|Index||index by Group||index by Distribution||index by Vendor||index by creation date||index by Name||Mirrors||Help||Search|
|Name: hiawatha-letsencrypt||Distribution: SUSE Linux Enterprise 15 SP3|
|Version: 10.9||Vendor: openSUSE|
|Release: bp153.1.1||Build date: Sat Feb 20 03:34:27 2021|
|Group: Productivity/Networking/Web/Servers||Build host: armbuild13|
|Size: 53471||Source RPM: hiawatha-10.9-bp153.1.1.src.rpm|
|Summary: Let's Encrypt script for the Hiawatha webserver|
This is the Let's Encrypt script for the Hiawatha webserver. It can be used to request, renew and revoke certificated as provided by Let's Encrypt in a very easy way. It requires the PHP command line interface and uses version 2 of the ACME protocol to communicate with the Let's Encrypt server.
* Mon Mar 04 2019 Mariusz Fik <email@example.com> - Update to version 10.9: * Let's Encrypt script installed via CMake. * Bugfix: Directory traversal when AllowDotFiles is enabled. * Small improvements. * Wed Sep 26 2018 firstname.lastname@example.org - Update to version 10.8.3: * Several fixes in build system * Added build system for nghttp2 * New style for directory index * uri_depth added to XML for directory index * Tue May 08 2018 email@example.com - Update to version 10.8.1.: * Removed support for secp192r1 and secp192k1 curves, to make it PCI DSS compliant out of the box. * Small improvements to Let's Encrypt ACMEv2 script. * Mon Mar 26 2018 firstname.lastname@example.org - Ship Let's Encrypt script within subpackage. * Mon Mar 26 2018 email@example.com - Add firewalld config files for Leap/SLE >= 15 and TW. * Mon Mar 26 2018 firstname.lastname@example.org - Update to version 10.8: * New Let's Encrypt script that supports ACME v2. * Added Syslog option. * Added GZipExtensions option. * AllowDotFiles now used to show hidden files in directory listings. * Removed support for static RSA ciphers. * Hiawatha log format changed. * Small improvements. * Bugfix: certain characters in filenames disrupted directory index output. * Bugfix: requesting non-regular files now results in a 403 instead of blocking that thread. * Sat Feb 17 2018 email@example.com - Fix build with mbedtls 2.7.0. * Tue Oct 24 2017 firstname.lastname@example.org - Update to version 10.7: * Connect to a Unix socket via a reverse proxy. * Added BlockExtensions setting. * Small improvements. * Bugfix: error in handling renewal scripts in Let's Encrypt script. * Sat Jun 17 2017 email@example.com - Update to version 10.6: * Added PublicKeyPins option. * Added renewal-scripts to Let's Encrypt script. * Small changes to CMake build system. * Added CustomHeaderBackend option. * Renamed CustomHeader option to CustomHeaderClient. Old name still works. * Hiawatha ignores FileHashes and ReverseProxy for Let's Encrypt authentication requests. * Small improvements and bugfixes. * Tue Nov 15 2016 firstname.lastname@example.org - Update to version 10.4: * SkipCacheCookie option added. * Added Systemd init script to Debian package. * Small improvements and bugfixes. - Small packaging changes and requirements update * Sun Oct 02 2016 email@example.com - Build fails with mbedtls < 2. * Sat Aug 27 2016 firstname.lastname@example.org - Update to version 10.3: * PreventCSRF, PreventSQLi and PreventXSS improved. * Prevention of MySQL data mining via SQL injection. * Added revoke option to Let's Encrypt script. * Hiawatha ignores RequireTLS for Let's Encrypt authentication requests. * Small bugfixes and improvements. * Bugfix: possible HTTP request pipelining error after CSRF prevented. - Changes for version 10.2: * Added Let's Encrypt script (see extra/letsencrypt). * Added support for requesting Let's Encrypt certificates (see AccessList and PasswordFile settings in manual page). * Small improvements. * Bugfix: HideProxy not working for Forwarded header. - Changes for 10.1: * Added Extensions setting. * Added support for X-Sendfile header. * mbed TLS updated to 2.2.1. * Improved SQL injection detection. * Small bugfixes and improvements. - Changes for 10.0: * Usage of Directory sections changed. * Added support for RFC 5785. * Added support for GZip compression. Removed the UseGZfile option. * Added ECDSA support for TLS 1.0 and TLS 1.1. * Replaced UrlToolkit Expire option with ExpirePeriod in Directory section. * Replaced IgnoreDotHiawatha option with UseLocalConfig. * Removed the VolatileObject option. * Improved SQL injection detection. * mbed TLS updated to 2.2.0. * Small improvements. - Changes for 9.15: * Support for WebSockets via reverse proxy. * UNIX socket support for connections to WebSockets. * Responsive design for directory index and error message. * mbed TLS updated to 2.1.2. * Fixed mbed TLS linking in CMake configuration. * ListenBacklog option added. * Small bugfixes. - Changes for 9.14: * mbed TLS updated to 2.0.0. * Small bugfixes. * Bugfix: crash when sending very large request to FastCGI server. * Sat Jun 20 2015 email@example.com - Fix rpmlint warnings * add rcsymlink * fix log directory permissions * Mon Jun 15 2015 firstname.lastname@example.org - Update to 9.13: * Renamed SSLcertFile to TLScertFile. * Renamed RequireSSL to RequireTLS. * Renamed SSL_* CGI environment variables to TLS_*. * Renamed UrlToolkit option UseSSL to UseTLS. * Replaced MinSSLversion by MinTLSversion. * LogTimeouts option added. * Added 'skip directories' parameter to reverse proxy. * Failed logins sent to Hiawatha Monitor. * Small bugfix and improvements. * Thu Feb 26 2015 email@example.com - Update to 9.12: * Bugfix: memory leak in SSL library. * Small bugfix. * Tue Feb 03 2015 firstname.lastname@example.org - Update to 9.11: * ChallengeClient option added. * UrlToolkit options TotalConnections and OmitRequestLog added. * Improvements to UrlToolkit and reverse proxy swap. * UrlToolkit rules are also applied to PUT and DELETE. * Small improvements. * Sun Jan 11 2015 email@example.com - Update to 9.10: * Support for banning bad clients who connect via a proxy. * UrlToolkit option Do added. Changed how Call and Skip should be called. * General UrlToolkit improvements. See config/toolkit.conf for syntax. * Hiawatha now prefers reverse proxies with a scheme matching the one of the client connection. See config/toolkit.conf for syntax. * Hiawatha will now first process UrlToolkit rules before using ReverseProxy. * Small bugfixes and improvements. * Sat Dec 13 2014 firstname.lastname@example.org - Update to 9.9: * HTTPAuthToCGI option added. * BanByCGI option added. * Improved SSL ciphersuite selections. * CAcertificates options added. * Dropped support for SSL3.0. * Small bugfixes and improvements. * Sun Nov 02 2014 email@example.com - Update to 9.8: * Added support for websockets. WebSocket option added. * SSL key and certificate checks added to wigwam. * Small bugfixes and improvements.
/usr/lib/hiawatha /usr/lib/hiawatha/letsencrypt /usr/lib/hiawatha/letsencrypt/acmev2.php /usr/lib/hiawatha/letsencrypt/config.php /usr/lib/hiawatha/letsencrypt/hiawatha_config.php /usr/lib/hiawatha/letsencrypt/http.php /usr/lib/hiawatha/letsencrypt/https.php /usr/lib/hiawatha/letsencrypt/letsencrypt.conf /usr/lib/hiawatha/letsencrypt/letsencrypt.php /usr/lib/hiawatha/letsencrypt/logfile.php /usr/lib/hiawatha/letsencrypt/openssl.conf /usr/lib/hiawatha/letsencrypt/rsa.php /usr/sbin/lefh /usr/share/man/man1/lefh.1.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Mon May 9 20:55:56 2022