ferronweb/ferron 3.0.0-rc.5

on GitHub

Added

TLS

• Distributed ACME via shared cache: when cache points at a shared filesystem, Ferron now syncs HTTP-01 / TLS-ALPN-01 challenge data (challenge_http_*, challenge_tls_*) so any node can answer CA validation, and serializes orders with lock_certificate_* lockfiles (heartbeat + 5-minute stale-break, thundering-herd damping).

Changed

TLS

• Automatic STEK rotation improvements: automatic STEK rotation feature now checks if the key file has been changed on the disk, allowing for distributed STEK rotation without race conditions.

Fixed

Forwarded auth

• Forwarded auth bugfix: improved handling and checking the authentication status when using forwarded authentication, to improve security (thank you, @impietic).