added
EAB Support (@bryanvaz)
changed
Removed bluebird, change findCertificateChainForIssuer behaviorfixed
update axios because of security issue
fixed
Bug when encoding PEM payloads, potentially causing malformed requests
fixed
Missing TypeScript definitions
added
OptionpreferredChain
added toclient.getCertificate()
andclient.auto()
to indicate which certificate chain is preferred if a CA offers multipleadded
Methodclient.getOrder()
to refresh order from CAfixed
Upgradeaxios@0.21.0
fixed
Error when attempting to revoke a certificate chainfixed
Missing URL augmentation inclient.finalizeOrder()
andclient.deactivateAuthorization()
fixed
Add certificate issuer to response fromforge.readCertificateInfo()
fixed
Explicitly set defaultaxios
HTTP adapter - axios/axios#1180
fixed
Upgradenode-forge@0.10.0
- CVE-2020-7720
fixed
Incorrect TypeScriptCertificateInfo
definitionsfixed
Allow trailing whitespace character inhttp-01
challenge responsebreaking
Remove support for Node v8breaking
Remove deprecatedopenssl
crypto module
fixed
Improvements to TypeScript definitions
added
TypeScript definitionsfixed
Allow missing ACME directory meta field - RFC 8555 Section 7.1.1
added
New optionskipChallengeVerification
added toclient.auto()
to bypass internal challenge verification
added
More extensive testing using letsencrypt/pebblechanged
When creating a CSR,commonName
no longer defaults to'localhost'
- This change is not considered breaking since
commonName: 'localhost'
will result in an error when ordering a certificate
- This change is not considered breaking since
fixed
Retry signed API requests onurn:ietf:params:acme:error:badNonce
- RFC 8555 Section 6.5fixed
Minor bugs related toPOST-as-GET
when callingupdateAccount()
fixed
Ensure subject common name is present in SAN when creating a CSR - CAB v1.2.3 Section 9.2.2fixed
Send empty JSON body when responding to challenges - RFC 8555 Section 7.5.1
backport
Minor bugs related toPOST-as-GET
when callingclient.updateAccount()
backport
Send empty JSON body when responding to challenges
added
UTF-8 support when generating a CSR subject using forge - RFC 5280fixed
ImplementedPOST-as-GET
for all ACME API requests - RFC 8555 Section 6.3
backport
ImplementedPOST-as-GET
for all ACME API requests
added
Exposeaxios
instance to allow manipulating HTTP client defaultsbreaking
Remove support for Node v4 and v6breaking
Remove Babel transpilation
added
DNS CNAME detection when verifyingdns-01
challenges
added
Support fortls-alpn-01
challenge key authorization
fixed
Handle and throw errors from OpenSSL process
added
New node-forge crypto engine, removes OpenSSL CLI dependencyadded
Support nativecrypto.generateKeyPair()
API when generating key pairs
added
Ability to set and get current account URLfixed
Replace HTTP clientrequest
withaxios
fixed
Auto-mode no longer tries to create account when account URL exists
fixed
Key rollover in compliance with draft-ietf-acme-13
breaking
ACMEv2breaking
API changesbreaking
Rewrite to ES6breaking
Promises instead of callbacks
- API stable
fixed
Bug causing invalid anti-replay nonce
breaking
OpenSSL methodreadCsrDomains
andreadCertificateInfo
now return domains as an objectfixed
Added and fixed some tests
acme-client
released