Commit Graph

952 Commits

Author SHA1 Message Date
Clark Boylan b376dfa1e6 Fix Le_Keylength checks during renewals
When performing renewals acme.sh checks key length values to determine
if a new key should be created with createDomainKey(). However, older
acme.sh stored key length as an empty value if the default of 2048 was
desired. Now it is explicit and the explict check of 2048 against "" is
causing createDomainKey() to always be called with fails without
--force.

Fix this by converting the keylength value to 2048 if an empty string is
returned from the config file. acme.sh will then write out 2048 updating
old keys and configs to the explicit version.

Issue: 4077
2022-05-10 10:42:19 -07:00
neil e1d7a6b9ac fix renew server 2022-05-10 22:22:13 +08:00
neil 38778f8adc fix renew server 2022-05-10 22:22:12 +08:00
neil 8b7a86bd17 support "server" for renew and renewall 2022-05-10 22:22:12 +08:00
neilpang 619bae745b start 3.0.5 2022-05-10 22:22:12 +08:00
neilpang 8d783e8e1f fix https://github.com/acmesh-official/acme.sh/issues/4069 2022-05-06 18:04:29 +08:00
neilpang f03098551e start 3.0.4 2022-05-04 18:44:37 +08:00
neil 7f9074adbf fix format 2022-05-03 21:35:26 +08:00
neil 64847afc3f save the default key length 2022-05-03 21:19:29 +08:00
neil ef8a199a5a
Merge pull request #4057 from mrakopes/master
issue 3007 - fix base64 decoding logic for single- and multi-line encoded string
2022-04-29 09:25:39 +08:00
mrakopes 9b6f775276 fix base64 decoding logic for single- ane multi-line encoded string 2022-04-28 13:25:22 +02:00
neilpang 69040dd668 fix format 2022-04-28 18:09:26 +08:00
neilpang 14b5914233 fix renew bug 2022-04-28 18:06:07 +08:00
neil 3075b4515a
Merge pull request #4045 from axelhahn/4044-use-challenge-alias-false
handle challenge-alias "false"
2022-04-21 16:35:29 +08:00
neil 39bc417706
Update acme.sh 2022-04-21 07:02:53 +08:00
Hahn Axel (hahn) 019a7bd66b handle challenge-alias "false" 2022-04-20 16:03:36 +02:00
neil 4d89ce5d50 read csr with empty subject
https://github.com/acmesh-official/acme.sh/issues/4024
2022-04-20 09:14:53 +08:00
Bruce Lam 3e8d9a1987 added: ipv6 identifier support 2022-04-20 08:23:22 +08:00
neilpang 2c28d6b10c fix for renew server 2022-04-13 20:20:28 +08:00
neilpang 6be2bb2289 Update acme.sh
revert only when there is no `--server` specified.
2022-04-08 22:28:21 +08:00
neilpang 439defca42 switch from staging api to production api
https://github.com/acmesh-official/acme.sh/issues/2401
2022-04-08 22:15:26 +08:00
neilpang 6a90856f0e don't renew cert if valid-to is set to an absolute date
don't renew cert if valid-to is set to an absolute date
2022-04-05 17:05:33 +08:00
neilpang 225adcc836 fix renewal for validto
fix renewal for validto
2022-04-03 21:58:41 +08:00
neilpang 0f607413d0 fix for solaris time format 2022-04-03 20:05:30 +08:00
neilpang b49999721c Update acme.sh 2022-04-01 21:58:29 +08:00
neilpang de4c4eedd8 Support NotBefore and NotAfter
Add `--valid-from` and `--valid-to`:
https://github.com/acmesh-official/acme.sh/wiki/Validity
2022-04-01 21:22:42 +08:00
neilpang d53262fab6 fix update account
fix https://github.com/acmesh-official/acme.sh/issues/4009
2022-03-31 09:35:32 +08:00
neilpang 532e44bcea normalize domains
fix https://github.com/acmesh-official/acme.sh/issues/4005
2022-03-30 23:37:38 +08:00
neilpang fb5091a388 support Google ACME server
see: https://github.com/acmesh-official/acme.sh/wiki/Server
2022-03-30 22:47:12 +08:00
neilpang 0d05f9ba80 Update acme.sh
fix https://github.com/acmesh-official/acme.sh/issues/4001
2022-03-27 12:08:24 +08:00
neilpang af193291fa Update acme.sh
fix https://github.com/acmesh-official/acme.sh/issues/3127#issuecomment-1030742187
2022-02-06 16:17:04 +08:00
neilpang 9ec4b59afb start v3.0.3
start v3.0.3
2022-02-05 21:28:07 +08:00
neilpang 36752cb6a8 Update acme.sh
fix zerossl endpoint
2022-02-04 13:49:58 +08:00
neil 90b65c6618 fix https://github.com/acmesh-official/acme.sh/issues/3898
https://github.com/acmesh-official/acme.sh/issues/3898
2022-01-27 18:00:44 +08:00
neil 188274277a fix https://github.com/acmesh-official/acme.sh/issues/3883 2022-01-11 17:16:51 +08:00
neil e07795e8f0 fix https://github.com/acmesh-official/acme.sh/issues/3883 2022-01-11 16:56:19 +08:00
neil 856e77053e Merge branch '3870' into dev 2022-01-10 16:29:44 +08:00
neil e67d26caeb fix https://github.com/acmesh-official/acme.sh/issues/3845#issuecomment-999367478 2022-01-08 19:58:49 +08:00
neil 86c3fa0df0 remove retry for get and post 2022-01-08 19:51:04 +08:00
neil d43b587d17 fix https://github.com/acmesh-official/acme.sh/issues/3870 2022-01-07 22:06:18 +08:00
Joel Pearson 0727f7054b Allow optional "NEW" in CSR header and footer
When generating a CSR in Windows it seems to create a CSR header that looks like "-----BEGIN NEW CERTIFICATE REQUEST-----", but the addition of "NEW" breaks the parsing of the CSR. Making "NEW " optional fixes the problem.

Apparently certbot is tolerant of both forms, see: https://community.letsencrypt.org/t/error-parsing-certificate-request-resolved/40039/6 for more information.
2022-01-06 17:41:42 +08:00
neilpang c39e6c4423 add `--info` command to show the global configs or domain configs.
https://github.com/acmesh-official/acme.sh/issues/2444
2022-01-06 17:41:42 +08:00
neilpang 1566656af3 fix https://github.com/acmesh-official/acme.sh/issues/3869 2022-01-06 17:41:42 +08:00
neilpang 737eba57bd send notifications for renew command
https://github.com/acmesh-official/acme.sh/issues/3869#issuecomment-1003546762
2022-01-06 17:41:41 +08:00
neilpang 4f386663e7 fix for OpenBSD7
https://github.com/acmesh-official/acme.sh/issues/3833
2022-01-06 17:41:40 +08:00
neilpang 18e4d270d9 fix https://github.com/acmesh-official/acme.sh/issues/3806 2021-11-13 15:23:32 +08:00
neil f63409eed9 fix https://github.com/acmesh-official/acme.sh/issues/1559 2021-11-06 12:27:50 +08:00
neil b8bfb5a56c fix format 2021-11-06 11:28:11 +08:00
neil 3f58823430 fix ip cert 2021-11-06 11:26:06 +08:00
neil e488220bfc fix for solaris 2021-11-06 11:16:41 +08:00