dehydrated-io/dehydrated v0.7.1

on GitHub

[0.7.1] - 2022-10-31

Changed

• --force no longer forces domain name revalidation by default, a new argument --force-validation has been added for that
• Added support for EC secp521r1 algorithm (works with e.g. zerossl)
• EC PARAMETERS are no longer written to privkey.pem (didn't seem necessary and was causing issues with various software)

Fixed

• Requests resulting in badNonce errors are now automatically retried (fixes operation with LE staging servers)
• Deprecated egrep usage has been removed

Added

• Implemented EC for account keys
• Domain list now also read from domains.txt.d subdirectory (behaviour might change, see docs)
• Implemented RFC 8738 (validating/signing certificates for IP addresses instead of domain names) support (this will not work with most public CAs, if any!)