New

• Added support for a new type of plugin to send notifications to custom channels. For years win-acme has supported sending email notifications, but many organisations prefer different channels like Slack, Discourse or even Teams. If you're familiar with C#, you can implement the INotificationTarget interface with just a handful of functions to send notifications however you want. If you're willing to show and share your work, contributions are obviously welcome!
• Example script for SQL Server contributed by @zivillian (#2458)

Enhancements

• Force black background for TUI rendering, to accomodate people with custom console themes with light backgrounds (#2451, requested by @prensing)
• Log all HTTP requests that do not return a success code as warnings to make potential API/connection problems easier to spot (#2505, based on feedback by @djoris)
• Software name and version now displayed in console title.
• Add --acl-read parameter for the CertificateStore plugin, granting local principals read access to the private key, complementing the pre-existing --acl-fullcontrol parameter.
• Add a new setting Validation.ParallelBatchSize that can be used to limit the number of simultaneous validations happening. In extreme cases, unlimited parallelism can lead to problems like overrunning the maximum size of a DNS response. Default for existing installations is 100 and for new installations 20.
• Use DER instead of BER encoding for internal certificate processing in hopes of avoiding "Bad Data" errors reported by some users (#2493)
• Add support for certificates without common name which have been supported by Let's Encrypt since November. Also added addional validation to prevent attempts to order certificates with common names longer than 64 characters.
• @christaylorcodes added a retry mechanism to the ImportRSDFull.ps1 example, thanks for helping!
• Update various third-party dependencies.

Bugfixes

• Crash when sorting on due date in the renewal manager (#2449, thanks @nrcionline!)
• Crash when the settings.json file cannot be (fully) parsed.
• Superfluous prevalidation checks could be done when using multithreaded validation (#2485, discovered by @JensSpanier)
• Renewal information from services outside Let's Encrypt could not be retrieved due to missing / in url (#2498, reported by @grindsa)
• TransIP DNS validation plugin would not handle errors during initial authentication properly (#2505, found by @djoris)

Sponsors

This release was funded by

One gold sponsor:

• eGov Strategies

Two silver sponsors:

• Insurance Technology Services
• Enzure

And four bronze sponsors:

• e-shop LTD
• The Proof Group @proofgroup
• imagenia.fr
• Certify the web

Support

If you want professional support for win-acme, your company up here in the release notes, or just want to buy me (@WouterTinus) a beer for maintaining this tool, please sponsor using GitHub Sponsors, Patreon or PayPal.