]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
Merged /httpd/httpd/trunk:r1861448,1862013,1862041,1862052,1862785
authorStefan Eissing <icing@apache.org>
Tue, 9 Jul 2019 08:40:17 +0000 (08:40 +0000)
committerStefan Eissing <icing@apache.org>
Tue, 9 Jul 2019 08:40:17 +0000 (08:40 +0000)
commit0fe8468905427018b3419e5285d54c76445cc491
tree33bb1bfad12ec06e0f900dec945a0d5f029fb5e1
parentbcc14ae5f7032c450340d78dfed6dbda7d0964e1
Merged /httpd/httpd/trunk:r1861448,1862013,1862041,1862052,1862785

  *) mod_md: new features
     - supports the ACMEv2 protocol
     - new challenge method 'tls-alpn-01' implemented, needs mod_ssl patch to become available
     - supports command configuration to setup/teardown 'dns-01' challenges
     - supports wildcard certificates when dns challenges are configured
     - ACMEv2 is the new default and will be used on the next certificate renewal,
       unless another MDCertificateAuthority is configured
     - challenge type 'tls-sni-01' has been removed as CAs do not offer this any longer
     - a domain exposes its status at https://<domain>/.httpd/certificate-status
     - Managed Domains are now in Apache's 'server-status' page
     - A new handler 'md-status' exposes verbose status information in JSON format
     - new directives "MDCertificateFile" and "MDCertificateKeyFile" to configure a
       Managed Domain that uses static files. Auto-renewal is turned off for those.
     - new MDMessageCmd that is invoked on several events: 'renewed', 'expiring' and
       'errored'. New 'MDWarnWindow' directive to configure when expiration warnings
       shall be issued.
     - ACMEv2 endpoints use the GET via empty POST way of accessing resources, see
       announcement by Let's Encrypt:
       https://community.letsencrypt.org/t/acme-v2-scheduled-deprecation-of-unauthenticated-resource-gets/74380

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1862791 13f79535-47bb-0310-9956-ffa450edef68
53 files changed:
CHANGES
CMakeLists.txt
docs/manual/mod/mod_md.xml
modules/md/config2.m4
modules/md/md.h
modules/md/md_acme.c
modules/md/md_acme.h
modules/md/md_acme_acct.c
modules/md/md_acme_acct.h
modules/md/md_acme_authz.c
modules/md/md_acme_authz.h
modules/md/md_acme_drive.c
modules/md/md_acme_drive.h [new file with mode: 0644]
modules/md/md_acme_order.c [new file with mode: 0644]
modules/md/md_acme_order.h [new file with mode: 0644]
modules/md/md_acmev1_drive.c [new file with mode: 0644]
modules/md/md_acmev1_drive.h [new file with mode: 0644]
modules/md/md_acmev2_drive.c [new file with mode: 0644]
modules/md/md_acmev2_drive.h [new file with mode: 0644]
modules/md/md_core.c
modules/md/md_crypt.c
modules/md/md_crypt.h
modules/md/md_curl.c
modules/md/md_http.c
modules/md/md_http.h
modules/md/md_json.c
modules/md/md_json.h
modules/md/md_jws.c
modules/md/md_reg.c
modules/md/md_reg.h
modules/md/md_result.c [new file with mode: 0644]
modules/md/md_result.h [new file with mode: 0644]
modules/md/md_status.c [new file with mode: 0644]
modules/md/md_status.h [new file with mode: 0644]
modules/md/md_store.c
modules/md/md_store.h
modules/md/md_store_fs.c
modules/md/md_store_fs.h
modules/md/md_time.c [new file with mode: 0644]
modules/md/md_time.h [new file with mode: 0644]
modules/md/md_util.c
modules/md/md_util.h
modules/md/md_version.h
modules/md/mod_md.c
modules/md/mod_md.dsp
modules/md/mod_md.h
modules/md/mod_md_config.c
modules/md/mod_md_config.h
modules/md/mod_md_drive.c [new file with mode: 0644]
modules/md/mod_md_drive.h [new file with mode: 0644]
modules/md/mod_md_os.c
modules/md/mod_md_status.c [new file with mode: 0644]
modules/md/mod_md_status.h [new file with mode: 0644]