Releases: icing/mod_md
Releases · icing/mod_md
mod_md v2.6.8
- Fix the ARI related
replacesproperty in ACME order creation to only
be used when the CA supports ARI and it is enabled in the menu config.
Fixes #406. - Fix compatibility with APR versions before 1.6.0 which do not have
apr_cstr_casecmpand should useapr_strnatcasecmpinstead.
mod_md v2.6.7
- Fix a regression in
MDStapleOthers, broken in v2.6.0, that made it no longer apply, no matter the configuration.
mod_md v2.6.6
- Fix a small memory leak when using OpenSSL's BIGNUMs. [Theo Buehler]
- Fix reuse of curl easy handles by resetting them. [Michael Kaufmann]
mod_md v2.6.5
- Hardening: when build with OpenSSL older than 1.0.2 or old libressl versions,
the parsing of ASN.1 time strings did not do a length check. - Hardening: when reading back OCSP responses stored in the local JSON store,
missing 'valid' key led to uninitialized values, resulting in wrong
refresh behaviour.
mod_md v2.6.4
- New directive
MDInitialDelay, controlling how longer to wait after
a server restart before checking certificates for renewal.
[Michael Kaufmann]
mod_md v2.6.2
- Fix error retry delay calculation to not already doubling the wait on the first error.
mod_md v2.6.1
- Increasing default
MDRetryDelayto 30 seconds to generate less bursty
traffic on errored renewals for the ACME CA. This leads to error retries
of 30s, 1 minute, 2, 4, etc. up to daily attempts. - Checking that configuring
MDRetryDelaywill result in a positive
duration. A delay of 0 is not accepted. - Fix a bug in checking Content-Type of responses from the ACME server.
mod_md v2.6.0
- Added ACME ARI support (rfc9773) to the module. Enabled by default. New
directive "MDRenewViaARI on|off" for controlling this. Documentation in
README.md - Removed tailscale support. It has not been working for a long time
as the company decided to change their APIs. Away with the dead code,
documentation and tests.
mod_md v2.5.3
- Fixed a compilation issue with pre-industrial versions of libcurl.
mod_md v2.5.2
- Fixed TLS-ALPN-01 challenges when multiple
MDPrivateKeysare specified
with EC keys before RSA ones. Fixes #377. - Fixed missing newlines in the status page output. [andreasgroth]