mirror of
https://github.com/rkivalin/certforge.git
synced 2026-10-13 00:00:42 +00:00
Roman KivalinandClaude Opus 4.6
94e55f79ac
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
90 lines
3.1 KiB
Plaintext
90 lines
3.1 KiB
Plaintext
certforge (0.11.0-1) unstable; urgency=low
|
|
|
|
* No changes
|
|
|
|
-- Roman Kivalin <roman@shl.dev> Mon, 21 Apr 2026 00:00:00 +0000
|
|
|
|
certforge (0.10.0-1) unstable; urgency=low
|
|
|
|
* Systemd hooks skip units that are not active
|
|
* Don't re-save unchanged private key on renewal
|
|
* DANE failures no longer block post-renewal hooks
|
|
* Remove ProtectSystem=strict from systemd service
|
|
* Improve error messages for file write failures
|
|
|
|
-- Roman Kivalin <roman@shl.dev> Fri, 18 Apr 2026 00:00:00 +0000
|
|
|
|
certforge (0.9.0-1) unstable; urgency=low
|
|
|
|
* Fix renew_before_days not triggering on exact day boundary
|
|
* Respect --dry-run flag for file permission updates
|
|
|
|
-- Roman Kivalin <roman@shl.dev> Thu, 17 Apr 2026 00:00:00 +0000
|
|
|
|
certforge (0.8.0-1) unstable; urgency=low
|
|
|
|
* Fix HTTP-01 and TLS-ALPN-01 solvers hanging on startup
|
|
|
|
-- Roman Kivalin <roman@shl.dev> Thu, 17 Apr 2026 00:00:00 +0000
|
|
|
|
certforge (0.7.0-1) unstable; urgency=low
|
|
|
|
* Custom file permissions for key and certificate files
|
|
|
|
-- Roman Kivalin <roman@shl.dev> Mon, 14 Apr 2026 00:00:00 +0000
|
|
|
|
certforge (0.6.0-1) unstable; urgency=low
|
|
|
|
* Named hooks with per-certificate reference and cross-cert dedup
|
|
* Multiple listen addresses for HTTP-01 and TLS-ALPN-01 solvers
|
|
* Fix inline hooks ignoring --dry-run flag
|
|
* Improve config validation
|
|
* dane-check verifies published TLSA records against expected values
|
|
* Configurable DNS propagation delay per solver
|
|
|
|
-- Roman Kivalin <roman@shl.dev> Mon, 14 Apr 2026 00:00:00 +0000
|
|
|
|
certforge (0.5.0-1) unstable; urgency=low
|
|
|
|
* Support multiple zones per DNS client with automatic zone matching
|
|
* Config validation for domain/DANE zone matching
|
|
* Don't bind systemd-creds to a specific credential name
|
|
* Fix wildcard certificate DNS-01 challenges
|
|
|
|
-- Roman Kivalin <roman@shl.dev> Sun, 13 Apr 2026 22:00:00 +0000
|
|
|
|
certforge (0.4.0-1) unstable; urgency=low
|
|
|
|
* Breaking: configuration format overhauled (named DNS clients, solvers, per-domain solver assignment)
|
|
* Support for HTTP-01 and TLS-ALPN-01 challenge solvers
|
|
* IP address certificates (IPv4 and IPv6)
|
|
|
|
-- Roman Kivalin <roman@shl.dev> Sat, 12 Apr 2026 23:00:00 +0000
|
|
|
|
certforge (0.3.0-1) unstable; urgency=low
|
|
|
|
* Add DNS propagation delay before ACME challenge validation
|
|
|
|
-- Roman Kivalin <roman@shl.dev> Sat, 12 Apr 2026 22:30:00 +0000
|
|
|
|
certforge (0.2.0-1) unstable; urgency=low
|
|
|
|
* Build on Ubuntu 22.04 for glibc 2.35 compatibility (Debian 12+)
|
|
|
|
-- Roman Kivalin <roman@shl.dev> Sat, 12 Apr 2026 22:00:00 +0000
|
|
|
|
certforge (0.1.0-1) unstable; urgency=low
|
|
|
|
* Initial release.
|
|
* ACME certificate issuance and renewal via DNS-01 challenges (RFC 8555)
|
|
* RFC 2136 dynamic DNS updates with TSIG authentication
|
|
* DANE TLSA record publication (RFC 6698/7671/7672)
|
|
* Key rotation with DANE pre-publication protocol
|
|
* ECDSA P-256 and P-384 key generation
|
|
* systemd credential integration (systemd-creds encrypt/decrypt)
|
|
* systemd unit reload/restart hooks via D-Bus
|
|
* TOML configuration with per-zone DNS overrides
|
|
* Systemd service and timer units included
|
|
|
|
-- Roman Kivalin <roman@shl.dev> Sat, 12 Apr 2026 18:00:00 +0000
|