|Index||index by Group||index by Distribution||index by Vendor||index by creation date||index by Name||Mirrors||Help||Search|
|Name: dehydrated||Distribution: openSUSE:Factory:zSystems|
|Version: 0.7.0||Vendor: obs://build.opensuse.org/openSUSE:Factory:zSystems|
|Release: 3.2||Build date: Sun Jun 6 21:59:33 2021|
|Group: Unspecified||Build host: s390zp21|
|Size: 183101||Source RPM: dehydrated-0.7.0-3.2.src.rpm|
|Summary: A client for signing certificates with an ACME server|
This is a client for signing certificates with an ACME server (currently only provided by letsencrypt) implemented as a relatively simple bash-script. It uses the openssl utility for everything related to actually handling keys and certificates, so you need to have that installed. Other dependencies are: curl, sed, grep, mktemp (all found on almost any system, curl being the only exception).
* Tue Mar 30 2021 Marcus Rueckert <email@example.com> - Enable instantiated services (boo#1184165) * Mon Mar 29 2021 Marcus Rueckert <firstname.lastname@example.org> - Prepare instantiated service/timer support but not enable it: This seems to fail due to missing systemd support right now. So the only option at the moment is to copy the timer and unit file for a 2nd instance. Mark all files as part of dehydrated.target * Mon Mar 29 2021 Marcus Rueckert <email@example.com> - Rework support for /etc/dehydrated/postrun-hooks.d/: dehydrated.service nolonger starts them directly, the support was moved to a separate unit file. Please run: systemctl enable dehydrated-postrun-hooks.service to restore this functionality - Run dehydrated as dehydrated user again * Mon Mar 29 2021 Marcus Rueckert <firstname.lastname@example.org> - Do not use the full path for config.d in the config files, which will simplify implementing multi instance support. * Mon Mar 29 2021 Marcus Rueckert <email@example.com> - Added more-examples.patch: Explain how we can have per certificate key algorithms * Sun Mar 14 2021 Olav Reinert <firstname.lastname@example.org> - Add directory where cleanup can archive unused certificates * Wed Mar 03 2021 Daniel Molkentin <email@example.com> - Clarified new default settings. KEY_ALGO=secp384r1. Please consult README.maintainer for details and how to return to RSA-based certificate issuance. (jsc#ECO-3435, jsc#SLE-15909) - Added a note about ACMEv1 deprecation - Added a note on new ACME providers and the new non-URL provider syntax See README.maintainer for details. * Thu Dec 10 2020 Daniel Molkentin <firstname.lastname@example.org> - Update to dehydrated 0.7.0 (JSC#SLE-15909) Added Support for external account bindings Special support for ZeroSSL Support presets for some CAs instead of requiring URLs Allow requesting preferred chain (--preferred-chain) Added method to show CAs current terms of service (--display-terms) Allow setting path to domains.txt using cli arguments (--domains-txt) Added new cli command --cleanupdelete which deletes old files instead of archiving them Fixed No more silent failures on broken hook-scripts Better error-handling with KEEP_GOING enabled Check actual order status instead of assuming it's valid Don't include keyAuthorization in challenge validation (RFC compliance) Changed Using EC secp384r1 as default certificate type Use JSON.sh to parse JSON Use account URL instead of account ID (RFC compliance) Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options Cleanup now also removes dangling symlinks * Thu Nov 19 2020 Daniel Molkentin <email@example.com> - dehydrated-apache2: Check for mod_compat (bsc#1178927) * Mon Sep 14 2020 Daniel Molkentin <firstname.lastname@example.org> - Reenable nginx subpackage for factory * Mon Jun 29 2020 Daniel Molkentin <email@example.com> - Update maintainer file and package description, remove features that are better described in the (upstream maintained) man page. * Mon Jun 29 2020 Daniel Molkentin <firstname.lastname@example.org> - Remove potentially harmful scriptlet (bsc#1154167). Documented transition case in the maintainer README. Unlikely enough. The versions that have not transitioned yet would be broken for more than two years now. * Wed May 06 2020 Daniel Molkentin <email@example.com> - Removed lighttpd 1.x integration package. If you still would like to use lighttpd with dehydrated, follow the instructions in the README.maintainers file. * Mon Apr 20 2020 Daniel Molkentin <firstname.lastname@example.org> - Fix lighttpd config file (boo#1169834) - Provide nginx subpackage for SLE 15+ (jsc#SLE-11727) * Mon Feb 03 2020 Dominique Leuenberger <email@example.com> - Drop systemd BuildRequires: pkgconfig(systemd) is already in place and is synonymous. * Thu Oct 17 2019 Richard Brown <firstname.lastname@example.org> - Remove obsolete Groups tag (fate#326485) * Sat Aug 10 2019 Daniel Molkentin <email@example.com> - Behavioral change: Use cron only for older RHEL/CentOS versions (along with SLE < 12.0). Everything else now uses systemd. Please adopt accordingly! Refer to README.md for * Wed Jun 26 2019 Daniel Molkentin <firstname.lastname@example.org> - Update to dehydrated 0.6.5 * Fixed broken APIv1 compatibility from last update * Tue Jun 25 2019 Daniel Molkentin <email@example.com> - Update to dehydrated 0.6.4 * Fetch account ID from Location header instead of account json (bsc#1139408) - Update to dehydrated 0.6.3 * OCSP refresh interval is now configurable * Implemented POST-as-GET * Call exit_hook on errors (with error-message as first parameter) * Initial support for tls-alpn-01 validation * New hook: sync_cert (for syncing certificate files to disk, see example hook description) * Fetch account information after registration to avoid missing account id * Tue Jan 22 2019 Daniel Molkentin <firstname.lastname@example.org> - Remove RandomizedDelaySec attribute for distros with older systemd (boo#1110697) * Fri Apr 27 2018 email@example.com - Update to dehydrated 0.6.2 * removes 0001-fixed-CA-url-in-example-config.patch * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch Added * New deploy_ocsp hook * Allow account registration with custom key Changed * Don't walk certificate chain for ACMEv2 (certificate contains chain by default) * Improved documentation on wildcards Fixes * Added workaround for compatibility with filesystem ACLs * Close unwanted external file-descriptors * Fixed JSON parsing on force-renewal (bsc#1091216) * Fixed cleanup of challenge files/dns-entries on validation errors * A few more minor fixes * Thu Mar 15 2018 firstname.lastname@example.org - Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305) * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch * Wed Mar 14 2018 email@example.com - Fix issues introduced by 0.6.1 (bsc#1085305) * bring back man page * reflect new endpoint in (commented out) config file section (adds 0001-fixed-CA-url-in-example-config.patch, backported from upstream's master branch) * Tue Mar 13 2018 firstname.lastname@example.org - Updated dehydrated to 0.6.1 (bsc#1084854) * Use new ACME v2 endpoint by default * Mon Mar 12 2018 email@example.com - Updated dehydrated to 0.6.0 (bsc#1084854) Changed * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support) * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory) Added * Support for ACME v02 (including wildcard certificates!) * New hook: generate_csr (see example hook script for more information) * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored... * Mon Jan 15 2018 firstname.lastname@example.org - Remove redundant noarch entries. They cause an error in RPM 4.14. * Mon Jan 15 2018 email@example.com - Updated dehydrated to 0.5.0 This removes the following patches and files, which are now part of the upstream package: * 0001-Add-optional-user-and-group-configuration.patch * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch * dehydrated.1: the man page has been adopted by upstream Starting with this version, upstream introduced signed releases, which is now being used for source validation. Upstream changes: Changed * Certificate chain is now cached (CHAINCACHE) * OpenSSL binary path is now configurable (OPENSSL) * Cleanup now also moves revoked certificates Added * New feature for updating contact information (--account) * Allow automatic cleanup on exit (AUTO_CLEANUP) * Initial support for fetching OCSP status to be used for OCSP stapling (OCSP_FETCH) * Certificates can now have aliases to create multiple certificates with identical set of domains (see --alias and domains.txt documentation) * Allow dehydrated to run as specified user (/group). This was already available previously as a patch to this package.
/etc/dehydrated /etc/dehydrated/accounts /etc/dehydrated/archive /etc/dehydrated/certs /etc/dehydrated/chains /etc/dehydrated/config /etc/dehydrated/config.d /etc/dehydrated/domains.txt /etc/dehydrated/hook.sh /etc/dehydrated/postrun-hooks.d /etc/dehydrated/postrun-hooks.d/README.hooks /run/dehydrated /usr/bin/dehydrated /usr/lib/systemd/system/dehydrated-postrun-hooks.service /usr/lib/systemd/system/dehydrated-postrun-hooks@.service /usr/lib/systemd/system/dehydrated.service /usr/lib/systemd/system/dehydrated.target /usr/lib/systemd/system/dehydrated.timer /usr/lib/systemd/system/dehydrated@.service /usr/lib/systemd/system/dehydrated@.timer /usr/lib/tmpfiles.d/dehydrated.conf /usr/sbin/rcdehydrated /usr/share/doc/packages/dehydrated /usr/share/doc/packages/dehydrated/LICENSE /usr/share/doc/packages/dehydrated/README.maintainer /usr/share/doc/packages/dehydrated/README.md /usr/share/doc/packages/dehydrated/acme-v1.md /usr/share/doc/packages/dehydrated/dns-verification.md /usr/share/doc/packages/dehydrated/domains_txt.md /usr/share/doc/packages/dehydrated/ecc.md /usr/share/doc/packages/dehydrated/hook_chain.md /usr/share/doc/packages/dehydrated/logo.jpg /usr/share/doc/packages/dehydrated/per-certificate-config.md /usr/share/doc/packages/dehydrated/staging.md /usr/share/doc/packages/dehydrated/tls-alpn.md /usr/share/doc/packages/dehydrated/troubleshooting.md /usr/share/doc/packages/dehydrated/wellknown.md /usr/share/man/man1/dehydrated.1.gz /var/lib/acme-challenge
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Nov 24 23:56:42 2021