Releases: icing/mod_md
Releases · icing/mod_md
mod_md v2.2.5
- Corrected a check when OCSP stapling was configured for hosts
where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm). - @uhliarik added documentation for the
a2md
command. Usexmlto man ./a2md.xml
to generate it. - Softening the restrictions where mod_md configuration directives may appear. This should
allow for use inIf
andMacro
sections. If all possible variations lead to the configuration
you wanted in the first place, is another matter.
mod_md v2.2.4
mod_md v2.2.3
- Configuring MDCAChallenges replaces any previous existing challenge configuration. It
had been additive before which was not the intended behaviour. [@mkauf] - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
documented forMDCAChallenges
. Fixes #156. Thanks again to @mkauf for finding this. - Added a script - inspired by curl https://github.com/curl - that collects contributors
from the git commits and PRs. Adding a "Thanks" section with their names in the README.md.
mod_md v2.2.2
- Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
- Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
"transfer-encoding" to POST requests. This failed in directy communication with
Let's Encrypt boulder server (however it worked when accessed via the hosting CDN,
as almost all live usages do). Thanks to @mkauf for finding and fixing. - Fixes a compiler warning. False flag, but initialization to make it happy does not hurt.
Thanks to @sundayoyeniyi for finding this. Refs #154.
mod_md v2.2.0
- No longer beta status
- Synched with Apache trunk and planned for 2.4.x backport when all works well there
- Re-importing of log tags assigned in Apache project
- Some documentation clarifications
- New OCSP Stapling implementation
- Various improvements and fixes during v2.1.x development. See ChangeLog for details
mod_md v2.1.10 (annoyingly still beta)
- if 'MDBaseServer' in enabled and there is no specific VirtualHost for a domain, the
base server config is considered the relevant one for deciding ACME support. This
is most relevant for the 'tls-alpn-01' challenge, see issue #150). - MDMessageCmd is now invoked with 'installed' when the certificate is actually becoming
active at server startup/reload. Different to all other messages, this one is invoked
while the server is still root and has according privileges. (Hint: you may use this
to copy a certificate+key to another application's preferred location/format.)
mod_md v2.1.9 (almost not beta)
- server-status no longer leaves the "activity" column empty when a renewal is ongoing.
- server-status activity: report a renewal as "pending" when it is due but no job has been
started yet. - removed the "valid after" time as this was confusing. The new certificate is already
valid, only it is recommeneded to wait with the actication a bit. Admins are probably
better aware what the clock skew requirements of their site are.
mod_md v2.1.8 (just a touch of beta)
- Some notifications cleanups:
- notifications about errors no longer change the status of the ongoing renewal.
- notifications about a successful renewal are re-attempted on failure, just like
other failures cause a retry with a backing-off delay. - warnings about expiring certificates are only sent, if there is no renewal
already done (but maybe not activated yet) for a domain - failure to notify about expiring certficates also cause retry and are cleared
when/if finally successful.
mod_md v2.1.7 (beta almost over)
- Changed server-status section headings to make more clear what is listed there.
- no longer listing the logs in the top-level md-status handler (where all managed
domains are listed). Getting the status of a particular domain has the log). - fixing some signedness warnings in clang 11.
- Fixes bug in time period calculation for removing old OCSP response files.
mod_md v2.1.6 (beta)
- Fixed issue #145 where a server restart was not done when recommended and checking
becamed called in a tight loop, eventually calling message commands again and again.
Test case added for this. - 'make test' will now trigger the build if not done before. removed some obsolete
test special targets. - starting to integrate with travis for build and test coverage
- documented how MDCAChallenges now overrides any port sanity checks.