Skip to content

Releases: hlandau/acmetool

v0.0.55: Licence agreement change fix

05 Aug 00:52
v0.0.55
Compare
Choose a tag to compare
Fixes #191, whereby acmetool did not correctly respond to changes in an
ACME server's preferred agreement. This is an important update and should
be applied promptly, as it causes autorenewal to fail (though by design,
acmetool requires intervention to agree to new agreements anyway).

Implements new option as per #178, where HTTP self-testing
can be disabled.

Fixes #186, whereby there is a small chance of a DNS
token string being interpreted as an option to grep in
the example DNS hook included in the repository.

The dependency on degoutils has been removed in favour
of a marginally more stable version.

Fixes #175, whereby HAProxy symlinks are now forcibly replaced.

Fixes #171, whereby the haproxy directory could be created
world-readable in some circumstances.

Miscellaneous release engineering changes related to changes
in boulder.

v0.0.54

20 Jun 08:12
v0.0.54
Compare
Choose a tag to compare
v0.0.54: Add support for packaging for older RPM distros

v0.0.53

18 Jun 09:55
v0.0.53
Compare
Choose a tag to compare
v0.0.53: Enable copr builds for Fedora 24

v0.0.52: Fix minor bugs

18 Jun 08:30
v0.0.52
Compare
Choose a tag to compare
Fixes a minor bug where if a response file contained an invalid e. mail
address, acmetool would loop forever.

Fixes a minor bug where state and hook directory paths would be interpreted
incorrectly if they were specified as relative paths.

v0.0.51: Fix for minor resource consumption vulnerabilities

21 Apr 20:55
v0.0.51
Compare
Choose a tag to compare
This release fixes minor resource consumption vulnerabilities which are mostly
academic. They can only be exploited by an ACME server.

v0.0.50: Minor changes

28 Mar 05:15
v0.0.50
Compare
Choose a tag to compare
acmetool now sets umask to 0 on launch, to ensure that webroot
files can be written world-readable.

Changed back to using cheggaaa/pb rather than branch, now that
changes have been merged upstream.

Responder listen addresses are now intelligently sorted.

CSRs now contain a CN, which is the first name specified in
a target, which can help ensure that that name ends up as the
CN in the final certificate.

Fixed typos.

The Ubuntu(/Debian) PPA now provides arm and arm64 builds.
These should work on ARM platforms with and without hardfloat support.

v0.0.49: Bugfixes

22 Feb 23:37
v0.0.49
Compare
Choose a tag to compare
Builds are now made using Go 1.6.

The quickstart wizard no longer tries and fails to install a cronjob if a means
of installation cannot be found.

A bug causing the redirector to fail to launch has been fixed.

In acmeapi, HTTPError is now exported to allow the examination of errors.

The log message severity for a failure to save webroot files is now Info,
which prevents the emission of annoying error messages in cron jobs
when not running as root.

v0.0.48: Minor fixes

13 Feb 09:36
v0.0.48
Compare
Choose a tag to compare
A 'conceivably satisfiable' check has been added to ensure a target's request section can conceivably satisfy
the satisfy section.

The renewal period has been reverted back to 30-days-or-33%, since Let's
Encrypt is sending renewal e. mails at 20 days.

v0.0.47: Add experimental cull command

09 Feb 06:00
v0.0.47
Compare
Choose a tag to compare

v0.0.46: Add support for TLS-SNI hooks; combined certificate file reform

06 Feb 10:49
v0.0.46
Compare
Choose a tag to compare
The HAProxy hook is now rebranded as the combined certificate file hook.

lighttpd is now considered a daemon which needs combined files.

TLS-SNI code cleaned up, support for 'n' removed now that it has been
removed from the ACME specification. TLS-SNI challenges can now
be met using hooks.

Fixed a bug where quickstart didn't pass --hooks to crontab if --hooks
was specified on the command line.

Allow FDB permissions customization to specify UID without specifying GID and
vice versa.