Repository navigation
Releases: XMZO/JustEnoughCerts
Releases · XMZO/JustEnoughCerts
Release list
v0.1.0-alpha.7
Changelog
Features
- 0906e89 feat(web): fonts of its own, Inter, JetBrains Mono and Noto Sans SC
Bug fixes
- a04e368 fix(deploy): the compose file runs the newest test release
Container image
docker pull ghcr.io/xmzo/justenoughcerts:0.1.0-alpha.7Verify
cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
--certificate-identity-regexp '^https://github\.com/XMZO/JustEnoughCerts/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --ignore-missing -c checksums.txt
cosign verify ghcr.io/xmzo/justenoughcerts:0.1.0-alpha.7 \
--certificate-identity-regexp '^https://github\.com/XMZO/JustEnoughCerts/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.comSizes
| Platform | Binary | Archive | Image |
|---|---|---|---|
| darwin/amd64 | 77.2 MiB | 26.2 MiB | - |
| darwin/arm64 | 71.7 MiB | 24.4 MiB | - |
| linux/amd64 | 74.9 MiB | 25.5 MiB | 25.5 MiB |
| linux/arm/v7 | 72.1 MiB | 24.3 MiB | 24.4 MiB |
| linux/arm64 | 68.9 MiB | 23.2 MiB | 23.3 MiB |
Budgets: 80.0 MiB for a binary, 27.0 MiB for an archive or an image.
v0.1.0-alpha.6
Changelog
Features
- a00bd89 feat: earlier versions can be revoked at their CA
- 27f00c0 feat: jec service installs JEC as a systemd service
- cdd2010 feat: plugin sources can revoke what they issued
Bug fixes
- 2f1f8aa fix: the log can be scrolled from the keyboard
Container image
docker pull ghcr.io/xmzo/justenoughcerts:0.1.0-alpha.6Verify
cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
--certificate-identity-regexp '^https://github\.com/XMZO/JustEnoughCerts/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --ignore-missing -c checksums.txt
cosign verify ghcr.io/xmzo/justenoughcerts:0.1.0-alpha.6 \
--certificate-identity-regexp '^https://github\.com/XMZO/JustEnoughCerts/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.comSizes
| Platform | Binary | Archive | Image |
|---|---|---|---|
| darwin/amd64 | 76.8 MiB | 25.8 MiB | - |
| darwin/arm64 | 71.4 MiB | 24.1 MiB | - |
| linux/amd64 | 74.5 MiB | 25.2 MiB | 25.2 MiB |
| linux/arm/v7 | 71.8 MiB | 24.0 MiB | 24.1 MiB |
| linux/arm64 | 68.6 MiB | 22.9 MiB | 23.0 MiB |
Budgets: 80.0 MiB for a binary, 27.0 MiB for an archive or an image.
v0.1.0-alpha.5
Changelog
Features
- 7419a23 feat(aliyun): apply for certificates at Alibaba Cloud with JEC's own key
- f18697e feat(aliyun): deploy to Certificate Management Service and CLB
- f559909 feat(aliyun): deploy to custom domains of OSS buckets
- 18827e3 feat(aliyun): deploy to the listeners of ALB load balancers
- b3dbab7 feat(certs): the settings say how often a failure is retried
- 9284377 feat(lego): test the keys of DNSPod, Alibaba Cloud DNS, Cloudflare and Huawei Cloud DNS
- 9a7c642 feat(plugins): DNS solvers of plugins add records of any type
- 8d40e7f feat(plugins): certificate sources
- 7d351b1 feat(providers): credentials that providers share
- f59987e feat(providers): each card tells how its provider fared last
- 04f4e9c feat(settings): a theme to choose, and a check for updates
- 61c334c feat(tencentcloud): apply for Tencent Cloud's free certificates
- 5fe2242 feat(upyun): UPYUN CDN as an experimental deploy target
- f50e52d feat(web): a certificate's page shows its last run
- 62f5df6 feat(web): close gaps to the design boards
- f99ae08 feat(web): each row of the certificate list has a menu
- 9b6aed3 feat(web): each target of a certificate tells where it deploys
- 8afccc2 feat(web): install the app to a phone's home screen
- 29463d0 feat(web): save and test a provider from its dialog
- 7eb731a feat(web): the certificate pages tell more, as the design has it
- 75275ef feat(web): the credentials page, and credentials in providers' forms
- 5f31053 feat(web): the sign-in pages have the design's hotbar
- 09ea091 feat(webhook): request bodies in a format of your own
- 2e1a61f feat: a time zone for the whole panel
- 389886e feat: add DNS records of any type for the validations of vendors
- 6f6f63f feat: deploy into Caddy through its admin API
- ec42218 feat: deploy to Baidu AI Cloud CDN
- 1324b49 feat: deploy to Huawei Cloud CDN and to Cloudflare custom certificates
- 28a5e3d feat: deploy to Volcengine CDN
- 0ffbba5 feat: export and import the configuration as YAML
- a59f288 feat: hooks, scripts of your own that run on certificate events
- 197aaad feat: providers that reach services abroad take a proxy
- 4671d82 feat: sign in through an OpenID Connect provider
- c307f8f feat: take in the certificates Alibaba Cloud and Tencent Cloud issued
- 1b90ef5 feat: the DNS resolvers that find zones can be set
- 1f45738 feat: the files a certificate is written as can be set
Bug fixes
- 1a849c5 fix(sources): keep the order when an attempt fails after placing it
- 983a0fa fix(web): the history and the settings fit their text
- 8ebed57 fix(web): the theme buttons share the row on phones
Container image
docker pull ghcr.io/xmzo/justenoughcerts:0.1.0-alpha.5Verify
cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
--certificate-identity-regexp '^https://github\.com/XMZO/JustEnoughCerts/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --ignore-missing -c checksums.txt
cosign verify ghcr.io/xmzo/justenoughcerts:0.1.0-alpha.5 \
--certificate-identity-regexp '^https://github\.com/XMZO/JustEnoughCerts/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.comSizes
| Platform | Binary | Archive | Image |
|---|---|---|---|
| darwin/amd64 | 76.7 MiB | 25.8 MiB | - |
| darwin/arm64 | 71.3 MiB | 24.1 MiB | - |
| linux/amd64 | 74.4 MiB | 25.1 MiB | 25.2 MiB |
| linux/arm64 | 68.6 MiB | 22.9 MiB | 22.9 MiB |
Budgets: 80.0 MiB for a binary, 27.0 MiB for an archive or an image.
v0.1.0-alpha.4
Changelog
Features
- 3d84da5 feat(web): say so on the notifications page when the notify module is off
- 5de667b feat(web): show the trusted proxies and HSTS on the Settings page
- c1f02c0 feat: API tokens for scripts and other programs
- 3475b4e feat: deploy into Kubernetes TLS Secrets
- d3e6d68 feat: deploy to AWS Certificate Manager
- d7bd03b feat: deploy to Nginx Proxy Manager
- 3a9506c feat: deploy to Qiniu Cloud's CDN
- 6a7d8f6 feat: deploy to Synology DSM
- 7350775 feat: find clients behind trusted reverse proxies
- 6993ff5 feat: keep an audit log of what is done through the panel
- da25009 feat: notify through Discord, Slack and Pushover
- ebf5a0c feat: renew when the CA suggests, through ACME Renewal Information
- 5cec92f feat: restore a backup from the Settings page
- 95473c0 feat: send the security headers with every answer, and HSTS on request
Bug fixes
- fde54c2 fix(test): keep CJK text out of the live tests of notifiers
- 77f529e fix: record who a sign-in signs in
Container image
docker pull ghcr.io/xmzo/justenoughcerts:0.1.0-alpha.4Verify
cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
--certificate-identity-regexp '^https://github\.com/XMZO/JustEnoughCerts/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --ignore-missing -c checksums.txt
cosign verify ghcr.io/xmzo/justenoughcerts:0.1.0-alpha.4 \
--certificate-identity-regexp '^https://github\.com/XMZO/JustEnoughCerts/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.comSizes
| Platform | Binary | Archive | Image |
|---|---|---|---|
| darwin/amd64 | 74.8 MiB | 25.2 MiB | - |
| darwin/arm64 | 69.6 MiB | 23.5 MiB | - |
| linux/amd64 | 72.5 MiB | 24.5 MiB | 24.5 MiB |
| linux/arm64 | 66.9 MiB | 22.3 MiB | 22.4 MiB |
Budgets: 80.0 MiB for a binary, 27.0 MiB for an archive or an image.
v0.1.0-alpha.3
Changelog
Features
- 9e33d41 feat(files): run a command once the files are written
- ce59314 feat: check online that domains serve the version in use
- 99d4d24 feat: deploy into Docker containers
- 4bc2a86 feat: deploy through Tencent Cloud's SSL Certificates
- a464cae feat: deploy to Alibaba Cloud CDN and DCDN
- cfff5f6 feat: deploy to BaoTa and 1Panel
- 58d160e feat: deploy to Proxmox VE nodes
- 368eff2 feat: external plugins
- b97a102 feat: notify through DingTalk, Feishu and WeCom group robots
- 9e5e112 feat: notify through ServerChan, Bark, ntfy and Gotify
- f4a2a16 feat: renew at a time of day, and the settings page
- c1e5bd1 feat: take in the certificates certbot and acme.sh renew
- 1370818 feat: the password and backups on the settings page, and PFX uploads
- d8e86e0 feat: two-factor authentication, and how long sign-ins last
- e8a1f78 feat: validate with DNS records added by hand
Bug fixes
- 0a27deb fix(esa): read the error codes Alibaba Cloud's client really returns
- e95af19 fix(files): read the watched directory through an os.Root
- 64fe6a1 fix(i18n): take whole numbers from JSON as plural counts
- 8c663c6 fix: list the libraries of two-factor authentication as direct dependencies
Others
- a243c32 refactor: notes carry a subject marked as JEC's
Container image
docker pull ghcr.io/xmzo/justenoughcerts:0.1.0-alpha.3Verify
cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
--certificate-identity-regexp '^https://github\.com/XMZO/JustEnoughCerts/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --ignore-missing -c checksums.txt
cosign verify ghcr.io/xmzo/justenoughcerts:0.1.0-alpha.3 \
--certificate-identity-regexp '^https://github\.com/XMZO/JustEnoughCerts/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.comSizes
| Platform | Binary | Archive | Image |
|---|---|---|---|
| darwin/amd64 | 74.2 MiB | 24.9 MiB | - |
| darwin/arm64 | 69.0 MiB | 23.3 MiB | - |
| linux/amd64 | 71.9 MiB | 24.3 MiB | 24.3 MiB |
| linux/arm64 | 66.3 MiB | 22.1 MiB | 22.2 MiB |
Budgets: 80.0 MiB for a binary, 27.0 MiB for an archive or an image.
v0.1.0-alpha.2
Changelog
Features
- 289e65f feat: answer HTTP validations at ESA's edge
Container image
docker pull ghcr.io/xmzo/justenoughcerts:0.1.0-alpha.2Verify
cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
--certificate-identity-regexp '^https://github\.com/XMZO/JustEnoughCerts/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --ignore-missing -c checksums.txt
cosign verify ghcr.io/xmzo/justenoughcerts:0.1.0-alpha.2 \
--certificate-identity-regexp '^https://github\.com/XMZO/JustEnoughCerts/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.comSizes
| Platform | Binary | Archive | Image |
|---|---|---|---|
| darwin/amd64 | 72.0 MiB | 24.1 MiB | - |
| darwin/arm64 | 67.0 MiB | 22.5 MiB | - |
| linux/amd64 | 69.8 MiB | 23.5 MiB | 23.5 MiB |
| linux/arm64 | 64.4 MiB | 21.4 MiB | 21.4 MiB |
Budgets: 80.0 MiB for a binary, 27.0 MiB for an archive or an image.
v0.1.0-alpha.1
Changelog
Features
- 2303896 feat(certs): the history of issuances and deployments
- e905cff feat(cryptox): EncodeKeyTraditional
- 45b4b18 feat(cryptox): generate private keys by key type
- 1df4107 feat(cryptox): make a bundle from issued certificates and their key
- 6073189 feat(email): notify by mail through an SMTP server
- 18e9f60 feat(esa): deploy certificates to Aliyun ESA sites
- 77b0ef7 feat(httpx): HTTP clients for services people set up
- 2cc3f8d feat(jobs): let a module trigger its job before its next time
- e074d9d feat(notify): tell people about certificate events through notifiers
- 2bff57a feat(providers): advanced and conditional fields, and no null lists
- 9c42b4e feat(providers): language fields, and listing instances for modules
- fcc6cba feat(ssh): deploy to servers over SSH
- ad0bdbc feat(telegram): notify through a Telegram bot
- 4f57e2b feat(web): configure providers, issue certificates, follow issuances
- fa5f577 feat(web): the history page and the recent activity
- 73f3256 feat(web): the notifications page
- 902a719 feat(webhook): notify and deploy through webhooks
- 7241ebd feat: add package contracts with the certificate events
- 5c2478a feat: add retry rules: backoff with jitter, Retry-After and permanent errors
- 54611ce feat: add the ACME module
- fb7a3c7 feat: add the app shell, the overview and the certificate pages
- 5e78502 feat: add the certs module
- 2bbd8cf feat: add the event bus
- ba3e3f9 feat: add the job scheduler
- 54aa307 feat: add the lego module with lego's DNS providers
- deb85ff feat: add the provider registry
- f6e11d0 feat: answer HTTP validations from JEC itself
- 57de183 feat: deploy each new version of a certificate to its targets
- 3916af8 feat: download a version with its private key after the password
- b0e8f93 feat: get Namecheap's certificates through its SSL Manager
- 5384ae5 feat: give modules the event bus and the scheduler
- af6c762 feat: issue and renew certificates through source providers
- e30b382 feat: let an API error point at a field with its own message
- a21f17a feat: let issuances wait on their source
- 277b1ff feat: never send null arrays from the API
- 3d08f7c feat: read certificate bundles in internal/lib/cryptox
- c6e6205 feat: run module code in child processes
- c24e242 feat: seal stored secrets with a master key
- 9ff4b64 feat: switch modules on and off
- cdaa2fd feat: tell unreadable certificates and keys apart, and add cryptoxtest
- 126f201 feat: test the settings of providers
- de86a62 feat: the Target contract, and a local directory target
- 8b435ab feat: validate domains with files on the website
Bug fixes
- bdcbe0d fix(certs): end a queue run quietly when JEC stops
- 19bb710 fix(tools): download lego when the catalog check runs on a fresh module cache
- 5b2295c fix(web): let the history table fit with long names and wide fonts
- 912f24f fix(web): let two labels fit on phones
- aea65fa fix: give the sidebar labels the tooltip a cut label needs
- d1902a9 fix: let a button wrap its label when its row is too narrow
- 9bd791e fix: never reuse the ID of a deleted provider
Container image
docker pull ghcr.io/xmzo/justenoughcerts:0.1.0-alpha.1Verify
cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
--certificate-identity-regexp '^https://github\.com/XMZO/JustEnoughCerts/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --ignore-missing -c checksums.txt
cosign verify ghcr.io/xmzo/justenoughcerts:0.1.0-alpha.1 \
--certificate-identity-regexp '^https://github\.com/XMZO/JustEnoughCerts/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.comSizes
| Platform | Binary | Archive | Image |
|---|---|---|---|
| darwin/amd64 | 71.7 MiB | 24.1 MiB | - |
| darwin/arm64 | 66.7 MiB | 22.4 MiB | - |
| linux/amd64 | 69.5 MiB | 23.4 MiB | 23.4 MiB |
| linux/arm64 | 64.1 MiB | 21.3 MiB | 21.4 MiB |
Budgets: 80.0 MiB for a binary, 27.0 MiB for an archive or an image.
v0.0.1
Changelog
Features
- a2bb7ad feat: add the first-run setup, sign-in and sessions
- 2e12c80 feat: add the i18n module and its gates
- c454691 feat: add the jec command with serve, healthcheck and version
- d4ca321 feat: add the kernel store, module registry and API
- 2997a7e feat: add the web UI with sign-in and the setup wizard
- 974d8f1 feat: list the compiled-in modules in package all and test module imports
- d599ab7 feat: lock sign-in for 15 minutes after 5 failures and add reset-password
- b772c26 feat: scaffold modules with tools/new-module
Bug fixes
Others
- 01b5938 Initial commit
Container image
docker pull ghcr.io/xmzo/justenoughcerts:0.0.1Verify
cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
--certificate-identity-regexp '^https://github\.com/XMZO/JustEnoughCerts/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --ignore-missing -c checksums.txt
cosign verify ghcr.io/xmzo/justenoughcerts:0.0.1 \
--certificate-identity-regexp '^https://github\.com/XMZO/JustEnoughCerts/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.comSizes
| Platform | Binary | Archive | Image |
|---|---|---|---|
| darwin/amd64 | 15.6 MiB | 6.9 MiB | - |
| darwin/arm64 | 14.6 MiB | 6.4 MiB | - |
| linux/amd64 | 15.4 MiB | 6.8 MiB | 6.8 MiB |
| linux/arm64 | 14.3 MiB | 6.2 MiB | 6.2 MiB |
Budgets: 20.0 MiB for a binary, 8.0 MiB for an archive or an image.