update after mod_md backport

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1862792 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/CHANGES b/CHANGES
index 35fd06ac7e7cdf042a042d90d8e87af4f185ec49..1d604f557d3da666e9edaf4281f53dcbaea3964c 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -14,27 +14,6 @@ Changes with Apache 2.5.1
      same behaviour as before.
      [Stefan Eissing]
   
-  *) mod_md: bringing over v2.0.6 from github.
-     - supports the ACMEv2 protocol
-     - supports the new challenge method 'tls-alpn-01' 
-     - supports command configuration to setup/teardown 'dns-01' challenges
-     - supports wildcard certificates when dns challenges are configured
-     - ACMEv2 is the new default and will be used on the next certificate renewal,
-       unless another MDCertificateAuthority is configured
-     - challenge type 'tls-sni-01' has been removed as CAs do not offer this any longer
-     - a domain exposes its status at https://<domain>/.httpd/certificate-status
-     - Managed Domains are now in Apache's 'server-status' page
-     - A new handler 'md-status' exposes verbose status information in JSON format
-     - new directives "MDCertificateFile" and "MDCertificateKeyFile" to configure a
-       Managed Domain that uses static files. Auto-renewal is turned off for those.
-     - new MDMessageCmd that is invoked on several events: 'renewed', 'expiring' and
-       'errored'. New 'MDWarnWindow' directive to configure when expiration warnings
-       shall be issued.
-     - ACMEv2 endpoints use the GET via empty POST way of accessing resources, see
-       announcement by Let's Encrypt: 
-       https://community.letsencrypt.org/t/acme-v2-scheduled-deprecation-of-unauthenticated-resource-gets/74380
-     [Stefan Eissing]
-
   *) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
      [Graham Leggett]
 
@@ -57,10 +36,6 @@ Changes with Apache 2.5.1
   *) mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA failure.
      [Michael Kaufmann <mail michael-kaufmann.ch>]
 
-  *) mod_md: Explicitly setting file permissions to break out of umasks. We want our
-     non-privilegded apache user to be able to read them. See github issue
-     <https://github.com/icing/mod_md/issues/117>. [Stefan Eissing] 
-  
   *) Merge consecutive slashes in URL's. Opt-out with `MergeSlashes OFF`. 
      [Eric Covener]