SHA256
1
0
forked from pool/dehydrated
Commit Graph

86 Commits

Author SHA256 Message Date
Ana Guerrero
858e09fd70 Accepting request 1144187 from security:dehydrated
- switch to sysuser for user/group setup

OBS-URL: https://build.opensuse.org/request/show/1144187
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=27
2024-02-05 21:01:48 +00:00
2b2c603fd7 remove extra provides
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=89
2024-02-05 10:46:02 +00:00
ae87ae2016 missing file
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=88
2024-02-05 10:41:12 +00:00
c9e98b2046 - switch to sysuser for user/group setup
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=87
2024-02-05 10:39:53 +00:00
Ana Guerrero
7abd6915bd Accepting request 1143714 from security:dehydrated
- Add user/group provides for rpm 4.19 

- Add instance name to unit description
- Check instance specific configuration

OBS-URL: https://build.opensuse.org/request/show/1143714
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=26
2024-02-04 18:07:43 +00:00
78251e0f3a Accepting request 1138520 from home:crameleon:branches:security:dehydrated
- Add instance name to unit description for easier journal identification on systems with multiple instances
- Check instance specific configuration file instead of the irrelevant main one

OBS-URL: https://build.opensuse.org/request/show/1138520
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=85
2024-02-02 17:35:59 +00:00
7e14d21687 - Add user/group provides for rpm 4.19
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=84
2024-02-02 17:35:37 +00:00
Dominique Leuenberger
4b8c224531 Accepting request 1032541 from security:dehydrated
OBS-URL: https://build.opensuse.org/request/show/1032541
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=25
2022-11-01 12:42:48 +00:00
Daniel Molkentin
f607e59f1d Accepting request 1032540 from home:dmolkentin:branches:security:dehydrated
- Update to 0.7.1
  * See https://github.com/dehydrated-io/dehydrated/releases/tag/v0.7.1 
  * Removes more-examples.patch

OBS-URL: https://build.opensuse.org/request/show/1032540
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=82
2022-10-31 15:55:50 +00:00
Dominique Leuenberger
e64d10dc1c Accepting request 1001792 from security:dehydrated
OBS-URL: https://build.opensuse.org/request/show/1001792
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=24
2022-09-08 12:23:17 +00:00
Daniel Molkentin
68bf06642e Accepting request 990778 from home:bmwiedemann:branches:security:dehydrated
Add postrun hook scripts for apache+nginx
for nicer integration

OBS-URL: https://build.opensuse.org/request/show/990778
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=80
2022-09-07 16:39:36 +00:00
Dominique Leuenberger
6d97e756ac Accepting request 987893 from security:dehydrated
- Target should not PartOf on itself.

- Copy the changes entry into README.postrun-hooks to make it
  easier for users to find the information how to restore the
  postrun-hooks after the split.

OBS-URL: https://build.opensuse.org/request/show/987893
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=23
2022-07-09 15:03:07 +00:00
7743484cd7 - Target should not PartOf on itself.
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=78
2022-07-08 11:40:34 +00:00
Daniel Molkentin
8f53c538c5 Accepting request 987889 from home:darix:branches:security:dehydrated
- Copy the changes entry into README.postrun-hooks to make it
  easier for users to find the information how to restore the
  postrun-hooks after the split.

OBS-URL: https://build.opensuse.org/request/show/987889
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=77
2022-07-08 11:28:23 +00:00
Richard Brown
e23c889637 Accepting request 882190 from security:dehydrated
- Enable instantiated services (boo#1184165)

- Prepare instantiated service/timer support but not enable it:
  This seems to fail due to missing systemd support right now.
  So the only option at the moment is to copy the timer and unit
  file for a 2nd instance. Mark all files as part of dehydrated.target

- Rework support for /etc/dehydrated/postrun-hooks.d/:
  dehydrated.service nolonger starts them directly, the support was
  moved to a separate unit file. Please run:
  systemctl enable dehydrated-postrun-hooks.service
  to restore this functionality
- Run dehydrated as dehydrated user again

- Do not use the full path for config.d in the config files, which
  will simplify implementing multi instance support.

- Added more-examples.patch:
  Explain how we can have per certificate key algorithms

- Add directory where cleanup can archive unused certificates

OBS-URL: https://build.opensuse.org/request/show/882190
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=22
2021-03-30 19:23:47 +00:00
Daniel Molkentin
af93c182f3 Extend the package maintainer README
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=75
2021-03-30 15:03:35 +00:00
Daniel Molkentin
abdad1b762 Accepting request 882188 from home:darix:playground
- Enable instantiated services (boo#1184165)

- Prepare instantiated service/timer support but not enable it:
  This seems to fail due to missing systemd support right now.
  So the only option at the moment is to copy the timer and unit
  file for a 2nd instance. Mark all files as part of dehydrated.target

- Rework support for /etc/dehydrated/postrun-hooks.d/:
  dehydrated.service nolonger starts them directly, the support was
  moved to a separate unit file. Please run:
  systemctl enable dehydrated-postrun-hooks.service
  to restore this functionality
- Run dehydrated as dehydrated user again

OBS-URL: https://build.opensuse.org/request/show/882188
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=74
2021-03-30 14:53:39 +00:00
Daniel Molkentin
5b368e02a5 Accepting request 882014 from home:darix:playground
- Do not use the full path for config.d in the config files, which
  will simplify implementing multi instance support.

- Added more-examples.patch:
  Explain how we can have per certificate key algorithms

OBS-URL: https://build.opensuse.org/request/show/882014
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=73
2021-03-29 16:26:11 +00:00
Daniel Molkentin
1d0402a9b6 Accepting request 879078 from home:oreinert:branches:security:dehydrated
Add directory where cleanup can archive unused certificates

OBS-URL: https://build.opensuse.org/request/show/879078
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=72
2021-03-29 14:02:51 +00:00
Richard Brown
e5b502b382 Accepting request 876590 from security:dehydrated
- Clarified new default settings. KEY_ALGO=secp384r1. Please consult
  README.maintainer for details and how to return to RSA-based certificate
  issuance. (jsc#ECO-3435, jsc#SLE-15909)
- Added a note about ACMEv1 deprecation
- Added a note on new ACME providers and the new non-URL provider syntax
  See README.maintainer for details.

OBS-URL: https://build.opensuse.org/request/show/876590
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=21
2021-03-05 12:46:55 +00:00
Daniel Molkentin
a341530789 Be more precise concerning EC compatiblity
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=70
2021-03-03 17:23:27 +00:00
Daniel Molkentin
4f691d6fef - Clarified new default settings. KEY_ALGO=secp384r1. Please consult
README.maintainer for details and how to return to RSA-based certificate
  issuance. (jsc#ECO-3435, jsc#SLE-15909)
- Added a note about ACMEv1 deprecation
- Added a note on new ACME providers and the new non-URL provider syntax
  See README.maintainer for details.

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=69
2021-03-03 17:15:11 +00:00
Dominique Leuenberger
38cafc83b6 Accepting request 854627 from security:dehydrated
- Update to dehydrated 0.7.0 (JSC#SLE-15909)
  Added
    Support for external account bindings
    Special support for ZeroSSL
    Support presets for some CAs instead of requiring URLs
    Allow requesting preferred chain (--preferred-chain)
    Added method to show CAs current terms of service (--display-terms)
    Allow setting path to domains.txt using cli arguments (--domains-txt)
    Added new cli command --cleanupdelete which deletes old files instead of archiving them
  Fixed
    No more silent failures on broken hook-scripts
    Better error-handling with KEEP_GOING enabled
    Check actual order status instead of assuming it's valid
    Don't include keyAuthorization in challenge validation (RFC compliance)
  Changed
    Using EC secp384r1 as default certificate type
    Use JSON.sh to parse JSON
    Use account URL instead of account ID (RFC compliance)
    Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated
    Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options
    Cleanup now also removes dangling symlinks

OBS-URL: https://build.opensuse.org/request/show/854627
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=20
2020-12-10 17:19:56 +00:00
Daniel Molkentin
9ddb42dcc7 - Update to dehydrated 0.7.0 (JSC#SLE-15909)
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=67
2020-12-10 16:32:35 +00:00
Daniel Molkentin
d28ade7659 - Update to dehydrated 0.7.0
Added
    Support for external account bindings
    Special support for ZeroSSL
    Support presets for some CAs instead of requiring URLs
    Allow requesting preferred chain (--preferred-chain)
    Added method to show CAs current terms of service (--display-terms)
    Allow setting path to domains.txt using cli arguments (--domains-txt)
    Added new cli command --cleanupdelete which deletes old files instead of archiving them
  Fixed
    No more silent failures on broken hook-scripts
    Better error-handling with KEEP_GOING enabled
    Check actual order status instead of assuming it's valid
    Don't include keyAuthorization in challenge validation (RFC compliance)
  Changed
    Using EC secp384r1 as default certificate type
    Use JSON.sh to parse JSON
    Use account URL instead of account ID (RFC compliance)
    Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated
    Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options
    Cleanup now also removes dangling symlinks

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=66
2020-12-10 16:05:04 +00:00
Dominique Leuenberger
67eb7583e6 Accepting request 849382 from security:dehydrated
- dehydrated-apache2: Check for mod_compat (bsc#1178927)

OBS-URL: https://build.opensuse.org/request/show/849382
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=19
2020-11-19 15:46:30 +00:00
Daniel Molkentin
bc6d4bfda6 - dehydrated-apache2: Check for mod_compat (bsc#1178927)
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=64
2020-11-19 11:29:46 +00:00
Dominique Leuenberger
4a97011e97 Accepting request 835832 from security:dehydrated
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/835832
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=18
2020-09-21 15:47:58 +00:00
Daniel Molkentin
9d2a8c99b9 - Reenable nginx subpackage for factory
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=62
2020-09-14 13:43:34 +00:00
Dominique Leuenberger
18d3be14bc Accepting request 817721 from security:dehydrated
- Update maintainer file and package description, remove features
  that are better described in the (upstream maintained) man page.

- Remove potentially harmful scriptlet (bsc#1154167). Documented
  transition case in the maintainer README. Unlikely enough. The
  versions that have not transitioned yet would be broken for more
  than two years now.

OBS-URL: https://build.opensuse.org/request/show/817721
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=17
2020-06-29 19:18:30 +00:00
Daniel Molkentin
2ae092d676 - Update maintainer file and package description, remove features
that are better described in the (maintained) man page.

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=60
2020-06-29 12:45:22 +00:00
Daniel Molkentin
169bd5f56b - Remove potentially harmful scriptlet (bsc#1154167). Documented
transition case in the maintainer README. Unlikely enough. The
  versions that have not transitioned yet would be broken for more
  than two years now.

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=59
2020-06-29 12:40:34 +00:00
Dominique Leuenberger
c5bd2c54c9 Accepting request 800773 from security:dehydrated
- Removed lighttpd 1.x integration package. If you still would like
  to use lighttpd with dehydrated, follow the instructions in the
  README.maintainers file.

OBS-URL: https://build.opensuse.org/request/show/800773
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=16
2020-05-07 12:54:21 +00:00
Daniel Molkentin
9810800404 - Removed lighttpd 1.x integration package. If you still would like
to use lighttpd with dehydrated, follow the instructions in the
  README.maintainers file.

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=57
2020-05-06 15:00:46 +00:00
Dominique Leuenberger
283a5a706e Accepting request 796512 from security:dehydrated
- Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)

OBS-URL: https://build.opensuse.org/request/show/796512
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=15
2020-04-23 16:26:42 +00:00
Daniel Molkentin
15c290c4eb - Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=55
2020-04-23 11:16:38 +00:00
Dominique Leuenberger
2489e026cf Accepting request 796008 from security:dehydrated
- Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#11756)

OBS-URL: https://build.opensuse.org/request/show/796008
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=14
2020-04-21 11:13:48 +00:00
Daniel Molkentin
a9f7c92991 - Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#11756)

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=53
2020-04-20 10:44:17 +00:00
Dominique Leuenberger
59924aebc2 Accepting request 769716 from security:dehydrated
OBS-URL: https://build.opensuse.org/request/show/769716
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=13
2020-02-04 18:54:01 +00:00
Daniel Molkentin
9952a18f28 Accepting request 769563 from home:dimstar:Factory
Shortcut through -mini

OBS-URL: https://build.opensuse.org/request/show/769563
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=51
2020-02-03 16:29:03 +00:00
Daniel Molkentin
f7dc01a76d Accepting request 740571 from home:RBrownSUSE:branches:security:dehydrated
Remove obsolete Groups tag (fate#326485)

OBS-URL: https://build.opensuse.org/request/show/740571
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=50
2019-10-17 17:28:18 +00:00
Dominique Leuenberger
7fc5f33752 Accepting request 724273 from security:dehydrated
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/724273
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=12
2019-08-19 19:39:49 +00:00
Daniel Molkentin
ada9a540d7 install rcdehydrated only for suse
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=48
2019-08-10 18:01:43 +00:00
Daniel Molkentin
4a20247149 Negate again, < comparisions do not work
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=47
2019-08-10 17:58:33 +00:00
Daniel Molkentin
29ce8547a4 Fix typo
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=46
2019-08-10 17:53:28 +00:00
Daniel Molkentin
695fa06d07 TW requires suse_version
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=45
2019-08-10 17:50:58 +00:00
Daniel Molkentin
c29b838222 Fix version conditions
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=44
2019-08-10 17:43:44 +00:00
Daniel Molkentin
f49a7b4c9f - Behavioral change: Use cron only for older RHEL/CentOS versions
(along with openSUSE < 12.3). Everything else now uses systemd.
  Please adopt accordingly! Refer to README.md for

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=43
2019-08-10 17:30:39 +00:00
Dominique Leuenberger
a260366c2b Accepting request 712112 from security:dehydrated
- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update (forwarded request 712111 from dmolkentin)

OBS-URL: https://build.opensuse.org/request/show/712112
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dehydrated?expand=0&rev=11
2019-06-26 14:05:10 +00:00
Daniel Molkentin
8040ffa8f3 Accepting request 712111 from home:dmolkentin:branches:security:dehydrated
- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update

OBS-URL: https://build.opensuse.org/request/show/712111
OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=41
2019-06-26 11:06:19 +00:00