sduesterhaupt
released this
2026-06-28 09:51:53 +02:00
| 1 commits to main since this release
Added
- Added a POSIX-compliant dynTLS management script for issuing, checking, removing and updating TLS certificates.
- Added the commands
init-pki, add-cert, check-cert, remove-cert and update-cert.
- Added PKI initialization helpers for certificate, key, token and local root certificate directory setup.
- Added configurable ACME backend integration through
DYNTLS_LE_PROGRAM.
- Added support for HTTP-01 and DNS-01 challenge workflows through external ACME helper scripts.
- Added certificate deployment mapping through
DYNTLS_DOMAINSERVICE_LIST for service-specific target paths, ownership, permissions and restart or reload actions.
- Added support for multi-domain certificate sets through
DYNTLS_DOMAIN_LIST.
- Added pre- and post-execution command hooks through
DYNTLS_CMD_PRE_LIST and DYNTLS_CMD_POST_LIST.
- Added structured logging with log levels, timestamps and per-domain-set identifiers.
- Added temporary file handling, cleanup routines and command parameter validation.
- Added example configuration in
vars.example for PKI paths, ACME settings, DNS settings, logging, domain sets, service mappings and backup retention.
Changed
- Separated certificate issuance logic from ACME protocol handling by delegating ACME communication to an external client script.
- Standardized runtime configuration around environment variables and a dedicated
vars file workflow.
- Organized certificate management around reusable PKI directory and service deployment patterns suitable for self-hosted multi-service environments.
Fixed
- Improved operational safety through stricter directory, file and environment validation before certificate operations are executed.
- Improved cleanup behavior by removing temporary session data automatically on exit and restoring terminal state.
Downloads