mirror of
https://github.com/rkivalin/certforge.git
synced 2026-10-28 08:00:23 +00:00
Roman KivalinandClaude Opus 4.6
da8c937782
Breaking config change. The DNS and challenge configuration is now structured around named, reusable components: - [dns.*] named DNS client connections with explicit zone field - [solver.*] challenge solvers (dns-01, http-01, tls-alpn-01) - Certificates reference solvers by name (solver/solvers fields) - DANE blocks reference DNS clients by name (dns field) - Removed automatic zone detection heuristics - Added default_solver for global fallback - Validation: DNS-01 rejected for IP addresses, solver/solvers mutual exclusivity, length matching, reference integrity HTTP-01 and TLS-ALPN-01 solver implementations to follow. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
35 lines
1.3 KiB
Plaintext
35 lines
1.3 KiB
Plaintext
certforge (0.4.0-1) unstable; urgency=low
|
|
|
|
* Breaking: configuration format overhauled (named DNS clients, solvers, per-domain solver assignment)
|
|
* Support for HTTP-01 and TLS-ALPN-01 challenge solvers
|
|
* IP address certificates (IPv4 and IPv6)
|
|
|
|
-- Roman Kivalin <roman@shl.dev> Sat, 12 Apr 2026 23:00:00 +0000
|
|
|
|
certforge (0.3.0-1) unstable; urgency=low
|
|
|
|
* Add DNS propagation delay before ACME challenge validation
|
|
|
|
-- Roman Kivalin <roman@shl.dev> Sat, 12 Apr 2026 22:30:00 +0000
|
|
|
|
certforge (0.2.0-1) unstable; urgency=low
|
|
|
|
* Build on Ubuntu 22.04 for glibc 2.35 compatibility (Debian 12+)
|
|
|
|
-- Roman Kivalin <roman@shl.dev> Sat, 12 Apr 2026 22:00:00 +0000
|
|
|
|
certforge (0.1.0-1) unstable; urgency=low
|
|
|
|
* Initial release.
|
|
* ACME certificate issuance and renewal via DNS-01 challenges (RFC 8555)
|
|
* RFC 2136 dynamic DNS updates with TSIG authentication
|
|
* DANE TLSA record publication (RFC 6698/7671/7672)
|
|
* Key rotation with DANE pre-publication protocol
|
|
* ECDSA P-256 and P-384 key generation
|
|
* systemd credential integration (systemd-creds encrypt/decrypt)
|
|
* systemd unit reload/restart hooks via D-Bus
|
|
* TOML configuration with per-zone DNS overrides
|
|
* Systemd service and timer units included
|
|
|
|
-- Roman Kivalin <roman@shl.dev> Sat, 12 Apr 2026 18:00:00 +0000
|