Releases: icing/mod_md
Releases · icing/mod_md
mod_md v1.0.3
- fixed various bugs in persisting job properties, so that status is persisted accross
child process changes and staging is reset on reloads. - changed MDCertificateAgreement url checks. As long as the CA reports that the account
has an agreement, no further checking is done. Existing accounts need no changes when
a new agreement comes out. This is as Let's Encrypt rolls.
mod_md v1.0.2
- fix staging reset when MDCertificateAgreemen was initially missing.
mod_md v1.0.1
mod_md v1.0.0
- New config directive
MDNotifyCmd
that will run when Managed Domains have been signed up/renewed. The
names of the MDs is given as arguments to the command.
mod_md v0.9.9
- Protocol driving now applies correct server properties for http/https challenge selection,
with new test cases (fixes issue #52).
mod_md v0.9.8
- Protocol driving now uses correct server properties for http/https challenge selection
(refs issue #52).
mod_md v0.9.7
- When building against 2.4.x, one probably needs to configure without
--enable-werror
,
since there were some warnings fixed in Apache httpd trunk. - Removed obsolete function from interface to mod_ssl. Module now requires at least mod_ssl
patch v4 in place. - Fallback certificates has version set and no longer claims to be a CA. (re issue #32)
MDRequireHttps
now happens before anyRedirect
.- added some compiler warning flags and adding casts/eliminating some unused params accordingly
mod_md v0.9.6
- For Managed Domains with 'MDRequireHttps permanent' a HSTS (rfc6797) header is added
in the response with value 'max-age=15768000', if not already there.
mod_md v0.9.5
- New directive (srly: what do you expect at this point?) "MDMustStaple on|off" to control if
new certificates are requested with the OCSP Must Staple extension. - Known limitation: when the server is configured to ditch and restart child processes, for example
after a certain number of connections/requests, the mod_md watchdog instance might migrate
to a new child process. Since not all its state is persisted, some messsages might appear a
second time in the logs. - --with-openssl configure option provided by caminada to
specify an uncommon location of the lib. - --with-jansson configure option provided by caminada to
specify an uncommon location of the lib. - Adding checks when 'MDRequireHttps' is used. It is considered an error when 'MDPortMap 443:-'
is used - which negates that a https: port exists. Also, a warning is logged if no
VirtualHost can be found for a Managed Domain that has port 443 (or the mapped one) in
its address list.
mod_md v0.9.4
- New directive 'MDRequireHttps' for redirecting http: traffic to a Managed Domain, permanently
or temporarily. - Fix for using a fallback certificate on initial signup of a Managed Domain. Requires also
a changed mod_ssl patch (v5) to take effect.