1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73
|
lacme (0.5-1+deb10u2) buster; urgency=medium
* Use upstream certificate chain instead of an hardcoded one.
This is a breaking change. The certificate indicated by 'CAfile' is no
longer used as is in 'certificate-chain' (along with the leaf cert).
The chain returned by the ACME v2 endpoint is used instead. This allows
for more flexbility with respect to key/CA rotation, cf.
https://letsencrypt.org/2020/11/06/own-two-feet.html and
https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018
* Additional current/planned CA certificates can be found under
/usr/local/share/lacme:
- lets-encrypt-e[12].pem
- lets-encrypt-r[34]-cross-signed.pem
- lets-encrypt-r[34].pem
- letsencryptauthorityx[34].pem
See https://letsencrypt.org/certificates/
* Moreover 'CAfile' now defaults to /usr/share/lacme/ca-certificates.crt
which is a concatenation of all known active CA certificates (which
includes the previous default).
Closes: #975862.
-- Guilhem Moulin <guilhem@debian.org> Thu, 26 Nov 2020 01:14:50 +0100
lacme (0.5-1+deb10u1) buster; urgency=medium
* Link to RFC 8555 <https://tools.ietf.org/html/rfc8555> instead of the
ACME I-D URL.
* Issue GET and POST-as-GET requests (RFC 8555 sec. 6.3) for the
authorizations, order and certificate URLs. Let's Encrypt will remove
support of unauthenticated GETs from the V2 API on 01 Nov 2019.
Closes: #935799.
-- Guilhem Moulin <guilhem@debian.org> Thu, 22 Aug 2019 00:14:42 +0200
lacme (0.5-1) unstable; urgency=medium
* New upstream release, adding support for v2 ACME endpoints.
* Fix manpage generation with pandoc >=2.1. (Closes: #896982.)
* debian/control:
+ Bump Standards-Version to 4.1.4. No changes.
+ Build-depends: bump minimum pandoc version to 2.1.
+ Depends (lacme): add libtypes-serialiser-perl
-- Guilhem Moulin <guilhem@debian.org> Wed, 09 May 2018 14:17:19 +0200
lacme (0.4-1) unstable; urgency=medium
* Fix manpage generation with pandoc >=1.18. (Closes: #869885.)
-- Guilhem Moulin <guilhem@debian.org> Fri, 28 Jul 2017 00:24:06 +0200
lacme (0.3-1) unstable; urgency=low
* New upstream release.
* Provide apache2 and nginx configuration snippet in /etc/lacme.
* debian/control: Bump Standards-Version to 4.0.0. No changes.
-- Guilhem Moulin <guilhem@debian.org> Sun, 09 Jul 2017 00:41:23 +0200
lacme (0.2-1) unstable; urgency=low
* New upstream release.
* debian/control:
+ Promote lacme-accountd from lacme's Suggests to Recommends.
+ Bump Standards-Version to 3.9.8. No changes.
-- Guilhem Moulin <guilhem@guilhem.org> Mon, 05 Dec 2016 16:35:59 +0100
lacme (0.1-1) unstable; urgency=low
* Initial release. (Closes: #827357, #827358.)
-- Guilhem Moulin <guilhem@guilhem.org> Tue, 08 Dec 2015 18:58:20 +0100
|