From c67e0904613dc0e5f1937a511be4198274d8111d Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Fri, 14 Jun 2024 01:21:05 +0200 Subject: Update changelog for 0.8.2-1+deb12u1 release --- debian/changelog | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/debian/changelog b/debian/changelog index 733c62c..9a0e819 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,17 @@ +lacme (0.8.2-1+deb12u1) bookworm; urgency=medium + + * Backport upstream patches to fix post-issuance validation logic. + We avoid pining the intermediate certificates in the bundle and instead + validate the leaf certificate with intermediates supplied during issuance + as untrusted (used for chain building only). Only the root certificates + are used as trust anchor. Not pining intermediate certificates is in line + with Let's Encrypt's latest recommendations. + Closes: #1072847 + * Adjust test suite against current Let's Encrypt staging environment. + * d/gbp.conf: Set 'debian-branch = debian/bookworm'. + + -- Guilhem Moulin Fri, 14 Jun 2024 01:20:13 +0200 + lacme (0.8.2-1) unstable; urgency=medium * New upstream bugfix release. -- cgit v1.2.3