	2021-02-22	1
\| \| \| \| \|	This saves a round trip and provides a safeguard against malicious clients.
*	accountd: Improve log message for incoming requests.	Guilhem Moulin	2021-02-21	2
\|
*	Add IPC tests with an old lacme(8) resp. lacme-accountd(1).	Guilhem Moulin	2021-02-21	2
\|
*	wording	Guilhem Moulin	2021-02-21	2
\|
*	lacme-accountd: new setting 'logfile' to log signature requests.	Guilhem Moulin	2021-02-21	3
\| \| \| \|	Prefixed with a timestamp.
*	Document `lacme-accountd --stdio`.	Guilhem Moulin	2021-02-20	1
\| \| \| \| \|	It's an internal flag, but can be useful for authorized_keys(5) restrictions.
*	Add %-specifiers support.	Guilhem Moulin	2021-02-20	2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	lacme(8): for --config=, --socket=, --config-certs= (and ‘socket’/ ‘config-certs’/‘challenge-directory’ configuration options before privilege drop; and for the [accountd] section ‘command’/‘config’ configuration options after privilege drop). lacme-accountd(1): for --config=, --socket= and --privkey= (and ‘socket’/‘privkey’ configuration options). This also changes the default configuration file location. lacme(8) and lacme-accountd(1) now respectively use /etc/lacme/lacme.conf resp. /etc/lacme/lacme-accountd.conf when running as root, and $XDG_CONFIG_HOME/lacme/lacme.conf resp. $XDG_CONFIG_HOME/lacme/lacme-accountd.conf when running as a normal user. There is no fallback to /etc anymore.
*	Symlink $(sysconfdir)/apache2/conf-available/lacme.conf → ↵	Guilhem Moulin	2021-02-20	1
\| \| \| \| \| \| \|	../../lacme/apache2.conf. This is useful for enabling the snippet with `a2enconf lacme`, cf. https://bugs.debian.org/955859 .
*	Document spawning a remote lacme-accountd(1) instance.	Guilhem Moulin	2021-02-20	1
\| \| \| \|	And add a test case for this.
*	Add tests for OpenSSL- and GnuPG-encrypted account keys.	Guilhem Moulin	2021-02-20	2
\| \| \| \|	These tests are not interactive!
*	Add test suite against Let's Encrypt's staging environment.	Guilhem Moulin	2021-02-20	13
	https://letsencrypt.org/docs/staging-environment/