Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-08-08 | In netproc process, unveil to only expose the CA file. | Theo de Raadt | |
ok florian | |||
2018-08-03 | return is not a function and if (x) -> if (x != NULL) | Sebastian Benoit | |
From Ross L Richardson, thanks ok millert@ | |||
2018-08-03 | fix error messages from earlier syntax change | Sebastian Benoit | |
From Ross L Richardson ok millert@ | |||
2018-08-03 | correct an error message, from Ross L Richardson | Sebastian Benoit | |
ok millert@ | |||
2018-08-03 | document the default in the abscence of a certificate authority. | Sebastian Benoit | |
From Ross L Richardson | |||
2018-08-03 | Document that domain certificate is optional. | Sebastian Benoit | |
From Ross L Richardson | |||
2018-08-02 | According to code (and testing), each is optional but at least | Sebastian Benoit | |
one must be present. From Ross L Richardson, thanks ok sthen@ | |||
2018-08-02 | It's an "X.509 certificate" rather than a "TLS certificate". | Sebastian Benoit | |
As pointed out by sthen@, TLS isn't the only possible use. From Ross L Richardson ok shten@ | |||
2018-08-02 | its a X.509 certificate, consistency with acme-client.conf.5 | Sebastian Benoit | |
From Ross L Richardson ok sthen@ | |||
2018-07-30 | cleanup initialization of chngdir. inspired by Ross L Richardson. | Sebastian Benoit | |
ok tb@ | |||
2018-07-30 | replace exit() with return(), from Ross L Richardson. | Sebastian Benoit | |
ok tb@ (previous 3 commits to main.c as well) | |||
2018-07-30 | replace warn() + exit() with err() | Sebastian Benoit | |
From Ross L Richardson. | |||
2018-07-30 | line too long and whitespace. From Ross L Richardson. | Sebastian Benoit | |
2018-07-30 | reorder option parsing to be alphabetical/same order as usage and | Sebastian Benoit | |
manpage. From Ross L Richardson. | |||
2018-07-29 | Remove NULL checks before X509_{REQ,NAME}_free() and zap an unnecessary | Theo Buehler | |
pair of parens. From Ross L. Richardson | |||
2018-07-29 | replace hand-rolled tmp files with mkstemp() | Sebastian Benoit | |
ok florian@ back in april, reminded by theo. | |||
2018-07-29 | remove extra space in output; from Ross L Richardson | Theo de Raadt | |
2018-07-28 | Remove NULL checks before (most) libcrypto *_free() functions. | Theo Buehler | |
From Ross L. Richardson, thanks! ok deraadt | |||
2018-07-11 | Do for most running out of memory err() what was done for most running | Kenneth R Westerback | |
out of memory log_warn(). i.e. ("%s", __func__) instead of manual function names and redundant verbiage about which wrapper detected the out of memory condition. ok henning@ | |||
2018-07-09 | No need to mention which memory allocation entry point failed (malloc, | Kenneth R Westerback | |
calloc or strdup), we just need to log that we ran out of memory in a particular function. Recommended by florian@ and deraadt@ ok benno@ henning@ tb@ | |||
2018-07-08 | Be consistent in warn() and log_warn() usage when | Kenneth R Westerback | |
running out of memory. Next step, be correct *and* consistent. ok dennis@ tb@ benno@ schwarze@ | |||
2018-07-08 | clarify account key (pair) vs certificate (domain) key pair, and | Sebastian Benoit | |
that the domain block really describes a certificate to manage. from Ross L Richardson <openbsd at rlr dot id dot au>, thanks with feedback and ok jmc and sthen | |||
2018-06-17 | Fix an off-by-one line count when using include statements. | denis | |
Thanks to otto@ for the initial diff. OK benno@ | |||
2018-06-13 | Rename httpd.conf "root strip" option to "request strip". | Reyk Floeter | |
"root strip" was semantically incorrect and did cause some confusion as it never stripped the root but the client's request path. Discussed with many. Heads up: this is a grammar change that also affects acme-client(1) configurations (see current.html). OK claudio@ | |||
2018-04-26 | Plug leak in error case of the common 'varset' implementations. | Kenneth R Westerback | |
ok benno@ | |||
2018-04-08 | We warned long enough, also sysmerge(8) should have handled the | Florian Obser | |
removal of the agreement url by now. OK benno | |||
2018-03-15 | writebufg() does two write(2) calls, both can return EPIPE, so handle it in | Otto Moerbeek | |
both cases. Avoids race in the exit path. ok sthen@ florian@ | |||
2018-03-14 | letsencrypt responded with a 301 redirect when requesting the chain | Florian Obser | |
certificate for some time. While they stopped doing so it seems best to follow redirects anyway. More status codes pointed out by & OK sthen OK benno | |||
2018-02-06 | move malloc check up so that it actually works. | Florian Obser | |
OK benno | |||
2018-02-06 | kill dead code | Florian Obser | |
2017-11-27 | lenght->length, mostly in comments | Stuart Henderson | |
2017-11-27 | Deprecate agreement url config option and get the information from the | Florian Obser | |
directory call. This way we don't need to update the acme-client.conf file every time it changes. Still parse the option, ignore and warn about it for a release. Sysmerge should be able to handle the removal. "nice" deraadt@ OK benno | |||
2017-10-19 | fix a use after free and a memory leak in error paths | Jonathan Gray | |
ok deraadt@ florian@ | |||
2017-10-17 | add missing HISTORY; based on CVS logs and release announcements | Ingo Schwarze | |
2017-07-08 | fix typo in comment | Theo Buehler | |
from Hiltjo Posthuma | |||
2017-07-03 | no need to generate y.tab.h if nothing uses it, set YFLAGS to nothing | Marc Espie | |
instead of CLEANFILES += y.tab.h okay millert@ | |||
2017-05-27 | Use basename(3) instead of hand rolling it. | Florian Obser | |
Gets rid of double slashes, pointed out by Raf Czlonka (rczlonka at gmail), thanks! OK benno | |||
2017-03-29 | account key needs to be in quotes. | T.J. Townsend | |
ok benno deraadt | |||
2017-03-26 | recallocarray() for data buffer from the net. | Theo de Raadt | |
ok beck | |||
2017-03-23 | It is perfectly valid to have a cert / key not owned by root; remove | Florian Obser | |
useless check. OK benno | |||
2017-03-23 | pull root check up, the parser will bomb out anyway | Florian Obser | |
OK benno | |||
2017-03-22 | Improve manpage and config file to show the more common use case. | Sebastian Benoit | |
from Nick Holland (nick AT holland-consulting DOT net) ok jmc@ florian@ | |||
2017-03-20 | Simplify cron(8) job example. | Antoine Jacoutot | |
input from jmc@ ok tb@ deraadt@ | |||
2017-02-03 | Don't use <sys/param.h> from userland without cause. Sort <sys/*> | Philip Guenther | |
before other includes per style(9) while we're here. ok florian@ bcook@ jsing@ beck@ | |||
2017-01-28 | - -N got changed to -D | Jason McIntyre | |
- there is no Challenges section reported by michael reed | |||
2017-01-25 | remove __BEGIN_DECLS and __END_DECLS from http.h | Kinichiro Inoguchi | |
sync with ocspcheck and acme-client ok benno@ | |||
2017-01-24 | Make returns consistent and remove parentheses per style(9). | Joel Sing | |
Transformed with coccinelle. Requested by and ok tb@ | |||
2017-01-24 | nuke extra brackets. discussed with jsing | Theo Buehler | |
2017-01-24 | Complete jsing's coccinelle cleanup... by hand | Theo de Raadt | |
ok jsing | |||
2017-01-24 | errx() does not need extra newline | Theo de Raadt | |