summaryrefslogtreecommitdiff
path: root/usr.sbin/acme-client
AgeCommit message (Expand)Author
2023-05-16since apparently, the "example" conf is not free-form (adding commentsMarc Espie
2022-12-28spelling fixes; from paul tagliamonteJason McIntyre
2022-12-19acme-client: fix copy-paste error in error messageTheo Buehler
2022-12-18acme-client: rename cc to sign_len in op_sign()Theo Buehler
2022-12-18acme-client: fix openssl includes in acctproc.cTheo Buehler
2022-12-18acme-client: check EC signature lengthTheo Buehler
2022-12-18acme-client: simplify elliptic curve signaturesTheo Buehler
2022-12-18acme-client: switch op_sign() to EVP_DigestSign()Theo Buehler
2022-12-18acme-client: simplify op_thumbprint()Theo Buehler
2022-12-18acme-client: inline a confusing and useless defineTheo Buehler
2022-12-18acme-client: encode unexpected SANs before printingTheo Buehler
2022-12-17acme-client: fix SAN-handling insanityTheo Buehler
2022-12-15acme-client: use timegm() instead of mktime()Theo Buehler
2022-12-15acme-client: use ASN1_TIME_to_tm()Theo Buehler
2022-12-15The argument to ctype functions must be EOF or representable as anFlorian Obser
2022-12-14The argument to ctype functions must be EOF or representable as anFlorian Obser
2022-12-14Continue loop if no match found; avoids an OOB write. ok florian@ tb@Otto Moerbeek
2022-12-14Plug leak of ECDSA_SIGTheo Buehler
2022-11-09nreq could leak a http get request in case a redirect withoutMoritz Buhl
2022-10-09allow newlines inside the `alternative names' block in acme-client.confOmar Polo
2022-08-28Make a few error messages match the actually failing function.Theo Buehler
2022-08-28Set the X.509 request version number.Joel Sing
2022-05-05Check that the challenge token which is turned into a filename isFlorian Obser
2022-02-22Plug leak in ec_key_create()Theo Buehler
2022-02-22whitespace/KNFTheo Buehler
2022-02-22acme-client: only warn on PEM_write_ECPrivateKey() failure insteadTheo Buehler
2022-01-21the wrapped cron line is going to lose peopleTheo de Raadt
2022-01-14Fix acme-client build with opaque RSATheo Buehler
2021-12-13Let dnsproc pass multiple addresses to netprocJeremie Courreges-Anglas
2021-11-22acme-client: use BIO_number_written(bio) instead of bio->num_write.Theo Buehler
2021-11-18acme-client: use EVP_PKEY_base_id()Theo Buehler
2021-10-15Don't declare variables as "unsigned char *" that are passed toChristian Weisgerber
2021-10-13acme-client: stop reaching into X509Theo Buehler
2021-09-17Fix subjectAlternativeName (SAN) generation for CSRs. CA/B Forum baselineStuart Henderson
2021-09-14Add missing void to definition of http_init().Theo Buehler
2021-08-24fix outdated comments, from Emil Engler, thanks.Sebastian Benoit
2021-07-14Remove unneeded calls to tls_init(3)kn
2021-07-12Change the error reporting pattern throughout the tree when unveilBob Beck
2021-05-13acme-client: use EC_POINT_{get,set}_affine_cooordinates()Theo Buehler
2021-02-12Xr to ssl(8) which has clues about EC key generation that are still usefulStuart Henderson
2021-01-11document how to specify multiple alternative names;Jason McIntyre
2021-01-03Create .1 backup files when acme-client is going to overwrite aFlorian Obser
2021-01-02If acme-client detects an added or removed SAN in the config fileStuart Henderson
2020-12-24First fulfil all challenges then tell the CA that it should check.Florian Obser
2020-12-19remove extra sTheo Buehler
2020-12-18Add details to -F flagsolene
2020-11-18Do not check the list of SAN's in the cert when -F is specified to force renewalBob Beck
2020-11-06mention that acme-client generates a 4096-bit or secp384r1 key if the keyStuart Henderson
2020-11-04Back out last commit.denis
2020-11-02acme response challenge location to issue better error codedenis