Skip to content

Releases: icing/mod_md

mod_md v2.2.5

06 Jan 11:15
Compare
Choose a tag to compare
  • Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  • @uhliarik added documentation for the a2md command. Use xmlto man ./a2md.xml to generate it.
  • Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in If and Macro sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.

mod_md v2.2.4

19 Nov 12:05
Compare
Choose a tag to compare
  • Fixed a compile time issue with OpenSSL 1.0.2 in the new OCSP code.
  • Skip port checks for domain server_rec selection when "tls-alpn-01" is configured
    explicitly (related to #133). [@mkauf]
  • Added a sample scripts/md_message.sh on how to use MDMessageCmd.

mod_md v2.2.3

05 Nov 09:51
Compare
Choose a tag to compare
  • Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  • Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for MDCAChallenges. Fixes #156. Thanks again to @mkauf for finding this.
  • Added a script - inspired by curl https://github.com/curl - that collects contributors
    from the git commits and PRs. Adding a "Thanks" section with their names in the README.md.

mod_md v2.2.2

28 Oct 10:02
Compare
Choose a tag to compare
  • Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  • Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server (however it worked when accessed via the hosting CDN,
    as almost all live usages do). Thanks to @mkauf for finding and fixing.
  • Fixes a compiler warning. False flag, but initialization to make it happy does not hurt.
    Thanks to @sundayoyeniyi for finding this. Refs #154.

mod_md v2.2.0

16 Oct 13:03
Compare
Choose a tag to compare
  • No longer beta status
  • Synched with Apache trunk and planned for 2.4.x backport when all works well there
  • Re-importing of log tags assigned in Apache project
  • Some documentation clarifications
  • New OCSP Stapling implementation
  • Various improvements and fixes during v2.1.x development. See ChangeLog for details

mod_md v2.1.10 (annoyingly still beta)

15 Oct 13:56
Compare
Choose a tag to compare
  • if 'MDBaseServer' in enabled and there is no specific VirtualHost for a domain, the
    base server config is considered the relevant one for deciding ACME support. This
    is most relevant for the 'tls-alpn-01' challenge, see issue #150).
  • MDMessageCmd is now invoked with 'installed' when the certificate is actually becoming
    active at server startup/reload. Different to all other messages, this one is invoked
    while the server is still root and has according privileges. (Hint: you may use this
    to copy a certificate+key to another application's preferred location/format.)

mod_md v2.1.9 (almost not beta)

10 Oct 11:08
Compare
Choose a tag to compare
  • server-status no longer leaves the "activity" column empty when a renewal is ongoing.
  • server-status activity: report a renewal as "pending" when it is due but no job has been
    started yet.
  • removed the "valid after" time as this was confusing. The new certificate is already
    valid, only it is recommeneded to wait with the actication a bit. Admins are probably
    better aware what the clock skew requirements of their site are.

mod_md v2.1.8 (just a touch of beta)

01 Oct 13:25
Compare
Choose a tag to compare
  • Some notifications cleanups:
    • notifications about errors no longer change the status of the ongoing renewal.
    • notifications about a successful renewal are re-attempted on failure, just like
      other failures cause a retry with a backing-off delay.
    • warnings about expiring certificates are only sent, if there is no renewal
      already done (but maybe not activated yet) for a domain
    • failure to notify about expiring certficates also cause retry and are cleared
      when/if finally successful.

mod_md v2.1.7 (beta almost over)

25 Sep 10:21
Compare
Choose a tag to compare
  • Changed server-status section headings to make more clear what is listed there.
  • no longer listing the logs in the top-level md-status handler (where all managed
    domains are listed). Getting the status of a particular domain has the log).
  • fixing some signedness warnings in clang 11.
  • Fixes bug in time period calculation for removing old OCSP response files.

mod_md v2.1.6 (beta)

23 Sep 14:13
Compare
Choose a tag to compare
  • Fixed issue #145 where a server restart was not done when recommended and checking
    becamed called in a tight loop, eventually calling message commands again and again.
    Test case added for this.
  • 'make test' will now trigger the build if not done before. removed some obsolete
    test special targets.
  • starting to integrate with travis for build and test coverage
  • documented how MDCAChallenges now overrides any port sanity checks.