86 Commits

Author SHA256 Message Date
7eb0e85b2a Accepting request 1144187 from security:dehydrated
- switch to sysuser for user/group setup

OBS-URL: https://build.opensuse.org/request/show/1144187
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=27
2024-02-05 21:01:48 +00:00
fd9db6e7b6 remove extra provides
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=89
2024-02-05 10:46:02 +00:00
b77051b2cf missing file
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=88
2024-02-05 10:41:12 +00:00
febed3f3aa - switch to sysuser for user/group setup
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=87
2024-02-05 10:39:53 +00:00
95f6ae4135 Accepting request 1143714 from security:dehydrated
- Add user/group provides for rpm 4.19 

- Add instance name to unit description
- Check instance specific configuration

OBS-URL: https://build.opensuse.org/request/show/1143714
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=26
2024-02-04 18:07:43 +00:00
9f17c9cfbc Accepting request 1138520 from home:crameleon:branches:security:dehydrated
- Add instance name to unit description for easier journal identification on systems with multiple instances
- Check instance specific configuration file instead of the irrelevant main one

OBS-URL: https://build.opensuse.org/request/show/1138520
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=85
2024-02-02 17:35:59 +00:00
030063dd04 - Add user/group provides for rpm 4.19
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=84
2024-02-02 17:35:37 +00:00
761f2eb28a Accepting request 1032541 from security:dehydrated
OBS-URL: https://build.opensuse.org/request/show/1032541
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=25
2022-11-01 12:42:48 +00:00
Daniel Molkentin
3ca383084e Accepting request 1032540 from home:dmolkentin:branches:security:dehydrated
- Update to 0.7.1
  * See https://github.com/dehydrated-io/dehydrated/releases/tag/v0.7.1 
  * Removes more-examples.patch

OBS-URL: https://build.opensuse.org/request/show/1032540
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=82
2022-10-31 15:55:50 +00:00
6e196f237e Accepting request 1001792 from security:dehydrated
OBS-URL: https://build.opensuse.org/request/show/1001792
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=24
2022-09-08 12:23:17 +00:00
Daniel Molkentin
3d3d95c8fc Accepting request 990778 from home:bmwiedemann:branches:security:dehydrated
Add postrun hook scripts for apache+nginx
for nicer integration

OBS-URL: https://build.opensuse.org/request/show/990778
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=80
2022-09-07 16:39:36 +00:00
013d1e1a19 Accepting request 987893 from security:dehydrated
- Target should not PartOf on itself.

- Copy the changes entry into README.postrun-hooks to make it
  easier for users to find the information how to restore the
  postrun-hooks after the split.

OBS-URL: https://build.opensuse.org/request/show/987893
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=23
2022-07-09 15:03:07 +00:00
8a3e70bae0 - Target should not PartOf on itself.
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=78
2022-07-08 11:40:34 +00:00
Daniel Molkentin
dddc2fe57d Accepting request 987889 from home:darix:branches:security:dehydrated
- Copy the changes entry into README.postrun-hooks to make it
  easier for users to find the information how to restore the
  postrun-hooks after the split.

OBS-URL: https://build.opensuse.org/request/show/987889
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=77
2022-07-08 11:28:23 +00:00
Richard Brown
ec13c6914b Accepting request 882190 from security:dehydrated
- Enable instantiated services (boo#1184165)

- Prepare instantiated service/timer support but not enable it:
  This seems to fail due to missing systemd support right now.
  So the only option at the moment is to copy the timer and unit
  file for a 2nd instance. Mark all files as part of dehydrated.target

- Rework support for /etc/dehydrated/postrun-hooks.d/:
  dehydrated.service nolonger starts them directly, the support was
  moved to a separate unit file. Please run:
  systemctl enable dehydrated-postrun-hooks.service
  to restore this functionality
- Run dehydrated as dehydrated user again

- Do not use the full path for config.d in the config files, which
  will simplify implementing multi instance support.

- Added more-examples.patch:
  Explain how we can have per certificate key algorithms

- Add directory where cleanup can archive unused certificates

OBS-URL: https://build.opensuse.org/request/show/882190
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=22
2021-03-30 19:23:47 +00:00
Daniel Molkentin
8580d35c28 Extend the package maintainer README
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=75
2021-03-30 15:03:35 +00:00
Daniel Molkentin
0df75a0d35 Accepting request 882188 from home:darix:playground
- Enable instantiated services (boo#1184165)

- Prepare instantiated service/timer support but not enable it:
  This seems to fail due to missing systemd support right now.
  So the only option at the moment is to copy the timer and unit
  file for a 2nd instance. Mark all files as part of dehydrated.target

- Rework support for /etc/dehydrated/postrun-hooks.d/:
  dehydrated.service nolonger starts them directly, the support was
  moved to a separate unit file. Please run:
  systemctl enable dehydrated-postrun-hooks.service
  to restore this functionality
- Run dehydrated as dehydrated user again

OBS-URL: https://build.opensuse.org/request/show/882188
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=74
2021-03-30 14:53:39 +00:00
Daniel Molkentin
eba8a3ec02 Accepting request 882014 from home:darix:playground
- Do not use the full path for config.d in the config files, which
  will simplify implementing multi instance support.

- Added more-examples.patch:
  Explain how we can have per certificate key algorithms

OBS-URL: https://build.opensuse.org/request/show/882014
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=73
2021-03-29 16:26:11 +00:00
Daniel Molkentin
79682be2e6 Accepting request 879078 from home:oreinert:branches:security:dehydrated
Add directory where cleanup can archive unused certificates

OBS-URL: https://build.opensuse.org/request/show/879078
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=72
2021-03-29 14:02:51 +00:00
Richard Brown
a92c9d71d5 Accepting request 876590 from security:dehydrated
- Clarified new default settings. KEY_ALGO=secp384r1. Please consult
  README.maintainer for details and how to return to RSA-based certificate
  issuance. (jsc#ECO-3435, jsc#SLE-15909)
- Added a note about ACMEv1 deprecation
- Added a note on new ACME providers and the new non-URL provider syntax
  See README.maintainer for details.

OBS-URL: https://build.opensuse.org/request/show/876590
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=21
2021-03-05 12:46:55 +00:00
Daniel Molkentin
ea76f0a43b Be more precise concerning EC compatiblity
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=70
2021-03-03 17:23:27 +00:00
Daniel Molkentin
36ec13c68f - Clarified new default settings. KEY_ALGO=secp384r1. Please consult
README.maintainer for details and how to return to RSA-based certificate
  issuance. (jsc#ECO-3435, jsc#SLE-15909)
- Added a note about ACMEv1 deprecation
- Added a note on new ACME providers and the new non-URL provider syntax
  See README.maintainer for details.

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=69
2021-03-03 17:15:11 +00:00
6fdd883b9b Accepting request 854627 from security:dehydrated
- Update to dehydrated 0.7.0 (JSC#SLE-15909)
  Added
    Support for external account bindings
    Special support for ZeroSSL
    Support presets for some CAs instead of requiring URLs
    Allow requesting preferred chain (--preferred-chain)
    Added method to show CAs current terms of service (--display-terms)
    Allow setting path to domains.txt using cli arguments (--domains-txt)
    Added new cli command --cleanupdelete which deletes old files instead of archiving them
  Fixed
    No more silent failures on broken hook-scripts
    Better error-handling with KEEP_GOING enabled
    Check actual order status instead of assuming it's valid
    Don't include keyAuthorization in challenge validation (RFC compliance)
  Changed
    Using EC secp384r1 as default certificate type
    Use JSON.sh to parse JSON
    Use account URL instead of account ID (RFC compliance)
    Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated
    Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options
    Cleanup now also removes dangling symlinks

OBS-URL: https://build.opensuse.org/request/show/854627
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=20
2020-12-10 17:19:56 +00:00
Daniel Molkentin
f1f3ecd8b2 - Update to dehydrated 0.7.0 (JSC#SLE-15909)
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=67
2020-12-10 16:32:35 +00:00
Daniel Molkentin
4f3db6af2e - Update to dehydrated 0.7.0
Added
    Support for external account bindings
    Special support for ZeroSSL
    Support presets for some CAs instead of requiring URLs
    Allow requesting preferred chain (--preferred-chain)
    Added method to show CAs current terms of service (--display-terms)
    Allow setting path to domains.txt using cli arguments (--domains-txt)
    Added new cli command --cleanupdelete which deletes old files instead of archiving them
  Fixed
    No more silent failures on broken hook-scripts
    Better error-handling with KEEP_GOING enabled
    Check actual order status instead of assuming it's valid
    Don't include keyAuthorization in challenge validation (RFC compliance)
  Changed
    Using EC secp384r1 as default certificate type
    Use JSON.sh to parse JSON
    Use account URL instead of account ID (RFC compliance)
    Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated
    Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options
    Cleanup now also removes dangling symlinks

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=66
2020-12-10 16:05:04 +00:00
cbe0ee0b3b Accepting request 849382 from security:dehydrated
- dehydrated-apache2: Check for mod_compat (bsc#1178927)

OBS-URL: https://build.opensuse.org/request/show/849382
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=19
2020-11-19 15:46:30 +00:00
Daniel Molkentin
f7b0377e6c - dehydrated-apache2: Check for mod_compat (bsc#1178927)
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=64
2020-11-19 11:29:46 +00:00
818456d49d Accepting request 835832 from security:dehydrated
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/835832
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=18
2020-09-21 15:47:58 +00:00
Daniel Molkentin
19ec22dfe4 - Reenable nginx subpackage for factory
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=62
2020-09-14 13:43:34 +00:00
bfe4cdc71f Accepting request 817721 from security:dehydrated
- Update maintainer file and package description, remove features
  that are better described in the (upstream maintained) man page.

- Remove potentially harmful scriptlet (bsc#1154167). Documented
  transition case in the maintainer README. Unlikely enough. The
  versions that have not transitioned yet would be broken for more
  than two years now.

OBS-URL: https://build.opensuse.org/request/show/817721
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=17
2020-06-29 19:18:30 +00:00
Daniel Molkentin
69fd35ea7c - Update maintainer file and package description, remove features
that are better described in the (maintained) man page.

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=60
2020-06-29 12:45:22 +00:00
Daniel Molkentin
5c38ad1995 - Remove potentially harmful scriptlet (bsc#1154167). Documented
transition case in the maintainer README. Unlikely enough. The
  versions that have not transitioned yet would be broken for more
  than two years now.

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=59
2020-06-29 12:40:34 +00:00
800102080a Accepting request 800773 from security:dehydrated
- Removed lighttpd 1.x integration package. If you still would like
  to use lighttpd with dehydrated, follow the instructions in the
  README.maintainers file.

OBS-URL: https://build.opensuse.org/request/show/800773
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=16
2020-05-07 12:54:21 +00:00
Daniel Molkentin
15592b4b8b - Removed lighttpd 1.x integration package. If you still would like
to use lighttpd with dehydrated, follow the instructions in the
  README.maintainers file.

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=57
2020-05-06 15:00:46 +00:00
bb0cecd84b Accepting request 796512 from security:dehydrated
- Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)

OBS-URL: https://build.opensuse.org/request/show/796512
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=15
2020-04-23 16:26:42 +00:00
Daniel Molkentin
2c27155eb2 - Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=55
2020-04-23 11:16:38 +00:00
2009b55a7e Accepting request 796008 from security:dehydrated
- Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#11756)

OBS-URL: https://build.opensuse.org/request/show/796008
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=14
2020-04-21 11:13:48 +00:00
Daniel Molkentin
925c32143e - Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#11756)

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=53
2020-04-20 10:44:17 +00:00
a57bbb97db Accepting request 769716 from security:dehydrated
OBS-URL: https://build.opensuse.org/request/show/769716
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=13
2020-02-04 18:54:01 +00:00
Daniel Molkentin
780deb65e3 Accepting request 769563 from home:dimstar:Factory
Shortcut through -mini

OBS-URL: https://build.opensuse.org/request/show/769563
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=51
2020-02-03 16:29:03 +00:00
Daniel Molkentin
71f46b965d Accepting request 740571 from home:RBrownSUSE:branches:security:dehydrated
Remove obsolete Groups tag (fate#326485)

OBS-URL: https://build.opensuse.org/request/show/740571
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=50
2019-10-17 17:28:18 +00:00
793b6714e8 Accepting request 724273 from security:dehydrated
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/724273
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=12
2019-08-19 19:39:49 +00:00
Daniel Molkentin
bc3181daad install rcdehydrated only for suse
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=48
2019-08-10 18:01:43 +00:00
Daniel Molkentin
6bfbbded78 Negate again, < comparisions do not work
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=47
2019-08-10 17:58:33 +00:00
Daniel Molkentin
fd1ffe4add Fix typo
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=46
2019-08-10 17:53:28 +00:00
Daniel Molkentin
59eba30028 TW requires suse_version
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=45
2019-08-10 17:50:58 +00:00
Daniel Molkentin
b18bc77e51 Fix version conditions
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=44
2019-08-10 17:43:44 +00:00
Daniel Molkentin
66acd3cb39 - Behavioral change: Use cron only for older RHEL/CentOS versions
(along with openSUSE < 12.3). Everything else now uses systemd.
  Please adopt accordingly! Refer to README.md for

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=43
2019-08-10 17:30:39 +00:00
44c2fb512c Accepting request 712112 from security:dehydrated
- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update (forwarded request 712111 from dmolkentin)

OBS-URL: https://build.opensuse.org/request/show/712112
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=11
2019-06-26 14:05:10 +00:00
Daniel Molkentin
1632bea1fb Accepting request 712111 from home:dmolkentin:branches:security:dehydrated
- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update

OBS-URL: https://build.opensuse.org/request/show/712111
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=41
2019-06-26 11:06:19 +00:00