NeySlim/ultimate-ca-manager v2.181

on GitHub

[2.180] - 2026-06-30

Fixed

• Custom ACME CA directory and EAB are now honored for issuance and renewal — when a custom ACME directory URL was configured in Settings → ACME client (e.g. Actalis, ZeroSSL, Google Trust Services) together with External Account Binding credentials, certificate issuance and renewal still went to Let's Encrypt instead of the configured CA. The custom directory and the EAB persisted in SystemConfig were never used by the issuance/renewal path; acme.client.directory_url was effectively dead for issuance. A new AcmeClientService.for_issuance() factory reads the configured custom directory (over the Let's Encrypt staging/production mapping) and backfills legacy EAB from SystemConfig onto the AcmeClientAccount row, and for_order() resolves the issuing account from the order's recorded account_url so an order keeps its CA across changes to the directory setting. All issuance, verify, finalize, status, auto-poll and renewal entry points now route through these factories (#147).

[2.179] - 2026-06-27

Fixed

• Dashboard could not be scrolled on smaller desktop viewports — on laptops where the sidebar narrowed the grid below the large breakpoint, the dashboard rendered a non-scrollable multi-row grid clipped inside a fixed-height container, so the lower widgets (Recent Activity, System Health, ACME Accounts, Trust Store) were unreachable. The grid container now scrolls vertically when the layout overflows instead of being clipped (#144).
• Certificate linting no longer spawns a cascade of error toasts — the conformance-lint modal (CertificateLintModal) retriggered its own fetch in a loop whenever a lint call failed, because the toast-dispatch callbacks it depended on were recreated on every render. Toast / notification callbacks are now stable, and the modal guards against concurrent lint calls, so a failed lint surfaces a single error instead of an unbounded stack (#145).

Added

• Downloadable diagnostic log bundle — Settings → About → Diagnostic exposes an admin-only button that downloads a ZIP of the most relevant logs (ucm.log, error.log, access.log, the last lines of the systemd journal when available) plus a short secret-free system diagnostic (version, DB backend, migration number, services status). Sensitive tokens (Bearer credentials, passwords, API tokens, JWTs, PEM private-key blocks) are redacted before packaging, and each log file is capped so the bundle stays lightweight.

Full history: CHANGELOG.md