Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Pkgsrc changes : * Project has a new home : updated distfile URL and homepage ; * Updated PLIST following the removal of a file ; * Updated checksums. Upstream changes : * version 0.7.0 : - Support for external account bindings - Special support for ZeroSSL - Support presets for some CAs instead of requiring URLs - Allow requesting preferred chain (--preferred-chain) - Added method to show CAs current terms of service (--display-terms) - Allow setting path to domains.txt using cli arguments (--domains-txt) - Added new cli command --cleanupdelete which deletes old files instead of archiving them - No more silent failures on broken hook-scripts - Better error-handling with KEEP_GOING enabled - Check actual order status instead of assuming it's valid - Don't include keyAuthorization in challenge validation (RFC compliance) - Using EC secp384r1 as default certificate type - Use JSON.sh to parse JSON - Use account URL instead of account ID (RFC compliance) - Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated - Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options - Cleanup now also removes dangling symlinks * version 0.7.1 : - --force no longer forces domain name revalidation by default, a new argument --force-validation has been added for that - Added support for EC secp521r1 algorithm (works with e.g. zerossl) - EC PARAMETERS are no longer written to privkey.pem (didn't seem necessary and was causing issues with various software) - Requests resulting in badNonce errors are now automatically retried (fixes operation with LE staging servers) - Deprecated egrep usage has been removed - Implemented EC for account keys - Domain list now also read from domains.txt.d subdirectory (behaviour might change, see docs) - Implemented RFC 8738 (validating/signing certificates for IP addresses instead of domain names) support (this will not work with most public CAs, if any!)
- Loading branch information