3 Commits

Include renames

Author	SHA1	Message	Date
Roman KivalinandClaude Opus 4.6	cf7ccb45db	Fix renew_before_days not triggering on exact day boundary ... expires_within_days() compared the exact expiry timestamp against now + N days, so a cert with 3 days 23 hours remaining would report "days_remaining=3" but not renew with renew_before_days=3. Fix by rounding days_until_expiry() to the nearest day (using seconds for precision) instead of truncating. This matches user expectations and provides a half-day buffer that absorbs systemd timer randomization delays. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-17 21:43:59 +02:00
Roman KivalinandClaude Opus 4.6	a0d275527b	Remove dead code and simplify listen address deserialization ... - Remove unused delete_tlsa_record, find_certificate, CertInfo.pem_chain, ChallengeInfo.challenge_type - Remove all #[allow(dead_code)] annotations - Replace custom deserializers with generic OneOrMany<T> enum used directly in SolverConfig fields Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 17:16:02 +02:00
Roman KivalinandClaude Opus 4.6	c1fdfba3fe	Initial implementation of certforge ACME certificate manager ... Rust CLI tool for automated ACME certificate management with: - DNS-01 challenge via RFC 2136 dynamic DNS updates with TSIG auth - DANE TLSA record publication (RFC 6698/7671/7672) - systemd credential integration (systemd-creds encrypt/decrypt) - systemd unit management via D-Bus (zbus) - Post-renewal hooks (systemctl reload/restart, arbitrary commands) - Key rotation with DANE pre-publication protocol - TOML configuration with per-zone DNS overrides Tested against Let's Encrypt staging. 12 unit tests, zero warnings. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-12 20:07:27 +02:00