Skip to content

Releases: icing/mod_md

mod_md v2.6.0

29 Jul 16:29
v2.6.0
6b37547
Compare
Choose a tag to compare
  • Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this. Documentation in
    README.md
  • Removed tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.

mod_md v2.5.3

10 Jul 12:21
9071b12
Compare
Choose a tag to compare
  • Fixed a compilation issue with pre-industrial versions of libcurl.

mod_md v2.5.2

25 Mar 12:01
v2.5.2
b4b59b1
Compare
Choose a tag to compare
  • Fixed TLS-ALPN-01 challenges when multiple MDPrivateKeys are specified
    with EC keys before RSA ones. Fixes #377.
  • Fixed missing newlines in the status page output. [andreasgroth]

mod_md v2.5.1

05 Feb 11:35
Compare
Choose a tag to compare
  • When installing a custom CA file via MDCACertificateFile, also set the
    libcurl option CURLSSLOPT_NO_REVOKE that suppresses complains by Schannel
    (when curl is linked with it) about missing CRL/OCSP in certificates.
    Fixes #361.
  • Fixed handling of corrupted httpd.json and added test 300_30 for it.
    File is removed on error and written again. Fixes #369.
  • Added explanation in log for how to proceed when md_store.json could not be
    parsed and prevented the server start.

mod_md v2.5.0

24 Jan 13:21
Compare
Choose a tag to compare
  • Added support for ACME profiles. See README on how to use them.
  • restored fixed to #336 and #337 which got lost in a sync with Apache svn
  • Add Issue Name/Uris to certificate information in md-status handler
  • MDomains with static certificate files have MDRenewMode "manual", unless
    "always" is configured.

mod_md v2.4.31

15 Jan 12:29
Compare
Choose a tag to compare
  • Improved error reporting when waiting for ACME server to verify domains
    or finalizing the order fails, e.g. times out.
  • Increasing the timeouts to wait for ACME server to verify domain names
    and issue the certificate from 30 seconds to 5 minutes.

mod_md v2.4.30

11 Dec 12:41
Compare
Choose a tag to compare
  • Changed a log level from error to debug when Stapling is enabled but a certificate carries no OCSP responder URL.

v2.4.29

03 Dec 09:09
Compare
Choose a tag to compare
  • Fixed HTTP-01 challenges to not carry a final newline, as some ACME server fail to ignore it. [Michael Kaufmann (mkauf)]
  • Fixed missing label+newline in server-status plain text output when MDStapling is enabled.

v2.4.28

12 Sep 13:16
Compare
Choose a tag to compare
  • When the server starts, it looks for new, staged certificates to activate. If
    the staged set of files in 'md/staging/' is messed up, this could
    prevent further renewals to happen. Now, when the staging set is present, but
    could not be activated due to an error, purge the whole directory.

mod_md v2.4.27

06 Sep 11:38
Compare
Choose a tag to compare
  • Fix certificate retrieval on ACME renewal to not require a 'Location:' header returned by the ACME CA. This was the way it was done in ACME before it became an IETF standard. Let's Encrypt still supports this, but other CAs do not. Refs #265.
  • Restore compatibility with OpenSSL < 1.1. [ylavic]