@lukas2511 lukas2511 released this Apr 27, 2018 · 6 commits to master since this release

Assets 4

[0.6.2] - 2018-04-25

Added

  • New deploy_ocsp hook
  • Allow account registration with custom key

Changed

  • Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  • Improved documentation on wildcards

Fixes

  • Added workaround for compatibility with filesystem ACLs
  • Close unwanted external file-descriptors
  • Fixed JSON parsing on force-renewal
  • Fixed cleanup of challenge files/dns-entries on validation errors
  • A few more minor fixes

@lukas2511 lukas2511 released this Mar 13, 2018 · 28 commits to master since this release

Assets 4

[0.6.1] - 2018-03-13

Changed

  • Use new ACME v2 endpoint by default

@lukas2511 lukas2511 released this Mar 11, 2018 · 31 commits to master since this release

Assets 4

[0.6.0] - 2018-03-11

Changed

  • Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  • Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)

Added

  • Support for ACME v02 (including wildcard certificates!)
  • New hook: generate_csr (see example hook script for more information)
  • Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...

@lukas2511 lukas2511 released this Jan 13, 2018 · 77 commits to master since this release

Assets 3

[0.5.0] - 2018-01-13

Changed

  • Certificate chain is now cached (CHAINCACHE)
  • OpenSSL binary path is now configurable (OPENSSL)
  • Cleanup now also moves revoked certificates

Added

  • New feature for updating contact information (--account)
  • Allow automatic cleanup on exit (AUTO_CLEANUP)
  • Initial support for fetching OCSP status to be used for OCSP stapling (OCSP_FETCH)
  • Certificates can now have aliases to create multiple certificates with identical set of domains (see --alias and domains.txt documentation)
  • Allow dehydrated to run as specified user (/group)

@lukas2511 lukas2511 released this Feb 5, 2017 · 135 commits to master since this release

Assets 3

[0.4.0] - 2017-02-05

Changed

  • dehydrated now asks you to read and accept the CAs terms of service before creating an account
  • Skip challenges for already validated domains
  • Removed need for some special commands (BusyBox compatibility)
  • Exported a few more variables for use in hook-scripts
  • fullchain.pem now actually contains the full chain instead of just the certificate with an intermediate cert

Added

  • Added private-key rollover functionality
  • Added --lock-suffix option for allowing parallel execution
  • Added invalid_challenge hook
  • Added request_failure hook
  • Added exit_hook hook
  • Added standalone register command

@lukas2511 lukas2511 released this Sep 13, 2016 · 180 commits to master since this release

Assets 3

With this release letsencrypt.sh was renamed to dehydrated.

Reason for this was a violation of the Let's Encrypt Trademark Policy, there was no possibility to keep the old name.

This will unfortunately break a few setups, so make sure you rename your configs and WELLKNOWN directory according to the new defaults.

See CHANGELOG below for details:

[0.3.1] - 2016-09-13

Changed

  • Renamed project to dehydrated.
  • Default WELLKNOWN location is now /var/www/dehydrated
  • Config location is renamed to dehydrated (e.g. /etc/dehydrated)

@lukas2511 lukas2511 released this Sep 13, 2016 · 184 commits to master since this release

Assets 2

This release adds a few new options and has a few changed default parameters, see CHANGELOG below:

[0.3.0] - 2016-09-07

Changed

  • Config is now named config instead of config.sh!
  • Location of domains.txt is now configurable via DOMAINS_TXT config variable
  • Location of certs directory is now configurable via CERTDIR config variable
  • signcsr command now also outputs chain certificate if --full-chain/-fc is set
  • Location of account-key(s) changed
  • Default WELLKNOWN location is now /var/www/letsencrypt
  • New version of Let's Encrypt Subscriber Agreement

Added

  • Added option to add CSR-flag indicating OCSP stapling to be mandatory
  • Initial support for configuration on per-certificate base
  • Support for per-CA account keys and custom config for output cert directory, license, etc.
  • Added option to select IP version of name to address resolution
  • Added option to run letsencrypt.sh without locks

Fixed

  • letsencrypt.sh no longer stores account keys from invalid registrations

@lukas2511 lukas2511 released this May 22, 2016 · 215 commits to master since this release

Assets 2

This version fixes a json-parsing bug which made letsencrypt.sh incompatible with up-to-date ACME servers.

Also this release adds initial documentation (which will be improved over time).

For other changes the the CHANGELOG excerpt below:

[0.2.0] - 2016-05-22

Changed

  • PRIVATE_KEY config parameter has been renamed to ACCOUNT_KEY to avoid confusion with certificate keys
  • deploy_cert hook now also has the certificates timestamp as standalone parameter
  • Temporary files are now identifiable (template: letsencrypt.sh-XXXXXX)
  • Private keys are now regenerated by default

Added

  • Added documentation to repository

Fixed

  • Fixed bug with uppercase names in domains.txt (script now converts everything to lowercase)
  • mktemp no longer uses the deprecated -t parameter.
  • Compatibility with "pretty" json

@lukas2511 lukas2511 released this Apr 8, 2016 · 249 commits to master since this release

Assets 2

This is the first numbered version of letsencrypt.sh