File uacme.changes of Package uacme
-------------------------------------------------------------------
Mon Dec 30 10:21:59 UTC 2024 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.7.6
* Fix OpenSSL 3.x deprecated APIs.
* Fix cross compilation.
* uacme: Add environment variables.
* uacme: Add support for ACME Renewal Information (ARI).
* uacme: Try obtaining new Reply-Nonce if server doesn't supply
one.
* uacme: Add hook environment variables.
* uacme: Allow matching alternative chain by Authority Key Id.
-------------------------------------------------------------------
Tue Feb 20 15:40:50 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
- Use %autosetup macro. Allows to eliminate the usage of deprecated
%patchN
-------------------------------------------------------------------
Fri Feb 2 08:05:04 UTC 2024 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.7.5
* fix ualpn exit code in client mode
* fix build with autoconf version 2.71
* nsupdate.sh overhaul and DNAME redirection support
-------------------------------------------------------------------
Tue Jun 27 15:19:17 UTC 2023 - Dirk Müller <dmueller@suse.com>
- update to 1.7.4:
* uacme: Validate token from ACME server.
* minor documentation changes including copyright year
-------------------------------------------------------------------
Sat Dec 3 13:38:24 UTC 2022 - Adrian Schröter <adrian@suse.de>
- Update to version 1.7.3
* ualpn.c: fix build with mbedtls 2.x …
* LibreSSL > 3.5.0 has ASN1_TIME_diff()
* Enable --must-staple support with LibreSSL > 3.5.0 …
* Add Unix philosophy link to README.md
* Compatibility wth LibreSSL
-------------------------------------------------------------------
Mon Aug 8 08:10:43 UTC 2022 - Yasuhiko Kamata <belphegor@belbel.or.jp>
- Update to version 1.7.2
* uacme: exponential backoff for status polling instead
of constant 5s delay (reduces load on server)
* uacme: new -r option to allow specifying revocation code
* uacme: fix silent failure in nsupdate.sh
closes https://github.com/ndilieto/uacme/issues/45
* uacme: replace 'echo' with 'printf' in uacme.sh
closes https://github.com/ndilieto/uacme/issues/48
* uacme: fix -Wsign-compare warning
* compatibility with mbedTLS v3.2
* compatibility with LibreSSL (with some limitations)
see https://github.com/ndilieto/uacme/commit/32546c7c
* embed ax_check_compile_flag.m4 from autoconf-archive as
requested in https://github.com/ndilieto/uacme/pull/57
* minor documentation changes including copyright year
- Removed libev-devel from BuildRequires which causes conflict in
Tumbleweed.
- Added uacme-fix-incorrect-return-types.patch to be able to build
in Tumbleweed (original patch is at
https://github.com/socketry/nio4r/pull/276).
-------------------------------------------------------------------
Tue Apr 19 13:43:24 UTC 2022 - Ferdinand Thiessen <rpm@fthiessen.de>
- Update to version 1.7.1
* uacme: fix issue when running from inaccessible directory
* ualpn: use default user group when -u <user> is specified
- Update to version 1.7.0
* uacme: alternate chain selection by certificate fingerprint
* print copyright with version
* ualpn: print copyright with version
* add notice with version on startup
* reject duplicate options where appropriate
* make ualpn.sh always outputs to stderr
* fix compilation warning
- Update to version 1.6
* uacme: add support for RFC8555 External Account Binding
* fix use after free in surrogate strcasestr function
* make nsupdate.sh accept quoted TXT challenge values
* minor cosmetic changes to log messages
- Rebased suse-www-path.patch
-------------------------------------------------------------------
Mon Aug 17 11:58:57 UTC 2020 - Dirk Mueller <dmueller@suse.com>
- update to 1.5:
- uacme: -l option to allow selecting alternate chain
- ualpn: mbedtls_x509_crt_parse_der_with_ext_cb support
-------------------------------------------------------------------
Sun May 31 17:22:47 UTC 2020 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.4.1
* fix SIGPIPE of parent process in daemon mode
- Update to version 1.4
* fix nsupdate.sh
* uacme: warn that --must-staple is ignored with CSRFILE
* ualpn: swap -p and -P command line switches
* ualpn: remove redundant memset
* ualpn: increase key buffer size as required by OpenSSL 3.x
* ualpn: fix minor OpenBSD portability issues
* ualpn: fix typo in warning message
* ualpn: fix library link order when using built-in libev
* README.md now included in distribution
- Update to version 1.3
* allow signing revocation requests with certificate key
* add support for issuing certificates based on a CSR
* add mbedTLS implementation of OCSP check
* add nsupdate.sh dns-01 authentication script
* improve handling of RFC8738 with OpenSSL/mbedTLS
* fix memory leak in csr_gen upon some OpenSSL errors
- Update to version 1.2.4
* improve mbedTLS detection in configure.ac
* check format string arguments with GCC
* ualpn: fix incorrect message arguments
-------------------------------------------------------------------
Sun Apr 26 13:09:47 UTC 2020 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.2.3
* fix Content-Type header parsing
-------------------------------------------------------------------
Sun Apr 19 18:50:49 UTC 2020 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.2.2
* fix ualpn socket type bug on uClibc based systems
* fix configure.ac MAP_ANON cross-compilation test
-------------------------------------------------------------------
Fri Apr 17 19:51:25 UTC 2020 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.2.1
* increase cert buf size to cope with long identifiers
* fix gcc8 -Wstringop-truncation warning
- Update to version 1.2
* add uacme OCSP certificate status check
* add ualpn OpenSSL/mbedTLS implementations
* add key usage to ualpn challenge certificate
* ensure top bit of ualpn certificate S/N is 0 with OpenSSL
* fix ualpn memory leaks and corner case bugs
* minor cosmetic code and documentation changes
-------------------------------------------------------------------
Fri Mar 13 18:15:58 UTC 2020 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.1.2
* fix configure.ac typo affecting LDFLAGS
- Update to version 1.1.1
* fix typo breaking build without HAVE_SPLICE
* fix addr_t name collision on s390x
- Update to version 1.1
* added IP identifier support (RFC8738)
* added tls-alpn-01 (RFC8737) challenge responder (ualpn)
- Update patch:
* suse-www-path.patch
- With version 1.1 a new binary named "ualpn" was added.
"ualpn" can be used as a proxying ACMEv2 tls-alpn-01 responder
- Add libev-devel to BuildRequires (needed by ualpn)
-------------------------------------------------------------------
Thu Mar 5 14:48:20 UTC 2020 - Adrian Schröter <adrian@suse.de>
- default to /srv/www/htdocs instead of /var/www for web server path
Add patch:
* suse-www-path.patch
-------------------------------------------------------------------
Sun Feb 2 10:56:22 UTC 2020 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.0.22
* relax account status check (compatibility with buypass.no)
* allow client challenge retry requests (RFC8555 sec. 7.1.6)
* pass -L flag to a2x in order to avoid depending on xmllint
* add wildcard clarification in manpage
- Update to version 1.0.21
* Fixed uacme.sh: https://github.com/ndilieto/uacme/pull/12
* Added LFS support (AC_SYS_LARGEFILE)
-------------------------------------------------------------------
Sat Jan 4 12:37:29 UTC 2020 - Martin Hauke <mardnh@gmx.de>
- Initial package, version 1.0.20
