Skip to content

Releases: icing/mod_md

mod_md v2.2.3

05 Nov 09:51
Compare
Choose a tag to compare
  • Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  • Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for MDCAChallenges. Fixes #156. Thanks again to @mkauf for finding this.
  • Added a script - inspired by curl https://github.com/curl - that collects contributors
    from the git commits and PRs. Adding a "Thanks" section with their names in the README.md.

mod_md v2.2.2

28 Oct 10:02
Compare
Choose a tag to compare
  • Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  • Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server (however it worked when accessed via the hosting CDN,
    as almost all live usages do). Thanks to @mkauf for finding and fixing.
  • Fixes a compiler warning. False flag, but initialization to make it happy does not hurt.
    Thanks to @sundayoyeniyi for finding this. Refs #154.

mod_md v2.2.0

16 Oct 13:03
Compare
Choose a tag to compare
  • No longer beta status
  • Synched with Apache trunk and planned for 2.4.x backport when all works well there
  • Re-importing of log tags assigned in Apache project
  • Some documentation clarifications
  • New OCSP Stapling implementation
  • Various improvements and fixes during v2.1.x development. See ChangeLog for details

mod_md v2.1.10 (annoyingly still beta)

15 Oct 13:56
Compare
Choose a tag to compare
  • if 'MDBaseServer' in enabled and there is no specific VirtualHost for a domain, the
    base server config is considered the relevant one for deciding ACME support. This
    is most relevant for the 'tls-alpn-01' challenge, see issue #150).
  • MDMessageCmd is now invoked with 'installed' when the certificate is actually becoming
    active at server startup/reload. Different to all other messages, this one is invoked
    while the server is still root and has according privileges. (Hint: you may use this
    to copy a certificate+key to another application's preferred location/format.)

mod_md v2.1.9 (almost not beta)

10 Oct 11:08
Compare
Choose a tag to compare
  • server-status no longer leaves the "activity" column empty when a renewal is ongoing.
  • server-status activity: report a renewal as "pending" when it is due but no job has been
    started yet.
  • removed the "valid after" time as this was confusing. The new certificate is already
    valid, only it is recommeneded to wait with the actication a bit. Admins are probably
    better aware what the clock skew requirements of their site are.

mod_md v2.1.8 (just a touch of beta)

01 Oct 13:25
Compare
Choose a tag to compare
  • Some notifications cleanups:
    • notifications about errors no longer change the status of the ongoing renewal.
    • notifications about a successful renewal are re-attempted on failure, just like
      other failures cause a retry with a backing-off delay.
    • warnings about expiring certificates are only sent, if there is no renewal
      already done (but maybe not activated yet) for a domain
    • failure to notify about expiring certficates also cause retry and are cleared
      when/if finally successful.

mod_md v2.1.7 (beta almost over)

25 Sep 10:21
Compare
Choose a tag to compare
  • Changed server-status section headings to make more clear what is listed there.
  • no longer listing the logs in the top-level md-status handler (where all managed
    domains are listed). Getting the status of a particular domain has the log).
  • fixing some signedness warnings in clang 11.
  • Fixes bug in time period calculation for removing old OCSP response files.

mod_md v2.1.6 (beta)

23 Sep 14:13
Compare
Choose a tag to compare
  • Fixed issue #145 where a server restart was not done when recommended and checking
    becamed called in a tight loop, eventually calling message commands again and again.
    Test case added for this.
  • 'make test' will now trigger the build if not done before. removed some obsolete
    test special targets.
  • starting to integrate with travis for build and test coverage
  • documented how MDCAChallenges now overrides any port sanity checks.

mod_md v2.1.5 (beta)

12 Sep 11:53
Compare
Choose a tag to compare
  • fixed a crash when the server-status page was retrieved in text form (e.g. server-status?auto
    url) and a MDomain had been renewed. Test case added. Fixes #141.
  • Test suite: rework on how httpd config is set up to allow for MDomain tests that use
    the base server and listen only on one port.

mod_md v2.1.4 (beta)

06 Sep 09:13
Compare
Choose a tag to compare
  • added test case for #142 and fixed a bug in JSON array handling introduced in 2.1.3