lacme (0.5-1+deb10u2) buster; urgency=medium * Use upstream certificate chain instead of an hardcoded one. This is a breaking change. The certificate indicated by 'CAfile' is no longer used as is in 'certificate-chain' (along with the leaf cert). The chain returned by the ACME v2 endpoint is used instead. This allows for more flexbility with respect to key/CA rotation, cf. https://letsencrypt.org/2020/11/06/own-two-feet.html and https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018 * Additional current/planned CA certificates can be found under /usr/local/share/lacme: - lets-encrypt-e[12].pem - lets-encrypt-r[34]-cross-signed.pem - lets-encrypt-r[34].pem - letsencryptauthorityx[34].pem See https://letsencrypt.org/certificates/ * Moreover 'CAfile' now defaults to /usr/share/lacme/ca-certificates.crt which is a concatenation of all known active CA certificates (which includes the previous default). Closes: #975862. -- Guilhem Moulin Thu, 26 Nov 2020 01:14:50 +0100 lacme (0.5-1+deb10u1) buster; urgency=medium * Link to RFC 8555 instead of the ACME I-D URL. * Issue GET and POST-as-GET requests (RFC 8555 sec. 6.3) for the authorizations, order and certificate URLs. Let's Encrypt will remove support of unauthenticated GETs from the V2 API on 01 Nov 2019. Closes: #935799. -- Guilhem Moulin Thu, 22 Aug 2019 00:14:42 +0200 lacme (0.5-1) unstable; urgency=medium * New upstream release, adding support for v2 ACME endpoints. * Fix manpage generation with pandoc >=2.1. (Closes: #896982.) * debian/control: + Bump Standards-Version to 4.1.4. No changes. + Build-depends: bump minimum pandoc version to 2.1. + Depends (lacme): add libtypes-serialiser-perl -- Guilhem Moulin Wed, 09 May 2018 14:17:19 +0200 lacme (0.4-1) unstable; urgency=medium * Fix manpage generation with pandoc >=1.18. (Closes: #869885.) -- Guilhem Moulin Fri, 28 Jul 2017 00:24:06 +0200 lacme (0.3-1) unstable; urgency=low * New upstream release. * Provide apache2 and nginx configuration snippet in /etc/lacme. * debian/control: Bump Standards-Version to 4.0.0. No changes. -- Guilhem Moulin Sun, 09 Jul 2017 00:41:23 +0200 lacme (0.2-1) unstable; urgency=low * New upstream release. * debian/control: + Promote lacme-accountd from lacme's Suggests to Recommends. + Bump Standards-Version to 3.9.8. No changes. -- Guilhem Moulin Mon, 05 Dec 2016 16:35:59 +0100 lacme (0.1-1) unstable; urgency=low * Initial release. (Closes: #827357, #827358.) -- Guilhem Moulin Tue, 08 Dec 2015 18:58:20 +0100