lacme (0.5-1+deb10u2) buster; urgency=medium

  * Use upstream certificate chain instead of an hardcoded one.
    This is a breaking change.  The certificate indicated by 'CAfile' is no
    longer used as is in 'certificate-chain' (along with the leaf cert).
    The chain returned by the ACME v2 endpoint is used instead.  This allows
    for more flexbility with respect to key/CA rotation, cf.
    https://letsencrypt.org/2020/11/06/own-two-feet.html and
    https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018
  * Additional current/planned CA certificates can be found under
    /usr/local/share/lacme:
      - lets-encrypt-e[12].pem
      - lets-encrypt-r[34]-cross-signed.pem
      - lets-encrypt-r[34].pem
      - letsencryptauthorityx[34].pem
    See https://letsencrypt.org/certificates/
  * Moreover 'CAfile' now defaults to /usr/share/lacme/ca-certificates.crt
    which is a concatenation of all known active CA certificates (which
    includes the previous default).
    Closes: #975862.

 -- Guilhem Moulin <guilhem@debian.org>  Thu, 26 Nov 2020 01:14:50 +0100

lacme (0.5-1+deb10u1) buster; urgency=medium

  * Link to RFC 8555 <https://tools.ietf.org/html/rfc8555> instead of the
    ACME I-D URL.
  * Issue GET and POST-as-GET requests (RFC 8555 sec. 6.3) for the
    authorizations, order and certificate URLs.   Let's Encrypt will remove
    support of unauthenticated GETs from the V2 API on 01 Nov 2019.
    Closes: #935799.

 -- Guilhem Moulin <guilhem@debian.org>  Thu, 22 Aug 2019 00:14:42 +0200

lacme (0.5-1) unstable; urgency=medium

  * New upstream release, adding support for v2 ACME endpoints.
  * Fix manpage generation with pandoc >=2.1.  (Closes: #896982.)
  * debian/control:
    + Bump Standards-Version to 4.1.4.  No changes.
    + Build-depends: bump minimum pandoc version to 2.1.
    + Depends (lacme): add libtypes-serialiser-perl

 -- Guilhem Moulin <guilhem@debian.org>  Wed, 09 May 2018 14:17:19 +0200

lacme (0.4-1) unstable; urgency=medium

  * Fix manpage generation with pandoc >=1.18.  (Closes: #869885.)

 -- Guilhem Moulin <guilhem@debian.org>  Fri, 28 Jul 2017 00:24:06 +0200

lacme (0.3-1) unstable; urgency=low

  * New upstream release.
  * Provide apache2 and nginx configuration snippet in /etc/lacme.
  * debian/control: Bump Standards-Version to 4.0.0.  No changes.

 -- Guilhem Moulin <guilhem@debian.org>  Sun, 09 Jul 2017 00:41:23 +0200

lacme (0.2-1) unstable; urgency=low

  * New upstream release.
  * debian/control:
    + Promote lacme-accountd from lacme's Suggests to Recommends.
    + Bump Standards-Version to 3.9.8.  No changes.

 -- Guilhem Moulin <guilhem@guilhem.org>  Mon, 05 Dec 2016 16:35:59 +0100

lacme (0.1-1) unstable; urgency=low

  * Initial release.  (Closes: #827357, #827358.)

 -- Guilhem Moulin <guilhem@guilhem.org>  Tue, 08 Dec 2015 18:58:20 +0100