- New NameCheap DNS provider (courtesy of @impworks)
- Preserve UI window size/position between launches (courtesy of @PromontoryProtean )
- Allow custom PowerShell execution policy default via config
- Fix IIS registry check exception experienced by some users
- Fix: Microsoft.Management.Infrastructure exception on Server 2008 R2. Users on older versions of windows are advised to have the latest version of the Windows Management Framework installed unless they have compatibility requirements that prevent that.
- Fix: avoid Microsoft.Management.Infrastructure exception on Server 2008 R2
- Fix: ensure legacy database schema upgrades complete OK
- Important: legacy tns-sni-01 challenges will now fallback to http-01
- New: New certificate cleanup options under Settings, including daily full cleanup
- New: support for acme-dns (CNAME redirection service: https://github.com/joohoi/acme-dns) for DNS challenges
- New: Microsoft DNS API Provider (contributed by AJ Henderson)
- New: Test results now support copy on click for copy/paste usage
- Fix for account key encoding in non-english locales
- Renew All/Auto Renew is now synchronous to reduce issues with larger installations committing many IIS bindings
- Enhanced error reporting UI for service startup
- Scheduled Task option removed from default UI, background service has performed all renewals since 3.x
- Various fixes, updates and UI tweaks
- Important: Changed behaviour of Static IP and unassigned hostname binding deployment
- Fix replacing of previous certificate based on thumbprint matching
- Fix to ignore stale option selections if Auto deploy/auto-binding selected
- Various fixes and updates
Notes regarding binding behaviour changes:
Previously the app could try to enable SNI for a Static IP binding (based on the user's settings) this is no longer attempted.
Additionally if you had specified settings for the default IP of new bindings but switched back to Auto, the specific binding IP/port etc may still have been used for new bindings, this is no longer the behaviour.
If you have an existing http binding with a static IP this will be used if no hostname has been specified (all static IP SSL bindings carry a risk of binding conflicts, using SNI and specific hostnames is recommended).
If you require administrative control of https bindings you should select an option other than Auto under Deployment and Binding Add/Update should be set to Update only.
- Important: Fix for an issue with Account Key decoding which causes invalid challenge response validation for some users (affects all 4.x users)
- Logging updates and additional fixes
- Important: Fix issue with binding not being updated to latest certificate (bug from v4.0.9)
- Fix wildcard domain binding matches
- Improve Azure DNS API provider
- Implement retries for IIS simultaneous binding updates
- Improve UI behaviour and avoid exceptions when IIS is not installed
- Fix account change after registering new contact
- Ensure current account key in use after version upgrades
- Fix possible service exceptions/service stopping while querying cert bindings during cert cleanup.
- Logging improvements and add additional logging for exceptions.
- Bug fix: re-use existing https port when non-standard port in use.
- Improvements to background service startup.
- New UI changes to support a new wider range of features
- New deployment modes and Preview feature to see what actions the app plans to perform.
- Wildcard domain certificate support (*.example.com)
- Let's Encrypt ACME V2 API compatibility
- DNS Validation support for a range of DNS providers
- Credentials manager to store and re-use DNS provider API credentials
- Fix for 'ghost' certificate bindings when using specific IP with SNI
- Fix for installer not updating app files every time
- tls-sni-01 no longer available as Let's Encrypt challenge type for new certs
- Minor fixes & text updates
- Faster UI changing between managed sites
- Invalid domains now filtered from new cert bindings
- Minor fixes, logging updates
- Add warning when adding fixed IP SNI bindings (All Unassigned is recommended alternative)
- Add CertificateThumbprintHash to Powershell output
- Minor fixes
- Fix config check logic to allow for proxy API outages
- V3.0.8: Add optional auto download and checksum/signature verification of updates
- Add refresh option for domains in managed site settings (when new bindings added)
- Experimental bulk import from CSV
- Fix feedback submission (previous feedback/crash reports for 3.x will not have been received)
- v3.0.4: Remove debug exception on create new certificate
- v3.0.5: Use long timeout for long-running operations
- Known issues: for some users the installer is not always replacing the current version. After install check the version under About to ensure it has updated.
Major update including:
- New dashboard reporting integration for multi server monitoring and failure notifications
- Auto Renewal process can now run as a background service
- Managed sites now scales to many thousands of sites
- IPV6 binding support
- IDN Domain Binding Fix
- Translation updates (new Norwegian translation by Steffen Fridtjofsen)
- New renewal status information in UI
- UI updates and fixes
- Context menu to sort managed sites by name or expiry date
- Workaround for private key issue/'Unspecified logon error'
This is a test version and should be used with caution. You should backup your c:\programdata\certify\ folder before proceeding. That said, here are some great new features:
- New dashboard reporting integration for multi server monitoring and failure notifications
- Renewal process now runs as a background service
- Managed sites now scales to many thousands of sites
- IPV6 binding support
- Translation updates (new Norwegian translation by Steffen Fridtjofsen)
- New renewal status information in UI
- UI updates and fixes
- Context menu to sort managed sites by name or expiry date (v3.0.1)
- Fix license validation check
- Important Fix issue where cert bindings are not updated if you have specific binding settings (IP, port etc)
- New translation: Spanish (es-ES) contributed by Alejandro Mir
- UI fixes (grid view scrolling)
- Fix Update check
- Fix exception trying to save backup of settings if no previous settings backup exists
- Support for load/save of large managed sites configuration (thousands of sites) in low memory conditions
- Fix for updating registered contact (Let's Encrypt account)
- CLI updates (list managed sites, vault cleanup)
- Important fix for auto renewal (process wait/hang)
- Minor bug fixes
- Minor bug fixes
- Translation Updates (Simplified Chinese zh-Hans)
- Fix issue identifying if IIS site is running/not running
- Logging bug fixes
- New: UI translation for Chinese (Simplified - zh-Hans) contributed by iccfish
- Only perform DNS checks in test/preview mode
- Bug fixes
- Fix for settings not being preserved between app version updates. Please review your current app settings after this update.
- New setting to optionally disable DNS checks
- New advanced options ( contributed by Marcus Lum)
- Post-Request Web Hooks (report success/fail to your own API)
- Revoke Certificate option
- New tls-sni-01 challenge support
- DNS CAA & DNSSEC checks
- Updated pre-request config checks
- UI Updates
- Bug fixes
- Fix bug finding www root folder on new managed sites
- Advanced Users: PowerShell Pre/Post request hooks for scripting per managed site (contributed by Marcus Lum)
- Fix app crash if user attempts to open log for site with no requests yet
- Site wwwroot path is now configurable independent of site
- New option to configure max renewal/requests per session (useful for helping avoid rate limits)
- Bug fixes
- Fix license validation check
- Add warning if IIS installed instead of crashing on app startup
- UI Updates and improvements
- Bug fixes, including important fix for cert renewal on SAN certificates. Some users were seeing an issue with renewed certificates not containing all the required domains due to previous validation.
- Preview release
- Bug fixes (import and settings UI)
- New Feedback Submission UI
- Make use of EFS for sensitive files optional
- First 2.0 Beta
- Bug fixes and UI updates, TLS1.2-only comms now supported
- New registration options
- Alpha preview of V2.0 released for initial feedback
- New Managed Sites feature for granular control of requests and renewals
- New Auto Renew and Renew All features
- Multi domain/subdomain certificate support using SAN certificates
- New UI
- No longer requires PowerShell
- Disable identifier re-use. Caused issues for renewals.
- Enable ACME identifier re-use if identifers not expired and still pending/valid, to avoid rate limits when making repeated requests for same domain. You should upgrade from this version immediately. Renewed certificates will not work due to decryption key issues.
- Fix powershell version detection sequence to avoid crash initialising vault. You need to be running Powershell 4.0 or higher.
- Fix issue where generate domain identifier aliases were too long, causing cert requests to fail.
- Remove default filter on IIS site state (some users not seeing there IIS sites)
- Update to automated extensionless URL config checks for IIS (including Server 2012)
- Removed the dependency on the ACMESharp PowerShell module from Powershell Gallery and bundled our own build
- Minor fixes and UI Updates: Tree view now expands your domain list by default