Releases: icing/mod_md
Releases Β· icing/mod_md
mod_md v2.6.0
- Added ACME ARI support (rfc9773) to the module. Enabled by default. New
directive "MDRenewViaARI on|off" for controlling this. Documentation in
README.md - Removed tailscale support. It has not been working for a long time
as the company decided to change their APIs. Away with the dead code,
documentation and tests.
mod_md v2.5.3
- Fixed a compilation issue with pre-industrial versions of libcurl.
mod_md v2.5.2
- Fixed TLS-ALPN-01 challenges when multiple
MDPrivateKeys
are specified
with EC keys before RSA ones. Fixes #377. - Fixed missing newlines in the status page output. [andreasgroth]
mod_md v2.5.1
- When installing a custom CA file via
MDCACertificateFile
, also set the
libcurl option CURLSSLOPT_NO_REVOKE that suppresses complains by Schannel
(when curl is linked with it) about missing CRL/OCSP in certificates.
Fixes #361. - Fixed handling of corrupted httpd.json and added test 300_30 for it.
File is removed on error and written again. Fixes #369. - Added explanation in log for how to proceed when md_store.json could not be
parsed and prevented the server start.
mod_md v2.5.0
- Added support for ACME profiles. See README on how to use them.
- restored fixed to #336 and #337 which got lost in a sync with Apache svn
- Add Issue Name/Uris to certificate information in md-status handler
- MDomains with static certificate files have MDRenewMode "manual", unless
"always" is configured.
mod_md v2.4.31
- Improved error reporting when waiting for ACME server to verify domains
or finalizing the order fails, e.g. times out. - Increasing the timeouts to wait for ACME server to verify domain names
and issue the certificate from 30 seconds to 5 minutes.
mod_md v2.4.30
- Changed a log level from error to debug when Stapling is enabled but a certificate carries no OCSP responder URL.
v2.4.29
v2.4.28
- When the server starts, it looks for new, staged certificates to activate. If
the staged set of files in 'md/staging/' is messed up, this could
prevent further renewals to happen. Now, when the staging set is present, but
could not be activated due to an error, purge the whole directory.
mod_md v2.4.27
- Fix certificate retrieval on ACME renewal to not require a 'Location:' header returned by the ACME CA. This was the way it was done in ACME before it became an IETF standard. Let's Encrypt still supports this, but other CAs do not. Refs #265.
- Restore compatibility with OpenSSL < 1.1. [ylavic]