Skip to content

Releases: icing/mod_md

mod_md v1.0.3

16 Nov 16:30
Compare
Choose a tag to compare
  • fixed various bugs in persisting job properties, so that status is persisted accross
    child process changes and staging is reset on reloads.
  • changed MDCertificateAgreement url checks. As long as the CA reports that the account
    has an agreement, no further checking is done. Existing accounts need no changes when
    a new agreement comes out. This is as Let's Encrypt rolls.

mod_md v1.0.2

13 Nov 10:56
Compare
Choose a tag to compare
  • fix staging reset when MDCertificateAgreemen was initially missing.

mod_md v1.0.1

23 Oct 11:19
Compare
Choose a tag to compare
  • ServerName/Alias names from pure-http: virtual hosts are no longer auto-added to a Managed Domain.
    Fixes issue #57.
  • Error counts of jobs are presisted now. When the server restarts (gracefully) any errored
    staging areas are purged to reset the signup/renewal process. Fixes issue #55

mod_md v1.0.0

11 Oct 11:17
Compare
Choose a tag to compare
  • New config directive MDNotifyCmd that will run when Managed Domains have been signed up/renewed. The
    names of the MDs is given as arguments to the command.

mod_md v0.9.9

04 Oct 14:52
Compare
Choose a tag to compare
  • Protocol driving now applies correct server properties for http/https challenge selection,
    with new test cases (fixes issue #52).

mod_md v0.9.8

04 Oct 11:57
Compare
Choose a tag to compare
  • Protocol driving now uses correct server properties for http/https challenge selection
    (refs issue #52).

mod_md v0.9.7

26 Sep 08:21
Compare
Choose a tag to compare
  • When building against 2.4.x, one probably needs to configure without --enable-werror,
    since there were some warnings fixed in Apache httpd trunk.
  • Removed obsolete function from interface to mod_ssl. Module now requires at least mod_ssl
    patch v4 in place.
  • Fallback certificates has version set and no longer claims to be a CA. (re issue #32)
  • MDRequireHttps now happens before any Redirect.
  • added some compiler warning flags and adding casts/eliminating some unused params accordingly

mod_md v0.9.6

15 Sep 09:50
Compare
Choose a tag to compare
  • For Managed Domains with 'MDRequireHttps permanent' a HSTS (rfc6797) header is added
    in the response with value 'max-age=15768000', if not already there.

mod_md v0.9.5

13 Sep 13:33
Compare
Choose a tag to compare
  • New directive (srly: what do you expect at this point?) "MDMustStaple on|off" to control if
    new certificates are requested with the OCSP Must Staple extension.
  • Known limitation: when the server is configured to ditch and restart child processes, for example
    after a certain number of connections/requests, the mod_md watchdog instance might migrate
    to a new child process. Since not all its state is persisted, some messsages might appear a
    second time in the logs.
  • --with-openssl configure option provided by caminada to
    specify an uncommon location of the lib.
  • --with-jansson configure option provided by caminada to
    specify an uncommon location of the lib.
  • Adding checks when 'MDRequireHttps' is used. It is considered an error when 'MDPortMap 443:-'
    is used - which negates that a https: port exists. Also, a warning is logged if no
    VirtualHost can be found for a Managed Domain that has port 443 (or the mapped one) in
    its address list.

mod_md v0.9.4

12 Sep 15:21
Compare
Choose a tag to compare
  • New directive 'MDRequireHttps' for redirecting http: traffic to a Managed Domain, permanently
    or temporarily.
  • Fix for using a fallback certificate on initial signup of a Managed Domain. Requires also
    a changed mod_ssl patch (v5) to take effect.