From 601398e92f99a159fcb5ffc0764950ae5c60d096 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Sun, 16 Jun 2024 00:35:57 +0200
Subject: Typofix

Pointed by Jonathan Wiltshire at https://bugs.debian.org/1073174#12 .
Thanks!
---
 Changelog | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'Changelog')

diff --git a/Changelog b/Changelog
index 5c91365..df987c6 100644
--- a/Changelog
+++ b/Changelog
@@ -1,10 +1,10 @@
 lacme (0.8.3) upstream;
 
-  + Fix post-issuance validation logic.  We avoid pining the
+  + Fix post-issuance validation logic.  We avoid pinning the
     intermediate certificates in the bundle and instead validate the
     leaf certificate with intermediates supplied during issuance as
     untrusted (used for chain building only).  Only the root
-    certificates are used as trust anchor.  Not pining intermediate
+    certificates are used as trust anchor.  Not pinning intermediate
     certificates is in line with Let's Encrypt's latest recommendations.
   + Pass `-in /dev/stdin` option to openssl(1) to avoid warning with
     OpenSSL 3.2 or later.
-- 
cgit v1.2.3


From cc2ff5e80a465b0325e317aeedb3437165fa2e1b Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Mon, 20 Jul 2026 19:52:28 +0200
Subject: Prepare new release v0.8.4.

---
 Changelog      | 12 ++++++++++++
 client         |  2 +-
 lacme          |  2 +-
 lacme-accountd |  2 +-
 4 files changed, 15 insertions(+), 3 deletions(-)

(limited to 'Changelog')

diff --git a/Changelog b/Changelog
index df987c6..358c53a 100644
--- a/Changelog
+++ b/Changelog
@@ -1,3 +1,15 @@
+lacme (0.8.4) upstream;
+
+  + accountd: Use PKCS#1 v1.5 signatures, as it's what JWT RS256 uses.
+    This change is needed for compatibility with Crypt::OpenSSL::RSA 0.38
+    and later.
+  + Fix 'drop-privileges' test.
+  + Update test suite to match staging server behavior.
+  + Drop OCSP must-staple extension test which is no longer available on
+    Let's Encrypt's ACME server.
+
+ -- Guilhem Moulin <guilhem@fripost.org>  Mon, 20 Jul 2026 19:52:28 +0200
+
 lacme (0.8.3) upstream;
 
   + Fix post-issuance validation logic.  We avoid pinning the
diff --git a/client b/client
index 2a5ee3c..be9a7f5 100755
--- a/client
+++ b/client
@@ -43,7 +43,7 @@ use warnings;
 # instance own by another user and created with umask 0177) is not a
 # problem since SOCKET_FD can be bound as root prior to the execve(2).
 
-our $VERSION = '0.8.3';
+our $VERSION = '0.8.4';
 my $PROTOCOL_VERSION = 1;
 my $NAME = 'lacme-client';
 
diff --git a/lacme b/lacme
index 37d3a51..c72628c 100755
--- a/lacme
+++ b/lacme
@@ -22,7 +22,7 @@ use v5.14.2;
 use strict;
 use warnings;
 
-our $VERSION = '0.8.3';
+our $VERSION = '0.8.4';
 my $NAME = 'lacme';
 
 use Errno 'EINTR';
diff --git a/lacme-accountd b/lacme-accountd
index a0cc15f..05fa227 100755
--- a/lacme-accountd
+++ b/lacme-accountd
@@ -23,7 +23,7 @@ use v5.14.2;
 use strict;
 use warnings;
 
-our $VERSION = '0.8.3';
+our $VERSION = '0.8.4';
 my $PROTOCOL_VERSION = 1;
 my $NAME = 'lacme-accountd';
 
-- 
cgit v1.2.3