Skip to content

v0.14.0

Choose a tag to compare

View all tags
@mholt mholt released this 12 Jun 20:16
· 255 commits to master since this release
v0.14.0
This tag was signed with the committer’s verified signature.
mholt Matt Holt
GPG key ID: 2A349DD577D586A5
Verified
Learn about vigilant mode.
07f7d0d
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

A few fixes and enhancements:

  • An experimental feature was fixed that automatically replaces certificates which have been revoked. Now it actually works.
  • If a certificate is revoked specifically due to key compromise, the compromised key will be rotated and out and the replacement certificate will use a new key.
  • ObtainCert() and RenewCert() have been split into Sync and Async versions, similar to ManageSync() and ManageAsync(), to bring consistency to the exported API, as well as to make room for...
  • ... forced renewals, which is now a boolean argument passed into RenewCert*() methods. This will renew a certificate even if it is not expiring.
  • Obtain operations will reuse existing private keys if already in storage. It is still a no-op if all certificate assets (cert, key, and meta) are already in storage.
  • Improved logging of errors between issuers when obtaining and renewing certificates.
  • If DNS resolvers are explicitly configured, they will be used exclusively and not fall back to system resolvers. This makes the DNS challenge solvers work better in weird DNS setups.
Assets 2
Loading