- [dnsprovider] Add DNS provider for http.net
- [dnsprovider] Add DNS provider for Webnames
- [cli] Add environment variable for specifying alternate directory URL
- [cli] Add format option for PFX encoding
- [lib] Support simplified issuance for very long domain names at Let's Encrypt
- [lib] Update CertID format as per draft-ietf-acme-ari-02
- [dnsprovider] azuredns: allow OIDC authentication
- [dnsprovider] azuredns: provide the ability to select authentication methods
- [dnsprovider] efficientip: add insecure skip verify option
- [dnsprovider] gandiv5: add Personal Access Token support
- [dnsprovider] gcloud: support GCE_ZONE_ID to bypass zone list
- [dnsprovider] liquidweb: add LWAPI_ prefix for env vars
- [dnsprovider] liquidweb: detect zone automatically
- [dnsprovider] pdns: optional custom API version
- [dnsprovider] regru: client certificate support
- [dnsprovider] regru: HTTP method changed to POST
- [dnsprovider] scaleway: add cname support
- [dnsprovider] cloudru: change default URLs
- [dnsprovider] constellix: follow rate limiting headers
- [dnsprovider] desec: increase default propagation interval
- [dnsprovider] gandiv5: Add "Bearer" prefix to the auth header
- [dnsprovider] inwx: improve sleep calculation
- [dnsprovider] inwx: wait before generating new TOTP TANs
- [dnsprovider] ionos: fix DNS record removal
- [dnsprovider] ipv64: remove unused option
- [dnsprovider] nifcloud: fix API requests
- [dnsprovider] otc: sequential challenge
- [dnsprovider] bunny: fix zone detection
- [dnsprovider] bunny: use NRDCG fork
- [dnsprovider] ovh: update client to v1.4.2
Cancelled due to CI failure.
- [dnsprovider] Add DNS provider for Yandex 360
- [dnsprovider] Add DNS provider for cloud.ru
- [httpprovider] Adding S3 support for HTTP domain validation
- [cli] Allow to set EAB kid and hmac via environment variables
- [dnsprovider] Migrate to aws-sdk-go-v2 (lightsail, route53)
- [dnsprovider] nearlyfreespeech: fix authentication
- [dnsprovider] pdns: fix notify
- [dnsprovider] route53: avoid unexpected records deletion
- [dnsprovider] azuredns: fix configuration from env vars
- [dnsprovider] gcore: change API domain
- [dnsprovider] servercow: fix regression
- [dnsprovider] Add DNS provider for IPv64
- [dnsprovider] Add DNS provider for Metaname
- [dnsprovider] Add DNS provider for RcodeZero
- [dnsprovider] Add DNS provider for Efficient IP
- [dnsprovider] azure: new implementation based on the new API client
- [lib] Experimental option to force DNS queries to use TCP
- [dnsprovider] cloudflare: update api client to v0.70.0
- [dnsprovider,cname] fix: ensure case-insensitive comparison of CNAME records
- [cli] fix: list command
- [lib] fix: ARI explanationURL
Cancelled due to a CI issue (no space left on device).
- [dnsprovider] dnsmadeeasy: fix DeleteRecord
- [lib] fix: read status code from response
- [dnsprovider] pdns: fix record value
- [lib,cli] Initial ACME Renewal Info (ARI) Implementation
- [dnsprovider] Add DNS provider for Derak Cloud
- [dnsprovider] route53: pass ExternalID property to STS:AssumeRole API operation
- [lib,cli] Support custom duration for certificate
- [dnsprovider] Refactor DNS provider and client implementations
- [dnsprovider] autodns: fixes wrong zone in api call if CNAME is used
- [cli] fix: archive only domain-related files on revoke
- [lib] Support for certificate with raw IP SAN (RFC8738)
- [dnsprovider] Add Brandit.com as DNS provider
- [dnsprovider] Add DNS provider for Bunny
- [dnsprovider] Add DNS provider for Nodion
- [dnsprovider] Add Google Domains as DNS provider
- [dnsprovider] Add DNS provider for Plesk
- [cli] feat: add LEGO_CERT_PEM_PATH and LEGO_CERT_PFX_PATH to run hook
- [lib,cli] feat: add RSA 3072
- [dnsprovider] gcloud: update google APIs to latest version
- [lib,dnsprovider,cname] chore: replace GetRecord by GetChallengeInfo
- [dnsprovider] rimuhosting: fix API base URL
Fix Docker image builds.
- [dnsprovider,cname] acmedns: fix CNAME support
- [dnsprovider] dynu: fix subdomain support
- [dnsprovider] Add DNS provider for dnsHome.de
- [dnsprovider] Add DNS provider for Liara
- [dnsprovider] Add DNS provider for UltraDNS
- [dnsprovider] Add DNS provider for Websupport
- [dnsprovider] ibmcloud: add support for subdomains
- [dnsprovider] infomaniak: CNAME support
- [dnsprovider] namesilo: add cleanup before add a DNS record
- [dnsprovider] route53: Allow static credentials to be supplied
- [dnsprovider] tencentcloud: support punycode domain
- [dnsprovider] alidns: filter on record type
- [dnsprovider] arvancloud: replace arvancloud.com by arvancloud.ir
- [dnsprovider] hetzner: improve zone ID detection
- [dnsprovider] luadns: removed dot suffix from authzone while searching for zone
- [dnsprovider] pdns: fix usage of notify only when zone kind is Master or Slave
- [dnsprovider] return an error when extracting record name
- [lib,cname] cname: add log about CNAME entries
- [dnsprovider] regru: improve error handling
- [dnsprovider,cname] fix CNAME support for multiple DNS providers
- [dnsprovider,cname] duckdns: fix CNAME support
- [dnsprovider,cname] oraclecloud: use fqdn to resolve zone
- [dnsprovider] hurricane: fix CNAME support
- [lib,cname] cname: stop trying to traverse cname if none have been found
- [dnsprovider] Add DNS provider for CIVO
- [dnsprovider] Add DNS provider for VK Cloud
- [dnsprovider] Add DNS provider for YandexCloud
- [dnsprovider] digitalocean: configurable base URL
- [dnsprovider] loopia: add configurable API endpoint
- [dnsprovider] pdns: notify secondary servers after updates
- [dnsprovider] allinkl: removed deprecated sha1 hashing
- [dnsprovider] auroradns: update authentification
- [dnsprovider] dnspod: deprecated. Use Tencent Cloud instead.
- [dnsprovider] exoscale: migrate to API v2 endpoints
- [dnsprovider] gcloud: update golang.org/x/oauth2
- [dnsprovider] lightsail: cleanup
- [dnsprovider] sakuracloud: update api client library
- [cname] take out CNAME support from experimental features
- [lib,cname] add recursive CNAME lookup support
- [lib] Remove embedded issuer certificates from issued certificate if bundle is false
- [dnsprovider] luadns: fix cname support
- [dnsprovider] njalla: fix record id unmarshal error
- [dnsprovider] tencentcloud: fix subdomain error
- [dnsprovider] Add DNS provider for Variomedia
- [dnsprovider] Add NearlyFreeSpeech DNS Provider
- [cli] Add a --user-agent flag to lego-cli
- new logo
- [cli] feat: sleep at renewal
- [cli] cli/renew: skip random sleep if stdout is a terminal
- [dnsprovider] hetzner: set min TTL to 60s
- [docs] refactoring and cleanup
- [dnsprovider] Add DNS provider for iwantmyname
- [dnsprovider] Add DNS Provider for IIJ DNS Platform Service
- [dnsprovider] Add DNS provider for Vercel
- [dnsprovider] route53: add assume role ARN
- [dnsprovider] dnsimple: add debug option
- [cli] feat: add
LEGO_CERT_PEM_PATH
andLEGO_CERT_PFX_PATH
- [dnsprovider] gcore: change dns api url
- [dnsprovider] bluecat: rewrite provider implementation
- [dnsprovider] rfc2136: fix TSIG secret
- [dnsprovider] tencentcloud: fix InvalidParameter.DomainInvalid error when using DNS challenges
- [lib] fix: panic in certcrypto.ParsePEMPrivateKey
- [dnsprovider] Add DNS provider for UKFast SafeDNS
- [dnsprovider] Add DNS Provider for Tencent Cloud
- [dnsprovider] azure: add support for Azure Private Zone DNS
- [dnsprovider] exec: add sequence interval
- [cli] Add a
--pfx
, and--pfx.pas
s option to generate a PKCS#12 (.pfx
) file. - [lib] Extended support of cert pool (
LEGO_CA_CERTIFICATES
andLEGO_CA_SYSTEM_CERT_POOL
) - [lib,httpprovider] added uds capability to http challenge server
- [lib] Extend validity of TLS-ALPN-01 certificates to 365 days
- [lib,cli] Allows defining the reason for the certificate revocation
- [dnsprovider] mythicbeasts: fix token expiration
- [dnsprovider] rackspace: change zone ID to string
- [lib,cli] fix: missing preferred chain param for renew request
- [dnsprovider] Add DNS provider for all-inkl
- [dnsprovider] Add DNS provider for Epik
- [dnsprovider] Add DNS provider for freemyip.com
- [dnsprovider] Add DNS provider for g-core labs
- [dnsprovider] Add DNS provider for hosttech
- [dnsprovider] Add DNS Provider for IBM Cloud (SoftLayer)
- [dnsprovider] Add DNS provider for Internet.bs
- [dnsprovider] Add DNS provider for nicmanager
- [dnsprovider] alidns: support ECS instance RAM role
- [dnsprovider] alidns: support sts token credential
- [dnsprovider] azure: zone name as environment variable
- [dnsprovider] ovh: follow cname
- [lib,cli] Add AlwaysDeactivateAuthorizations flag to ObtainRequest
- [dnsprovider] infomaniak: fix subzone support
- [dnsprovider] edgedns: fix Present and CleanUp logic
- [dnsprovider] lightsail: wrong Region env var name
- [lib] lib: fix backoff in SolverManager
- [lib] lib: use permanent error instead of context cancellation
- [dnsprovider] desec: bump to v0.6.0
Cancelled due to a CI issue, replaced by v4.5.2.
Cancelled due to a CI issue, replaced by v4.5.2.
- [dnsprovider] Add DNS provider for Infoblox
- [dnsprovider] Add DNS provider for Porkbun
- [dnsprovider] Add DNS provider for Simply.com
- [dnsprovider] Add DNS provider for Sonic
- [dnsprovider] Add DNS provider for VinylDNS
- [dnsprovider] Add DNS provider for wedos
- [cli] log: Use stderr instead of stdout.
- [dnsprovider] hostingde: autodetection of the zone name.
- [dnsprovider] scaleway: use official SDK
- [dnsprovider] powerdns: several improvements
- [lib] lib: improve wait.For returns.
- [dnsprovider] hurricane: add API rate limiter.
- [dnsprovider] hurricane: only treat first word of response body as response code
- [dnsprovider] exoscale: fix DNS provider debugging
- [dnsprovider] wedos: fix api call parameters
- [dnsprovider] nifcloud: Get zone info from dns01.FindZoneByFqdn
- [cli,lib] csr: Support the type
NEW CERTIFICATE REQUEST
- [dnsprovider] exoscale: fix dependency version.
- [dnsprovider] Add DNS provider for Njalla
- [dnsprovider] Add DNS provider for Domeneshop
- [dnsprovider] Add DNS provider for Hurricane Electric
- [dnsprovider] designate: support for Openstack Application Credentials
- [dnsprovider] edgedns: support for .edgerc file
- [dnsprovider] infomaniak: Make error message more meaningful
- [dnsprovider] cloudns: Improve reliability
- [dnsprovider] rfc2163: Removed support for MD5 algorithm. The default algorithm is now SHA1.
- [dnsprovider] desec: fix error with default TTL
- [dnsprovider] mythicbeasts: implement
ProviderTimeout
- [dnsprovider] dnspod: improve search accuracy when a domain have more than 100 records
- [lib] Increase HTTP client timeouts
- [lib] preferred chain only match root name
- [dnsprovider] Add DNS provider for Loopia
- [dnsprovider] Add DNS provider for Ionos.
- [dnsprovider] acme-dns: update cpu/goacmedns to v0.1.1.
- [dnsprovider] inwx: Increase propagation timeout to 360s to improve robustness
- [dnsprovider] vultr: Update to govultr v2 API
- [dnsprovider] pdns: get exact zone instead of all zones
- [dnsprovider] vult, dnspod: fix default HTTP timeout.
- [dnsprovider] pdns: URL request creation.
- [lib] errors: Fix instance not being printed
- [dnsprovider] azure: fix error handling.
- [lib] fix: preferred chain support.
- [dnsprovider] otc: select correct zone if multiple returned
- [dnsprovider] azure: fix target must be a non-nil pointer
- [dnsprovider] Add DNS provider for Infomaniak
- [dnsprovider] joker: add support for SVC API
- [dnsprovider] gcloud: add an option to allow the use of private zones
- [dnsprovider] rfc2136: ensure TSIG algorithm is fully qualified
- [dnsprovider] designate: Deprecate OS_TENANT_NAME as required field
- [lib] acme/api: use postAsGet instead of post for AccountService.Get
- [lib] fix: use http.Header.Set method instead of Add.
- [dnsprovider] exoscale: change dependency version.
- [cli], [lib] Support "alternate" certificate links for selecting different signing Chains
- [cli] Replaces
ec384
byec256
as default key-type - [lib] Changes
ObtainForCSR
method signature
- [dnsprovider] Replaces FastDNS by EdgeDNS
- [dnsprovider] Removes old Linode provider
- [lib] Removes
AddPreCheck
function
- [dnsprovider] Add Akamai Edgedns. Deprecate FastDNS
- [dnsprovider] Add DNS provider for HyperOne
- [dnsprovider] designate: add support for Openstack clouds.yaml
- [dnsprovider] azure: allow selecting environments
- [dnsprovider] desec: applies API rate limits.
- [dnsprovider] namesilo: fix cleanup.
- [cli] cli: add hook on the run command.
- [dnsprovider] inwx: Two-Factor-Authentication
- [dnsprovider] Add DNS provider for ArvanCloud
- [dnsprovider] vultr: bumping govultr version
- [dnsprovider] desec: improve error logs.
- [lib] Ensures the return of a location during account updates
- [dnsprovider] route53: Document all AWS credential environment variables
- [dnsprovider] stackpath: fix subdomain support.
- [dnsprovider] arvandcloud: fix record name.
- [dnsprovider] fix: multi-va.
- [dnsprovider] constellix: fix search records API call.
- [dnsprovider] hetzner: fix record name.
- [lib] Registrar.ResolveAccountByKey: Fix malformed request
- [dnsprovider] Add DNS provider for Netlify.
- [dnsprovider] Add DNS provider for deSEC.io
- [dnsprovider] Add DNS provider for LuaDNS
- [dnsprovider] Adding Hetzner DNS provider
- [dnsprovider] Add DNS provider for Mythic beasts DNSv2
- [dnsprovider] Add DNS provider for Yandex.
- [dnsprovider] Upgrade DNSimple client to 0.60.0
- [dnsprovider] update aws sdk
- [dnsprovider] autodns: removes TXT records during CleanUp.
- [dnsprovider] Fix exoscale HTTP timeout
- [cli] fix: renew path information.
- [cli] Fix account storage location warning message
- [dnsprovider] Add DNS provider for CloudDNS.
- [dnsprovider] alicloud: add support for domain with punycode
- [dnsprovider] cloudns: Add subuser support
- [cli] Information about renewed certificates are now passed to the renew hook
- [dnsprovider] acmedns: Update cpu/goacmedns v0.0.1 -> v0.0.2
- [dnsprovider] alicloud: update sdk dependency version to v1.61.112
- [dnsprovider] azure: Allow for the use of MSI
- [dnsprovider] constellix: improve challenge.
- [dnsprovider] godaddy: allow parallel solve.
- [dnsprovider] namedotcom: get the actual registered domain, so we can remove just that from the hostname to be created
- [dnsprovider] transip: updated the client to v6
- [dnsprovider] ns1: fix missing domain in log
- [dnsprovider] rimuhosting: use HTTP client from config.
- [dnsprovider] Add DNS provider for Dynu.
- [dnsprovider] Add DNS provider for reg.ru
- [dnsprovider] Add DNS provider for Zonomi and RimuHosting.
- [cli] Building binaries for arm 6 and 5
- [cli] Uses CGO_ENABLED=0
- [cli] Multi-arch Docker image.
- [cli] Adds
--name
flag to list command.
- [lib] lib: Improve cleanup log messages.
- [lib] Wrap errors.
- [dnsprovider] azure: pass AZURE_CLIENT_SECRET_FILE to autorest.Authorizer
- [dnsprovider] gcloud: fixes issues when used with GKE Workload Identity
- [dnsprovider] oraclecloud: fix subdomain support
- [dnsprovider] Add DNS provider for Constellix
- [dnsprovider] Add DNS provider for Servercow.
- [dnsprovider] Add DNS provider for Scaleway
- [cli] Add "LEGO_PATH" environment variable
- [dnsprovider] route53: allow custom client to be provided
- [dnsprovider] namecheap: allow external domains
- [dnsprovider] namecheap: add sandbox support.
- [dnsprovider] ovh: Improve provider documentation
- [dnsprovider] route53: Improve provider documentation
- [dnsprovider] zoneee: fix subdomains.
- [dnsprovider] designate: Don't clean up managed records like SOA and NS
- [dnsprovider] dnspod: update lib.
- [lib] crypto: Treat CommonName as optional
- [lib] chore: update cenkalti/backoff to v4.
- [dnsprovider] Add DNS provider for Checkdomain
- [lib] Add support to update account
- [dnsprovider] gcloud: Auto-detection of the project ID.
- [lib] Successfully parse private key PEM blocks
- [dnsprovider] Update dnspod, because of API breaking changes.
- [dnsprovider] Add support for autodns
- [dnsprovider] httpreq: Allow use environment vars from a
_FILE
file - [lib] Don't deactivate valid authorizations
- [lib] Expose more SOA fields found by dns01.FindZoneByFqdn
- [dnsprovider] use token as unique ID.
- [dnsprovider] Add DNS provider for Liquid Web
- [dnsprovider] cloudflare: add support for API tokens
- [cli] feat: ease operation behind proxy servers
- [dnsprovider] cloudflare: update client
- [dnsprovider] linodev4: propagation timeout configuration.
- [dnsprovider] ovh: fix int overflow.
- [dnsprovider] bindman: fix client version.
- Invalid pseudo version (related to Cloudflare client).
There was a problem when creating the tag v3.0.1, this tag has been invalidated.
- migrate to go module (new import github.com/go-acme/lego/v3/)
- update DNS clients
- [dnsprovider] vultr: quote TXT record
- [dnsprovider] vultr: invalid record type.
- [dnsprovider] Add DNS provider for namesilo
- [dnsprovider] Add DNS provider for versio.nl
- [dnsprovider] Update DNS providers libs.
- [dnsprovider] joker: support username and password.
- [dnsprovider] Vultr: Switch to official client
- [dnsprovider] otc: Prevent sending empty body.
- [dnsprovider] Add support for Joker.com DMAPI
- [dnsprovider] Add support for Bindman DNS provider
- [dnsprovider] Add support for EasyDNS
- [lib] Get an existing certificate by URL
- [dnsprovider] digitalocean: LEGO_EXPERIMENTAL_CNAME_SUPPORT support
- [dnsprovider] gcloud: Use fqdn to get zone Present/CleanUp
- [dnsprovider] exec: serial behavior
- [dnsprovider] manual: serial behavior.
- [dnsprovider] Strip newlines when reading environment variables from
_FILE
suffixed files.
- [cli] fix: cli disable-cp option.
- [dnsprovider] gcloud: fix zone visibility.
- [cli] Adds renew hook
- [dnsprovider] Adds 'Since' to DNS providers documentation
- [dnsprovider] gcloud: use public DNS zones
- [dnsprovider] route53: enhance documentation.
- [dnsprovider] cloudns: fix TTL and status validation
- [dnsprovider] sakuracloud: supports concurrent update
- [dnsprovider] Disable authz when solve fail.
- Add tzdata to the Docker image.
- Migrate from xenolf/lego to go-acme/lego.
- [dnsprovider] Add DNS Provider for Domain Offensive (do.de)
- [dnsprovider] Adds information about '_FILE' suffix.
- [cli,dnsprovider] Add 'manual' provider to the output of dnshelp
- [dnsprovider] hostingde: Use provided ZoneName instead of domain
- [dnsprovider] pdns: fix wildcard with SANs
- [dnsprovider] Add DNS Provider for ClouDNS.net
- [dnsprovider] Add DNS Provider for Oracle Cloud
- [cli] Adds log when no renewal.
- [dnsprovider,lib] Add a mechanism to wrap a PreCheckFunc
- [dnsprovider] oraclecloud: better way to get private key.
- [dnsprovider] exoscale: update library
- [dnsprovider] OVH: Refresh zone after deleting challenge record
- [dnsprovider] oraclecloud: ttl config and timeout
- [dnsprovider] hostingde: fix client fails if customer has no access to dns-groups
- [dnsprovider] vscale: getting sub-domain
- [dnsprovider] selectel: getting sub-domain
- [dnsprovider] vscale: fix TXT records clean up
- [dnsprovider] selectel: fix TXT records clean up
- [dnsprovider] Add support for Openstack Designate as a DNS provider
- [dnsprovider] gcloud: Option to specify gcloud service account json by env as string
- [experimental feature] Resolve CNAME when creating dns-01 challenge. To enable: set
LEGO_EXPERIMENTAL_CNAME_SUPPORT
totrue
.
- [cli] Applies Let’s Encrypt’s recommendation about renew. The option
--days
of the commandrenew
has a new default value (30
) - [lib] Uses a jittered exponential backoff
- [cli] CLI and key type.
- [dnsprovider] httpreq: Endpoint with path.
- [dnsprovider] fastdns: Do not overwrite existing TXT records
- Log wildcard domain correctly in validation
- [dnsprovider] Add support for zone.ee as a DNS provider.
- [dnsprovider] nifcloud: Change DNS base url.
- [dnsprovider] gcloud: More detailed information about Google Cloud DNS.
- [lib] fix: OCSP, set HTTP client.
- [dnsprovider] alicloud: fix pagination.
- [dnsprovider] namecheap: fix panic.
- [cli,lib] Option to disable the complete propagation Requirement
- [lib,cli] Support non-ascii domain name (punnycode)
- [cli,lib] Add configurable timeout when obtaining certificates
- [cli] Archive revoked certificates
- [cli] Add command to list certificates.
- [cli] support for renew with CSR
- [cli] add SAN on renew
- [lib] Adds
Remove
for challenges - [lib] Add version to xenolf-acme in User-Agent.
- [dnsprovider] The ability for a DNS provider to solve the challenge sequentially
- [dnsprovider] Add DNS provider for "HTTP request".
- [dnsprovider] Add DNS Provider for Vscale
- [dnsprovider] Add DNS Provider for TransIP
- [dnsprovider] Add DNS Provider for inwx
- [dnsprovider] alidns: add support to handle more than 20 domains
- [lib] Check all challenges in a predictable order
- [lib] Poll authz URL instead of challenge URL
- [lib] Check all nameservers in a predictable order
- [lib] Logs every iteration of waiting for the propagation
- [cli]
--http
: enable HTTP challenge important - [cli]
--http.port
: previously named--http
- [cli]
--http.webroot
: previously named--webroot
- [cli]
--http.memcached-host
: previously named--memcached-host
- [cli]
--tls
: enable TLS challenge important - [cli]
--tls.port
: previously named--tls
- [cli]
--dns.resolvers
: previously named--dns-resolvers
- [cli] the option
--days
of the commandrenew
has default value (15
) - [dnsprovider] gcloud: Use GCE_PROJECT for project always, if specified
- [lib] Remove
SetHTTP01Address
- [lib] Remove
SetTLSALPN01Address
- [lib] Remove
Exclude
- [cli] Remove
--exclude
,-x
- [lib] Fixes revocation for subdomains and non-ascii domains
- [lib] Disable pending authorizations
- [dnsprovider] transip: concurrent access to the API.
- [dnsprovider] gcloud: fix for wildcard
- [dnsprovider] Azure: Do not overwrite existing TXT records
- [dnsprovider] fix: Cloudflare error.
- [dnsprovider] Add DNS Provider for ConoHa DNS
- [dnsprovider] Add DNS Provider for MyDNS.jp
- [dnsprovider] Add DNS Provider for Selectel
- [dnsprovider] netcup: make unmarshalling of api-responses more lenient.
- [dnsprovider] aurora: change DNS client
- [dnsprovider] azure: update auth to support instance metadata service
- [dnsprovider] dnsmadeeasy: log response body on error
- [lib] TLS-ALPN-01: Update idPeAcmeIdentifierV1, draft refs.
- [lib] Do not send a JWS body when POSTing challenges.
- [lib] Support POST-as-GET.
- [lib] TLS-ALPN-01 Challenge
- [cli] Add filename parameter
- [dnsprovider] Allow to configure TTL, interval and timeout
- [dnsprovider] Add support for reading DNS provider setup from files
- [dnsprovider] Add DNS Provider for ACME-DNS
- [dnsprovider] Add DNS Provider for ALIYUN DNS
- [dnsprovider] Add DNS Provider for DreamHost
- [dnsprovider] Add DNS provider for hosting.de
- [dnsprovider] Add DNS Provider for IIJ
- [dnsprovider] Add DNS Provider for netcup
- [dnsprovider] Add DNS Provider for NIFCLOUD DNS
- [dnsprovider] Add DNS Provider for SAKURA Cloud
- [dnsprovider] Add DNS Provider for Stackpath
- [dnsprovider] Add DNS Provider for VegaDNS
- [dnsprovider] exec: add EXEC_MODE=RAW support.
- [dnsprovider] cloudflare: support for CF_API_KEY and CF_API_EMAIL
- [lib] Don't trust identifiers order.
- [lib] Fix missing issuer certificates from Let's Encrypt
- [dnsprovider] duckdns: fix TXT record update url
- [dnsprovider] duckdns: fix subsubdomain
- [dnsprovider] gcloud: update findTxtRecords to use Name=fqdn and Type=TXT
- [dnsprovider] lightsail: Fix Domain does not exist error
- [dnsprovider] ns1: use the authoritative zone and not the domain name
- [dnsprovider] ovh: check error to avoid panic due to nil client
- [lib] Submit all dns records up front, then validate serially
- [lib] ACME v2 Support.
- [dnsprovider] Renamed
/providers/dns/googlecloud
to/providers/dns/gcloud
. - [dnsprovider] Modified Google Cloud provider
gcloud.NewDNSProviderServiceAccount
function to extract the project id directly from the service account file. - [dnsprovider] Made errors more verbose for the Cloudflare provider.
- [dnsprovider] Add DNS challenge provider
exec
- [dnsprovider] Add DNS Provider for Akamai FastDNS
- [dnsprovider] Add DNS Provider for Bluecat DNS
- [dnsprovider] Add DNS Provider for CloudXNS
- [dnsprovider] Add DNS Provider for Duck DNS
- [dnsprovider] Add DNS Provider for Gandi Beta Platform (LiveDNS)
- [dnsprovider] Add DNS Provider for GleSYS API
- [dnsprovider] Add DNS Provider for GoDaddy
- [dnsprovider] Add DNS Provider for Lightsail
- [dnsprovider] Add DNS Provider for Name.com
- [dnsprovider] Azure: Added missing environment variable in the comments
- [dnsprovider] PowerDNS: Fix zone URL, add leading slash.
- [dnsprovider] DNSimple: Fix api
- [cli] Correct help text for
--dns-resolvers
default. - [cli] renew/revoke - don't panic on wrong account.
- [lib] Fix zone detection for cross-zone cnames.
- [lib] Use proxies from environment when making outbound http connections.
- [lib] Users of an effective top-level domain can use the DNS challenge.
- [dnsprovider] Azure: Refactor to work with new Azure SDK version.
- [dnsprovider] Cloudflare and Azure: Adding output of which envvars are missing.
- [dnsprovider] Dyn DNS: Slightly improve provider error reporting.
- [dnsprovider] Exoscale: update to latest egoscale version.
- [dnsprovider] Route53: Use NewSessionWithOptions instead of deprecated New.
- lib: A new DNS provider for OTC.
- lib: The
AWS_HOSTED_ZONE_ID
environment variable for the Route53 DNS provider to directly specify the zone. - lib: The
RFC2136_TIMEOUT
enviroment variable to make the timeout for the RFC2136 provider configurable. - lib: The
GCE_SERVICE_ACCOUNT_FILE
environment variable to specify a service account file for the Google Cloud DNS provider.
- lib: Fixed an authentication issue with the latest Azure SDK.
- CLI: The
--http-timeout
switch. This allows for an override of the default client HTTP timeout. - lib: The
HTTPClient
field. This allows for an override of the default HTTP timeout for library HTTP requests. - CLI: The
--dns-timeout
switch. This allows for an override of the default DNS timeout for library DNS requests. - lib: The
DNSTimeout
switch. This allows for an override of the default client DNS timeout. - lib: The
QueryRegistration
function onacme.Client
. This performs a POST on the client registration's URI and gets the updated registration info. - lib: The
DeleteRegistration
function onacme.Client
. This deletes the registration as currently configured in the client. - lib: The
ObtainCertificateForCSR
function onacme.Client
. The function allows to request a certificate for an already existing CSR. - CLI: The
--csr
switch. Allows to use already existing CSRs for certificate requests on the command line. - CLI: The
--pem
flag. This will change the certificate output, so it outputs a .pem file concatanating the .key and .crt files together. - CLI: The
--dns-resolvers
flag. Allows for users to override the default DNS servers used for recursive lookup. - lib: Added a memcached provider for the HTTP challenge.
- CLI: The
--memcached-host
flag. This allows to use memcached for challenge storage. - CLI: The
--must-staple
flag. This enables OCSP must staple in the generated CSR. - lib: The library will now honor entries in your resolv.conf.
- lib: Added a field
IssuerCertificate
to theCertificateResource
struct. - lib: A new DNS provider for OVH.
- lib: A new DNS provider for DNSMadeEasy.
- lib: A new DNS provider for Linode.
- lib: A new DNS provider for AuroraDNS.
- lib: A new DNS provider for NS1.
- lib: A new DNS provider for Azure DNS.
- lib: A new DNS provider for Rackspace DNS.
- lib: A new DNS provider for Exoscale DNS.
- lib: A new DNS provider for DNSPod.
- lib: Exported the
PreCheckDNS
field so library users can manage the DNS check in tests. - lib: The library will now skip challenge solving if a valid Authz already exists.
- lib: The library will no longer check for auto-renewed certificates. This has been removed from the spec and is not supported in Boulder.
- lib: Fix a problem with the Route53 provider where it was possible the verification was published to a private zone.
- lib: Loading an account from file should fail if an integral part is nil
- lib: Fix a potential issue where the Dyn provider could resolve to an incorrect zone.
- lib: If a registration encounteres a conflict, the old registration is now recovered.
- CLI: The account.json file no longer has the executable flag set.
- lib: Made the client registration more robust in case of a 403 HTTP response.
- lib: Fixed an issue with zone lookups when they have a CNAME in another zone.
- lib: Fixed the lookup for the authoritative zone for Google Cloud.
- lib: Fixed a race condition in the nonce store.
- lib: The Google Cloud provider now removes old entries before trying to add new ones.
- lib: Fixed a condition where we could stall due to an early error condition.
- lib: Fixed an issue where Authz object could end up in an active state after an error condition.
0.3.1 - 2016-04-19
- lib: A new DNS provider for Vultr.
- lib: DNS Provider for DigitalOcean could not handle subdomains properly.
- lib: handleHTTPError should only try to JSON decode error messages with the right content type.
- lib: The propagation checker for the DNS challenge would not retry on send errors.
0.3.0 - 2016-03-19
- CLI: The
--dns
switch. To include the DNS challenge for consideration. When using this switch, all other solvers are disabled. Supported are the following solvers: cloudflare, digitalocean, dnsimple, dyn, gandi, googlecloud, namecheap, route53, rfc2136 and manual. - CLI: The
--accept-tos
switch. Indicates your acceptance of the Let's Encrypt terms of service without prompting you. - CLI: The
--webroot
switch. The HTTP-01 challenge may now be completed by dropping a file into a webroot. When using this switch, all other solvers are disabled. - CLI: The
--key-type
switch. This replaces the--rsa-key-size
switch and supports the following key types: EC256, EC384, RSA2048, RSA4096 and RSA8192. - CLI: The
--dnshelp
switch. This displays a more in-depth help topic for DNS solvers. - CLI: The
--no-bundle
sub switch for therun
andrenew
commands. When this switch is set, the CLI will not bundle the issuer certificate with your certificate. - lib: A new type for challenge identifiers
Challenge
- lib: A new interface for custom challenge providers
acme.ChallengeProvider
- lib: A new interface for DNS-01 providers to allow for custom timeouts for the validation function
acme.ChallengeProviderTimeout
- lib: SetChallengeProvider function. Pass a challenge identifier and a Provider to replace the default behaviour of a challenge.
- lib: The DNS-01 challenge has been implemented with modular solvers using the
ChallengeProvider
interface. Included solvers are: cloudflare, digitalocean, dnsimple, gandi, namecheap, route53, rfc2136 and manual. - lib: The
acme.KeyType
type was added and is used for the configuration of crypto parameters for RSA and EC keys. Valid KeyTypes are: EC256, EC384, RSA2048, RSA4096 and RSA8192.
- lib: ExcludeChallenges now expects to be passed an array of
Challenge
types. - lib: HTTP-01 now supports custom solvers using the
ChallengeProvider
interface. - lib: TLS-SNI-01 now supports custom solvers using the
ChallengeProvider
interface. - lib: The
GetPrivateKey
function in theacme.User
interface is now expected to return acrypto.PrivateKey
instead of anrsa.PrivateKey
for EC compat. - lib: The
acme.NewClient
function now expects anacme.KeyType
instead of the keyBits parameter.
- CLI: The
rsa-key-size
switch was removed in favor ofkey-type
to support EC keys.
- lib: Fixed a race condition in HTTP-01
- lib: Fixed an issue where status codes on ACME challenge responses could lead to no action being taken.
- lib: Fixed a regression when calling the Renew function with a SAN certificate.
0.2.0 - 2016-01-09
- CLI: The
--exclude
or-x
switch. To exclude a challenge from being solved. - CLI: The
--http
switch. To set the listen address and port of HTTP based challenges. Supportshost:port
and:port
for any interface. - CLI: The
--tls
switch. To set the listen address and port of TLS based challenges. Supportshost:port
and:port
for any interface. - CLI: The
--reuse-key
switch for therenew
operation. This lets you reuse an existing private key for renewals. - lib: ExcludeChallenges function. Pass an array of challenge identifiers to exclude them from solving.
- lib: SetHTTPAddress function. Pass a port to set the listen port for HTTP based challenges.
- lib: SetTLSAddress function. Pass a port to set the listen port of TLS based challenges.
- lib: acme.UserAgent variable. Use this to customize the user agent on all requests sent by lego.
- lib: NewClient does no longer accept the optPort parameter
- lib: ObtainCertificate now returns a SAN certificate if you pass more than one domain.
- lib: GetOCSPForCert now returns the parsed OCSP response instead of just the status.
- lib: ObtainCertificate has a new parameter
privKey crypto.PrivateKey
which lets you reuse an existing private key for new certificates. - lib: RenewCertificate now expects the PrivateKey property of the CertificateResource to be set only if you want to reuse the key.
- CLI: The
--port
switch was removed. - lib: RenewCertificate does no longer offer to also revoke your old certificate.
- CLI: Fix logic using the
--days
parameter for renew
0.1.1 - 2015-12-18
- CLI: Added a way to automate renewal through a cronjob using the --days parameter to renew
- lib: Improved log output on challenge failures.
- CLI: The short parameter for domains would not get accepted
- CLI: The cli did not return proper exit codes on error library errors.
- lib: RenewCertificate did not properly renew SAN certificates.
- lib: Fix possible DOS on GetOCSPForCert
0.1.0 - 2015-12-03
- Initial release