File _patchinfo of Package patchinfo.18605
<patchinfo incident="18605">
<issue tracker="jsc" id="SLE-15909"/>
<packager>dmolkentin</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for dehydrated</summary>
<description>This update for dehydrated fixes the following issues:
Update to dehydrated 0.7.0 (JSC#SLE-15909)
Added:
- Support for external account bindings
- Special support for ZeroSSL
- Support presets for some CAs instead of requiring URLs
- Allow requesting preferred chain (--preferred-chain)
- Added method to show CAs current terms of service (--display-terms)
- Allow setting path to domains.txt using cli arguments (--domains-txt)
- Added new cli command --cleanupdelete which deletes old files instead of archiving them
Fixed:
- No more silent failures on broken hook-scripts
- Better error-handling with KEEP_GOING enabled
- Check actual order status instead of assuming it's valid
- Don't include keyAuthorization in challenge validation (RFC compliance)
Changed:
- Using EC secp384r1 as default certificate type
- Use JSON.sh to parse JSON
- Use account URL instead of account ID (RFC compliance)
- Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated
- Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options
- Cleanup now also removes dangling symlinks
</description>
</patchinfo>