From e4061cd9300909736aa86b2b28a07b4125964c3d Mon Sep 17 00:00:00 2001 From: Stefan Eissing Date: Tue, 9 Jul 2019 08:41:30 +0000 Subject: [PATCH] update after mod_md backport git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1862792 13f79535-47bb-0310-9956-ffa450edef68 --- CHANGES | 25 ------------------------- 1 file changed, 25 deletions(-) diff --git a/CHANGES b/CHANGES index 35fd06ac7e..1d604f557d 100644 --- a/CHANGES +++ b/CHANGES @@ -14,27 +14,6 @@ Changes with Apache 2.5.1 same behaviour as before. [Stefan Eissing] - *) mod_md: bringing over v2.0.6 from github. - - supports the ACMEv2 protocol - - supports the new challenge method 'tls-alpn-01' - - supports command configuration to setup/teardown 'dns-01' challenges - - supports wildcard certificates when dns challenges are configured - - ACMEv2 is the new default and will be used on the next certificate renewal, - unless another MDCertificateAuthority is configured - - challenge type 'tls-sni-01' has been removed as CAs do not offer this any longer - - a domain exposes its status at https:///.httpd/certificate-status - - Managed Domains are now in Apache's 'server-status' page - - A new handler 'md-status' exposes verbose status information in JSON format - - new directives "MDCertificateFile" and "MDCertificateKeyFile" to configure a - Managed Domain that uses static files. Auto-renewal is turned off for those. - - new MDMessageCmd that is invoked on several events: 'renewed', 'expiring' and - 'errored'. New 'MDWarnWindow' directive to configure when expiration warnings - shall be issued. - - ACMEv2 endpoints use the GET via empty POST way of accessing resources, see - announcement by Let's Encrypt: - https://community.letsencrypt.org/t/acme-v2-scheduled-deprecation-of-unauthenticated-resource-gets/74380 - [Stefan Eissing] - *) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+. [Graham Leggett] @@ -57,10 +36,6 @@ Changes with Apache 2.5.1 *) mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA failure. [Michael Kaufmann ] - *) mod_md: Explicitly setting file permissions to break out of umasks. We want our - non-privilegded apache user to be able to read them. See github issue - . [Stefan Eissing] - *) Merge consecutive slashes in URL's. Opt-out with `MergeSlashes OFF`. [Eric Covener] -- 2.50.1