Tree: fcdb4acc39

dependabot/add-v2-config-file

dependabot/cargo/anyhow-1.0.81

dependabot/cargo/async-process-2.1.0

dependabot/cargo/clap-4.5.3

dependabot/cargo/log-0.4.21

dependabot/cargo/nix-0.28.0

dependabot/cargo/openssl-0.10.64

dependabot/cargo/reqwest-0.11.27

dependabot/cargo/serde-1.0.197

dependabot/cargo/serde_json-1.0.114

dependabot/cargo/thiserror-1.0.58

main

v0.1.0

v0.10.0

v0.11.0

v0.12.0

v0.13.0

v0.14.0

v0.15.0

v0.16.0

v0.17.0

v0.18.0

v0.19.0

v0.2.0

v0.2.1

v0.20.0

v0.21.0

v0.22.0

v0.22.1

v0.22.2

v0.23.0

v0.24.0

v0.3.0

v0.4.0

v0.5.0

v0.6.0

v0.6.1

v0.7.0

v0.8.0

v0.9.0

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from 'fcdb4acc39'

${ noResults }

Commit Graph

76 Commits (fcdb4acc393644f0d21a6c56aabc925d1e3e1410)

Author	SHA1	Message	Date
Rodolphe Bréard	ad217f2b5b	ACMEd v0.22.0	1 year ago
Jan Christian Grünhage	7567e7566c	Change the template engine to MiniJinja	2 years ago
Jan Christian Grünhage	30fa624afe	Expose file paths to post-operation hook	2 years ago
Jan Christian Grünhage	9502acf6e7	Switch to a default renew_delay of 30d This is in line with the recommendations of the Let's Encrypt integration guide, and the default most other clients implement as well.	2 years ago
Jan Christian Grünhage	59326edc7a	Randomized early renew Let's Encrypt suggests in the integration guide, that for spacing out renewals after issueing a lot of new certificates in a batch, you renew a few of them a bit early until it's evened out. This adds a config option that allows to set a timeframe in which early random delays are attempted.	2 years ago
Rodolphe Bréard	65ff3ae54e	ACMEd v0.21.0	2 years ago
Rodolphe Bréard	e7fd14b98a	ACMEd v0.19.0	3 years ago
Rodolphe Bréard	2c281d1cc7	Add the `--no-pid-file` argument Fixes #60	3 years ago
Rodolphe Bréard	9723118855	ACMEd v0.19.0	3 years ago
Rodolphe Bréard	b154b06952	Fix an example in the man	3 years ago
Rodolphe Bréard	5b42d1fe14	ACMEd v0.18.0	4 years ago
Rodolphe Bréard	32830cbd04	Add support for Ed25519 and Ed448 account keys and certificates Fixes #36	4 years ago
Rodolphe Bréard	5d9e1e3626	ACMEd v0.17.0	4 years ago
Rodolphe Bréard	2fa21bb7b7	Add the rev_labels template formatter	4 years ago
Rodolphe Bréard	30be12c79f	Change the template engine for TinyTemplate As discussed in the issue linked below, the template engine needed to be changed for various reasons. After a long search, it has been decided to use TinyTemplate since it is the best match so far. fixes #8	4 years ago
Rodolphe Bréard	90282482d8	Move the account and certificate default directories Those directories were located in /etc/acmed/, which is not the best choice. According to the Filesystem Hierarchy Standard, they should be located in /var/lib/acmed/. Because systems may have different conventions, those values are now configuration at build time. https://en.wikipedia.org/wiki/Filesystem_Hierarchy_Standard	4 years ago
Rodolphe Bréard	e588c0ca94	Remove the superfluous reference to identifier_tls_alpn	4 years ago
Borislav Borisov	42168f83d8	Minor documentation fixes	4 years ago
Rodolphe Breard	7c74e3b247	ACMEd v0.16.0	4 years ago
Rodolphe Breard	9e18254b73	Update the certificate's subject attributes	4 years ago
Rodolphe Breard	d738e794b9	Fix typo in the man	4 years ago
Rodolphe Breard	675a75b470	ACMEd v0.15.0	4 years ago
Rodolphe Breard	b7d848adef	Add the file_name_format config directive	4 years ago
Rodolphe Breard	e0ffe377a2	Allow certificates to have the same name but different key type	4 years ago
Rodolphe Breard	d7da82ad6f	ACMEd v0.14.0	4 years ago
Rodolphe Breard	426fb63c50	Allow to specify a unique name for each certificate	4 years ago
Rodolphe Breard	12b486c93a	Update the manual for acmed.toml Options were not alphabetically sorted, which made it hard for someone to find what he is looking for. Also, the TOML specification link has been updated.	4 years ago
Rodolphe Breard	1dcfe99405	Fix a tag in the man	4 years ago
Rodolphe Breard	44c6f99456	ACMEd v0.12.0	4 years ago
Rodolphe Breard	9ec48e7e03	Add the `root_certificates` parameter Being able to define root certificates in the command line is not enough for two reasons: 1. It is always global, you cannot define a root certificate for a specific endpoint. 2. Daemon scripts and unit files are not meant to be changed every time you need to add a root certificate. For those reasons, it is now to possible to define root certificates in the configuration. Those defined in the `global` section will be used on every endpoint, just like those added via the command line. Those defined in an endpoint will be used in this endpoint only.	4 years ago
Rodolphe Breard	d9fdc8cb08	Fix the man pages syntax	4 years ago
Rodolphe Breard	de6561cd24	ACMEd v0.12.0	4 years ago
Rodolphe Breard	8477d927a1	Add support for NIST P-521 curve and ES512 signatures	4 years ago
Rodolphe Breard	1a1c1bed91	Allow to specify subject attributes for certificates	4 years ago
Rodolphe Breard	0456737458	ACMEd v0.11.0	4 years ago
Rodolphe Breard	8c116f0b55	Add external account binding	4 years ago
Rodolphe Breard	51cfd49f08	Refactor the account management Until now, the account management was archaic and it was impossible to improve it without this heavy refactoring. Accounts are now disjoint from both certificates and endpoints. They have their own hooks and their own environment variables. They are stored in a binary file instead of the PEM exports of the private and public keys. This refactoring will allow account management to evolve into something more serious, with real key rollover, contact information update and so on.	4 years ago
Rodolphe Breard	f126ee22d0	ACMEd v0.10.0	4 years ago
Rodolphe Breard	52fe2c60ba	Refactor the certificate key type management The previous system used a duplicated enum (`acmed::certificate::Algorithm`) and an imprecise identifier name (algorithm) for both the certificate configuration and post operation hook variable. The first one has been replaced by the `acme_common::crypto::KeyType` enum and the second renames `key_type`.	4 years ago
Rodolphe Breard	bea33179d7	Allow to specify the CSR's digest algorithm	4 years ago
Rodolphe Breard	c5f1e90276	Add the `--crt-digest` option in tacd	4 years ago
Rodolphe Breard	602d8c6cf6	Add the `--crt-signature-alg` option in tacd	4 years ago
Rodolphe Breard	a0f4928a73	Move the account key type and signing algorithm Those options are tied with the account and should therefore be defined in the associated section, not in the endpoint section.	4 years ago
Rodolphe Breard	2f39e798d1	Add Unix style globing for config file inclusion Close #6	4 years ago
Rodolphe Breard	25450aebbf	Implement IP identifiers RFC 8738: https://tools.ietf.org/html/rfc8738	4 years ago
Rodolphe Breard	62db048a46	Allow to define a custom delay for renewal	4 years ago
Rodolphe Breard	582593de29	Allow to specify the account key type and signature alg in the config	4 years ago
Rodolphe Breard	1297c6547f	Update the acmed.toml man page	5 years ago
Rodolphe Breard	942d0a9ba7	ACMEd v0.8.0	5 years ago
Danilo Bargen	70d013254f	Document how certificates are identified	5 years ago