summaryrefslogtreecommitdiff
path: root/usr.sbin/acme-client
AgeCommit message (Expand)Author
2017-01-21it is ok to only specify a full chain certificateFlorian Obser
2017-01-21dont print config if its brokenSebastian Benoit
2017-01-21it's chain certificate not certificate chainFlorian Obser
2017-01-21Enforce minimum config in the parser.Florian Obser
2017-01-21Improve DocumentationSebastian Benoit
2017-01-21add option 'domain full chain certificate "path"',Sebastian Benoit
2017-01-21document default challengedir "/var/www/acme"Sebastian Benoit
2017-01-21see also acme-client.conf(5) suggested by millert and Raf CzlonkaSebastian Benoit
2017-01-21Implement domain chain certificate.Florian Obser
2017-01-21Split certificate file from config file into certdir and certfile.Florian Obser
2017-01-21remove unused vars; OK bennoFlorian Obser
2017-01-21Remove backup option. This is not acme-client's business; also it getsFlorian Obser
2017-01-21We are only dealing with one domain on the command lineFlorian Obser
2017-01-21typo; ok bennoFlorian Obser
2017-01-21kill remote with fire, we need to handle this differentlyFlorian Obser
2017-01-21typo; ok bennoFlorian Obser
2017-01-21acme-client use configuration file [5 of 5]Sebastian Benoit
2017-01-21acme-client use configuration file [4 of 5]Sebastian Benoit
2017-01-21acme-client use configuration file [3 of 5]Sebastian Benoit
2017-01-21acme-client use configuration file [2 of 5]Sebastian Benoit
2017-01-21acme-client use configuration file [1 of 5]Sebastian Benoit
2017-01-05Replace hand-rolled for(;;) emptying of 'symhead' TAILQ with moreKenneth R Westerback
2017-01-05Replace symset()'s hand-rolled for(;;) traversal of 'symhead' TAILQKenneth R Westerback
2016-11-02Use secure defaults for TLS - instead of accepting TLSv1.0 and any cipherJoel Sing
2016-10-04Avoid a potential MITM - calling tls_config_insecure_noverify() is a badJoel Sing
2016-10-04s/letsencrypt/ACME/Joel Sing
2016-10-04tls_close() can return TLS_WANT_POLLIN/TLS_WANT_POLLOUT - handle thisJoel Sing
2016-09-24The file descriptor needs to be closed in both the TLS and non-TLS case,Joel Sing
2016-09-24Both tls_free() and tls_config_free() are safe to call with NULL.Joel Sing
2016-09-24Remove more backwards compat for unsupported OpenBSD releases.Joel Sing
2016-09-20reoorder includes,Sebastian Benoit
2016-09-18tweak previous;Jason McIntyre
2016-09-18add a config file parser to acme-client (unused at the moment, so thatSebastian Benoit
2016-09-15more fat trimming;Jason McIntyre
2016-09-14move default file and directory locations to a new FILES sectionT.J. Townsend
2016-09-13convert some ifs to switches. ok millert tbTed Unangst
2016-09-13A small amount more KNF to make this easier on our eyes. Not going furtherTheo de Raadt
2016-09-13hoist local variable initialization directly into the definitions,Theo de Raadt
2016-09-13hoist local variable initialization directly into the definitions,Theo de Raadt
2016-09-13Inconsistant use of case (value): idiom drives me nuts, I have no ideaTheo de Raadt
2016-09-13RAND_status() and RAND_seed() are not needed, this is 2016.Theo de Raadt
2016-09-13use reallocarray()Theo de Raadt
2016-09-13chroot is not the reason this is run as rootTheo de Raadt
2016-09-06some indent; from michael reedJason McIntyre
2016-09-05We do not compile things -g by defaultTheo de Raadt
2016-09-05this file cannot be kept accurateTheo de Raadt
2016-09-01Use b64_ntop instead of adding yet another base implementation of base64Theo Buehler
2016-09-01update usage(); pointed out by jmc@Florian Obser
2016-09-01tidy up the list;Jason McIntyre
2016-09-01Implement table driven selection to which ACME authorities we canFlorian Obser