dehydrated-io/dehydrated v0.7.0

on GitHub

[0.7.0] - 2020-12-10

Added

• Support for external account bindings
• Special support for ZeroSSL
• Support presets for some CAs instead of requiring URLs
• Allow requesting preferred chain (--preferred-chain)
• Added method to show CAs current terms of service (--display-terms)
• Allow setting path to domains.txt using cli arguments (--domains-txt)
• Added new cli command --cleanupdelete which deletes old files instead of archiving them

Fixed

• No more silent failures on broken hook-scripts
• Better error-handling with KEEP_GOING enabled
• Check actual order status instead of assuming it's valid
• Don't include keyAuthorization in challenge validation (RFC compliance)

Changed

• Using EC secp384r1 as default certificate type
• Use JSON.sh to parse JSON
• Use account URL instead of account ID (RFC compliance)
• Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated
• Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options
• Cleanup now also removes dangling symlinks