]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/commit
dehydrated: Update to 0.7.0
authorAdolf Belka <ahb.ipfire@gmail.com>
Mon, 21 Dec 2020 11:23:57 +0000 (12:23 +0100)
committerMichael Tremer <michael.tremer@ipfire.org>
Mon, 21 Dec 2020 16:35:15 +0000 (16:35 +0000)
commitfef289cef78c9041615eda22180b56294b6354e2
treed6e5c74b6b7b27cb6562ea54c63b87fb217e3f7b
parent9cea690a93be0373a01163caf2848e5e526813ae
dehydrated: Update to 0.7.0

- Update dehydrated from 0.6.5 to 0.7.0
- No changes to the rootfiles
- This update patch also addresses bug #12425
The changes from the interim patch mentioned in bug #12425 are included into this update
- Changes for all releases can be found at https://github.com/dehydrated-io/dehydrated/releases
- Changes for this version update
    Added
Support for external account bindings
Special support for ZeroSSL
Support presets for some CAs instead of requiring URLs
Allow requesting preferred chain (--preferred-chain)
Added method to show CAs current terms of service (--display-terms)
Allow setting path to domains.txt using cli arguments (--domains-txt)
Added new cli command --cleanupdelete which deletes old files instead of archiving them

    Fixed
No more silent failures on broken hook-scripts
Better error-handling with KEEP_GOING enabled
Check actual order status instead of assuming it's valid
Don't include keyAuthorization in challenge validation (RFC compliance)

    Changed
Using EC secp384r1 as default certificate type
Use JSON.sh to parse JSON
Use account URL instead of account ID (RFC compliance)
Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated
Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options
Cleanup now also removes dangling symlinks

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
lfs/dehydrated