New features

• Add Linode (Akamai) plugin for DNS validation, contributed by @RedFox4
• Implemented plugin system for the secret vault. This should be considered an experimental feature, but it allows developers to create backends for secret management that can run side-by-side with the built in JSON-file, making it possible to integrate third party solutions like Hashicorp or others into win-acme. All it takes is to implement the ISecretService interface and include the .dll in the program directory.

Enhancements

• Make --validationmode tls-alpn-01 work without also having to specify --validation
• Set TTL=60 for Cloudflare and GoDaddy DNS validation for faster updates (#2312)
• DNS prevalation finetuning: better logging, check all nameservers on each pass, randomize order
• Support TLS-APLN-01 validation on IPv6, requested by @no1d (#2307)

Bugfixes

Note: some of these fixes were already included in later builds of version 2.2.0.

• Fix validation error messages returned by the server not showing properly
• Fix broken Azure plugin due to forwarding synchronous http requests to asychrounous handler, discoverd by @ditchcode (#2311)
• Fix DNS and TLS-ALPN-01 validation plugins not selectable from the command line
• Fix TLS-ALPN-01 validation for multiple host names in one pass, discovered by @no1d (#2307)
• Fix broken filesystem/ftp/webdev validation, reported by @SteffenAL (#2305)
• Fix broken external plugins, first reported by @aadnehovda (#2304)
• Fix DNS pre-validation disabled by default for new installations (#2312)
• Fix DNS pre-validation using cached results, causing it to always fail when long TTL is used (#2312)
• DnsMadeEasy plugin is now actually built by CI/CD and included in the release assets
• Add missing --friendlyname parameter to command line description
• Never delete cache files before the renewal period as defined by ScheduledTask.RenewalDays has passed, regardless of user setting for Cache.DeleteStaleFilesDays, based on feedback by @AliDodd (#2319)

Sponsors

This release was funded by

One gold sponsor:

• eGov Strategies

Two silver sponsors:

• Insurance Technology Services
• Enzure

And four bronze sponsors:

• e-shop LTD
• The Proof Group @proofgroup
• imagenia.fr
• Certify the web

Support

If you want professional support for win-acme, your company up here in the release notes, or just want to buy me (@WouterTinus) a beer for maintaining this tool, please sponsor using GitHub Sponsors, Patreon or PayPal.