acmed

Commit Graph

Author	SHA1	Message	Date
Jan Christian Grünhage	59326edc7a	Randomized early renew Let's Encrypt suggests in the integration guide, that for spacing out renewals after issueing a lot of new certificates in a batch, you renew a few of them a bit early until it's evened out. This adds a config option that allows to set a timeframe in which early random delays are attempted.	2 years ago
Rodolphe Bréard	1322814ebc	Update the change log	2 years ago
Rodolphe Bréard	3d41aea381	Update the MSRV	2 years ago
Rodolphe Bréard	c0b09d5267	Update the change log	2 years ago
Rodolphe Bréard	db58ca0832	Update the change log	2 years ago
Rodolphe Bréard	e7fd14b98a	ACMEd v0.19.0	3 years ago
Rodolphe Bréard	0d1fddd9d4	Stop using `libc::time_t` This type was used for the calculation of the certificate's expiration delay, which causes troubles on some 32 bits systems. Rel #59	3 years ago
Rodolphe Bréard	01894bcf27	Add some missing file path in log messages Rel #24	3 years ago
Rodolphe Bréard	2c281d1cc7	Add the `--no-pid-file` argument Fixes #60	3 years ago
Rodolphe Bréard	45f4aeb239	Fix an invalid reference in the command line arguments	3 years ago
Rodolphe Bréard	8b7fb49207	Fix the changelog	3 years ago
Rodolphe Bréard	9723118855	ACMEd v0.19.0	3 years ago
Rodolphe Bréard	596d55a486	Add the acmed@user.service systemd unit configuration	3 years ago
Rodolphe Bréard	fbfc124059	Update the minimal required Rust version	3 years ago
Rodolphe Bréard	5b42d1fe14	ACMEd v0.18.0	3 years ago
Rodolphe Bréard	32830cbd04	Add support for Ed25519 and Ed448 account keys and certificates Fixes #36	3 years ago
Rodolphe Bréard	9a52340303	Add new verbs to the polkit rule	4 years ago
Rodolphe Bréard	5d9e1e3626	ACMEd v0.17.0	4 years ago
Rodolphe Bréard	25900e7418	Update the change log	4 years ago
Ralf Zerres	c9c12692c9	update LFS compliance volatile runtime data * the former /var/run is depreciated -> using /run * update rust build scripts sources to use the new path * update CHANGELOG to reflect the changes Signed-off-by: Ralf Zerres <ralf.zerres@networkx.de>	4 years ago
Rodolphe Bréard	90282482d8	Move the account and certificate default directories Those directories were located in /etc/acmed/, which is not the best choice. According to the Filesystem Hierarchy Standard, they should be located in /var/lib/acmed/. Because systems may have different conventions, those values are now configuration at build time. https://en.wikipedia.org/wiki/Filesystem_Hierarchy_Standard	4 years ago
Rodolphe Bréard	2a2e743f6a	Allow the configuration of some default values at compile time using environment variables	4 years ago
Rodolphe Breard	7c74e3b247	ACMEd v0.16.0	4 years ago
Rodolphe Breard	9e18254b73	Update the certificate's subject attributes	4 years ago
Rodolphe Breard	675a75b470	ACMEd v0.15.0	4 years ago
Rodolphe Breard	b7d848adef	Add the file_name_format config directive	4 years ago
Rodolphe Breard	eb6e363307	Include config files only once	4 years ago
Rodolphe Breard	e0ffe377a2	Allow certificates to have the same name but different key type	4 years ago
Rodolphe Breard	5506fbe71b	Add Rust 1.42 compatibility	4 years ago
Rodolphe Breard	6a57a92bc5	Update the nom dependency	4 years ago
Rodolphe Breard	d7da82ad6f	ACMEd v0.14.0	4 years ago
Rodolphe Breard	426fb63c50	Allow to specify a unique name for each certificate	4 years ago
Rodolphe Breard	27e321d90d	Fix the CHANGELOG	4 years ago
Rodolphe Breard	cdc8f79853	Update the attohttpc dependency Finishes the job initiated in #39	4 years ago
Rodolphe Breard	44c6f99456	ACMEd v0.12.0	4 years ago
Rodolphe Breard	82674904c1	Allow to specify a target in the Makefile	4 years ago
Rodolphe Breard	8c0d208fe5	Add the `openssl_vendored` feature rel #4	4 years ago
Rodolphe Breard	9ec48e7e03	Add the `root_certificates` parameter Being able to define root certificates in the command line is not enough for two reasons: 1. It is always global, you cannot define a root certificate for a specific endpoint. 2. Daemon scripts and unit files are not meant to be changed every time you need to add a root certificate. For those reasons, it is now to possible to define root certificates in the configuration. Those defined in the `global` section will be used on every endpoint, just like those added via the command line. Those defined in an endpoint will be used in this endpoint only.	4 years ago
Rodolphe Breard	de6561cd24	ACMEd v0.12.0	4 years ago
Rodolphe Breard	0db5e6898f	Stop to require the `orders` field on account creation RFC 8555 states that: - when an account is successfully created, the server "returns this account object" (section 7.3); - the `orders` field in account objects is mandatory (section 7.1.2). Despite that, Boulder does not returns the `orders` field when an account is created. This non-standard behavior prevented ACMEd from creating account and testing them for existence. In order to allow ACMEd to retrieve certificates from CAs using Boulder, the `orders` field is no longer mandatory and the account existence is tested when the order is requested. https://github.com/letsencrypt/boulder/issues/3335	4 years ago
Rodolphe Breard	8477d927a1	Add support for NIST P-521 curve and ES512 signatures	4 years ago
Rodolphe Breard	1a1c1bed91	Allow to specify subject attributes for certificates	4 years ago
Rodolphe Breard	0456737458	ACMEd v0.11.0	4 years ago
Rodolphe Breard	2e526f63e2	Update the CHANGELOG	4 years ago
Rodolphe Breard	8c116f0b55	Add external account binding	4 years ago
Rodolphe Breard	51cfd49f08	Refactor the account management Until now, the account management was archaic and it was impossible to improve it without this heavy refactoring. Accounts are now disjoint from both certificates and endpoints. They have their own hooks and their own environment variables. They are stored in a binary file instead of the PEM exports of the private and public keys. This refactoring will allow account management to evolve into something more serious, with real key rollover, contact information update and so on.	4 years ago
Rodolphe Breard	f126ee22d0	ACMEd v0.10.0	4 years ago
Rodolphe Breard	64e7d80f7c	Improve the CHANGELOG	4 years ago
Rodolphe Breard	52fe2c60ba	Refactor the certificate key type management The previous system used a duplicated enum (`acmed::certificate::Algorithm`) and an imprecise identifier name (algorithm) for both the certificate configuration and post operation hook variable. The first one has been replaced by the `acme_common::crypto::KeyType` enum and the second renames `key_type`.	4 years ago
Rodolphe Breard	2f39e798d1	Add Unix style globing for config file inclusion Close #6	4 years ago

1 2 3

108 Commits (b41f1165ca3e42a8858c020068229ee0c90d39c5)