From 605581aba92974fcfbc31aea3c15312435061445 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Mon, 22 Feb 2021 02:09:31 +0100 Subject: Add NEWS files with breaking changes. --- debian/lacme.NEWS | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) (limited to 'debian/lacme.NEWS') diff --git a/debian/lacme.NEWS b/debian/lacme.NEWS index d20acdc..91ddd30 100644 --- a/debian/lacme.NEWS +++ b/debian/lacme.NEWS @@ -1,3 +1,22 @@ +lacme (0.8.0-1) UNRELEASED; urgency=medium + + The internal webserver now runs as system user _lacme-www:nogroup instead of + www-data:www-data by default. The internal ACME client now runs as system + user _lacme-client:nogroup instead of nobody:nogroup by default. Both + settings are configurable in the lacme(8) configuration file. + + lacme(8) loads its configuration file from /etc/lacme/lacme.conf when + running as root, and from $XDG_CONFIG_HOME/lacme/lacme.conf otherwise. + There is no lookup in the current directory anymore, nor fallback lookup to + /etc. + + 'challenge-directory' now needs to be set to an *existing* directory + (writable by the lacme client user). Since lacme(8) spawns a builtin + webserver by default the change only affects configurations with a custom + 'challenge-directory' setting. + + -- Guilhem Moulin Mon, 22 Feb 2021 02:00:00 +0100 + lacme (0.7-1) unstable; urgency=high The certificate indicated by 'CAfile' is no longer used as is in -- cgit v1.2.3