-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-45452b76ae 2023-06-09 01:59:27.110035 -------------------------------------------------------------------------------- Name : dehydrated Product : Fedora 38 Version : 0.7.1 Release : 1.fc38 URL : https://github.com/dehydrated-io/dehydrated Summary : Client for signing certificates with an ACME server Description : This is a client for signing certificates with an ACME-server (currently only provided by Let's Encrypt) implemented as a relatively simple bash- script. Dehydrated supports both ACME v1 and the new ACME v2 including support for wildcard certificates! Current features: - Signing of a list of domains (including wildcard domains!) - Signing of a custom CSR (either standalone or completely automated using hooks!) - Renewal if a certificate is about to expire or defined set of domains changed - Certificate revocation -------------------------------------------------------------------------------- Update Information: # dehydrated v0.7.1 (2022-10-31) ## Changed * `--force` no longer forces domain name revalidation by default, a new argument `--force-validation` has been added for that * Added support for EC secp521r1 algorithm (works with e.g. zerossl) * `EC PARAMETERS` are no longer written to privkey.pem (didn't seem necessary and was causing issues with various software) ## Fixed * Requests resulting in `badNonce` errors are now automatically retried (fixes operation with LE staging servers) * Deprecated `egrep` usage has been removed ## Added * Implemented EC for account keys * Domain list now also read from `domains.txt.d` subdirectory (behaviour might change, see docs) * Implemented RFC 8738 (validating/signing certificates for IP addresses instead of domain names) support (this will not work with most public CAs, if any!) -------------------------------------------------------------------------------- ChangeLog: * Wed May 31 2023 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> - 0.7.1-1 - Resolved: rhbz#2139056 dehydrated-0.7.1 is available - Resolved: rhbz#2035549 genkey ecparam - ECDSA key, P-384 (secp384r1) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2035549 - Genkey ecparam - ECDSA key, P-384 (secp384r1). https://bugzilla.redhat.com/show_bug.cgi?id=2035549 [ 2 ] Bug #2139056 - dehydrated-0.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2139056 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-45452b76ae' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- package-announce@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-announce-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue