Skip to content

Releases: moepman/acertmgr

1.0.5

14 Jul 08:15
Compare
Choose a tag to compare

Changes since 1.0.4:

  • Update github action workflow to build debian packages with gzip format for older OS versions
  • Github Action: Update to newer github action syntax/standards, change image to ubuntu-latest, change pypi-publish to supported version and check if we have credentials to publish at all
  • Allow multiple sets of the same domain to defined in a single config file (necessary for multiple certs using different key_algorithm) in a list style notation (lists of maps)
  • Fix idna conversion for force-renew (probably broken since the IDNA cleanup)
  • Unify key_algorithm handling for elipic curves (change naming to ECC but stay backwards compatible)
  • Fix LOG_REPLACEMENTS determination when multiple domain sets exist and we are on a newer version of python
  • Update config id if we have a key algorithm set to allow for multiple certs with different algorithms for the same set of domains
  • Instantiate HashAlgorithm in OCSPRequestBuilder
  • Clarify expected authority format (at least for v2) and add an example
  • logging: Add real counterparts of IDNA-mapped domains in brackets
  • configuration: Simplify too complex IDNA conversion
  • certs already contain idna domain names

1.0.4

21 May 20:57
Compare
Choose a tag to compare

Changes since 1.0.3.1:

  • acertmgr/v2: Handle CA certificate chains properly
  • CI: Build on Ubuntu 18.04 while we are Python 2 compatbile and OS version is not EOL
  • standalone: Fix multiple challange handlers on same port

1.0.3.1

12 Oct 17:26
Compare
Choose a tag to compare

Changes since 1.0.3:

  • GitHub Actions: use current setuptools and wheel
  • GitHub Actions: twine upload via pypa/gh-action-pypi-publish
  • reformat setup.py
  • GitHub Actions: unify whitespace style

1.0.3

12 Mar 17:48
Compare
Choose a tag to compare

Changes

  • tools: Fix IDNA handler (again)
  • acertmgr: Add a OCSP validation to certificate verification
  • tools: make pem file writable by owner before tryting to write
  • Generate proper dependencies on deb Packages
  • Use Github Actions for automated building and release

1.0.2

23 Nov 14:58
Compare
Choose a tag to compare

Changes

  • Add support for Windows
  • Fix package name for yaml

1.0.1

01 Oct 11:27
Compare
Choose a tag to compare

Changes

  • use proper PyPI supported classifiers

1.0.0

23 Sep 13:03
Compare
Choose a tag to compare

Changes

  • Remove legacy configuration directives

0.9.8

04 Jul 07:37
Compare
Choose a tag to compare

Changes

  • authority.v2: invalidate nonces after 2 minutes and re-request
  • dns.*: Use a static query timeout for any DNS queries using dnspython

0.9.7

12 Jun 08:44
Compare
Choose a tag to compare

Changes

  • Display warning about IDNA only if unicode names are in use
  • authority.v2: Properly clear the nonce cache on using it's content
  • authority.v2: Check challenge return code on validation as well

0.9.6

20 May 16:46
Compare
Choose a tag to compare

Changes

  • Deprecate legacy configuration directives
  • Support creating certificates with the OCSP-must staple extension (cert_must_staple)
  • Add additional DNS challenge checks to speed up authorization (dns_verify_all_ns, dns_verify_server)
  • Add support for non-RSA account keys
  • Various bugfixes and optimizations