aboutsummaryrefslogtreecommitdiffstats
path: root/debian/changelog
blob: a6431591d35fd1bba9680cf14804640c3d30d3c7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
lacme (0.5-1+deb10u2) buster; urgency=medium

  * Use upstream certificate chain instead of an hardcoded one.
    This is a breaking change.  The certificate indicated by 'CAfile' is no
    longer used as is in 'certificate-chain' (along with the leaf cert).
    The chain returned by the ACME v2 endpoint is used instead.  This allows
    for more flexbility with respect to key/CA rotation, cf.
    https://letsencrypt.org/2020/11/06/own-two-feet.html and
    https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018
  * Additional current/planned CA certificates can be found under
    /usr/local/share/lacme:
      - lets-encrypt-e[12].pem
      - lets-encrypt-r[34]-cross-signed.pem
      - lets-encrypt-r[34].pem
      - letsencryptauthorityx[34].pem
    See https://letsencrypt.org/certificates/
  * Moreover 'CAfile' now defaults to /usr/share/lacme/ca-certificates.crt
    which is a concatenation of all known active CA certificates (which
    includes the previous default).
    Closes: #975862.

 -- Guilhem Moulin <guilhem@debian.org>  Thu, 26 Nov 2020 01:14:50 +0100

lacme (0.5-1+deb10u1) buster; urgency=medium

  * Link to RFC 8555 <https://tools.ietf.org/html/rfc8555> instead of the
    ACME I-D URL.
  * Issue GET and POST-as-GET requests (RFC 8555 sec. 6.3) for the
    authorizations, order and certificate URLs.   Let's Encrypt will remove
    support of unauthenticated GETs from the V2 API on 01 Nov 2019.
    Closes: #935799.

 -- Guilhem Moulin <guilhem@debian.org>  Thu, 22 Aug 2019 00:14:42 +0200

lacme (0.5-1) unstable; urgency=medium

  * New upstream release, adding support for v2 ACME endpoints.
  * Fix manpage generation with pandoc >=2.1.  (Closes: #896982.)
  * debian/control:
    + Bump Standards-Version to 4.1.4.  No changes.
    + Build-depends: bump minimum pandoc version to 2.1.
    + Depends (lacme): add libtypes-serialiser-perl

 -- Guilhem Moulin <guilhem@debian.org>  Wed, 09 May 2018 14:17:19 +0200

lacme (0.4-1) unstable; urgency=medium

  * Fix manpage generation with pandoc >=1.18.  (Closes: #869885.)

 -- Guilhem Moulin <guilhem@debian.org>  Fri, 28 Jul 2017 00:24:06 +0200

lacme (0.3-1) unstable; urgency=low

  * New upstream release.
  * Provide apache2 and nginx configuration snippet in /etc/lacme.
  * debian/control: Bump Standards-Version to 4.0.0.  No changes.

 -- Guilhem Moulin <guilhem@debian.org>  Sun, 09 Jul 2017 00:41:23 +0200

lacme (0.2-1) unstable; urgency=low

  * New upstream release.
  * debian/control:
    + Promote lacme-accountd from lacme's Suggests to Recommends.
    + Bump Standards-Version to 3.9.8.  No changes.

 -- Guilhem Moulin <guilhem@guilhem.org>  Mon, 05 Dec 2016 16:35:59 +0100

lacme (0.1-1) unstable; urgency=low

  * Initial release.  (Closes: #827357, #827358.)

 -- Guilhem Moulin <guilhem@guilhem.org>  Tue, 08 Dec 2015 18:58:20 +0100