sduesterhaupt
released this
2026-11-01 13:30:10 +01:00
| 1 commits to main since this release
Added
- Added an early DNS-01 prerequisite check in certificate creation for wildcard certificates.
Fixed
- Fixed silent failures for wildcard DNS-01 runs by aborting the current certificate creation step and logging a clear error when the configured TSIG/RNDC key file is missing or unreadable.
- Fixed premature DNS-01 validation requests by checking all pending challenge TXT values on dynamically discovered authoritative nameservers before requesting ACME validation. The check performs up to ten rounds, with five-second delays between unsuccessful rounds, and aborts issuance with cleanup if the values remain unavailable.
- Fixed DNS-01 cleanup to remove only the TXT value belonging to each challenge, preserving other challenge tokens at the same record name when validating base domains and wildcards together.
Downloads
sduesterhaupt
released this
2026-06-28 09:51:53 +02:00
| 3 commits to main since this release
Added
- Added a POSIX-compliant dynTLS management script for issuing, checking, removing and updating TLS certificates.
- Added the commands
init-pki, add-cert, check-cert, remove-cert and update-cert.
- Added PKI initialization helpers for certificate, key, token and local root certificate directory setup.
- Added configurable ACME backend integration through
DYNTLS_LE_PROGRAM.
- Added support for HTTP-01 and DNS-01 challenge workflows through external ACME helper scripts.
- Added certificate deployment mapping through
DYNTLS_DOMAINSERVICE_LIST for service-specific target paths, ownership, permissions and restart or reload actions.
- Added support for multi-domain certificate sets through
DYNTLS_DOMAIN_LIST.
- Added pre- and post-execution command hooks through
DYNTLS_CMD_PRE_LIST and DYNTLS_CMD_POST_LIST.
- Added structured logging with log levels, timestamps and per-domain-set identifiers.
- Added temporary file handling, cleanup routines and command parameter validation.
- Added example configuration in
vars.example for PKI paths, ACME settings, DNS settings, logging, domain sets, service mappings and backup retention.
Changed
- Separated certificate issuance logic from ACME protocol handling by delegating ACME communication to an external client script.
- Standardized runtime configuration around environment variables and a dedicated
vars file workflow.
- Organized certificate management around reusable PKI directory and service deployment patterns suitable for self-hosted multi-service environments.
Fixed
- Improved operational safety through stricter directory, file and environment validation before certificate operations are executed.
- Improved cleanup behavior by removing temporary session data automatically on exit and restoring terminal state.
Downloads