48 lines
2.9 KiB
Markdown
48 lines
2.9 KiB
Markdown
# Changelog
|
|
|
|
All notable changes to this project will be documented in this file.
|
|
|
|
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
|
|
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
|
|
## Unreleased
|
|
|
|
## 1.1.0 - 2026-11-01
|
|
|
|
### Added
|
|
|
|
- Added an early DNS-01 prerequisite check in certificate creation for wildcard certificates.
|
|
|
|
### Fixed
|
|
|
|
- Fixed silent failures for wildcard DNS-01 runs by aborting the current certificate creation step and logging a clear error when the configured TSIG/RNDC key file is missing or unreadable.
|
|
- Fixed premature DNS-01 validation requests by checking all pending challenge TXT values on dynamically discovered authoritative nameservers before requesting ACME validation. The check performs up to ten rounds, with five-second delays between unsuccessful rounds, and aborts issuance with cleanup if the values remain unavailable.
|
|
- Fixed DNS-01 cleanup to remove only the TXT value belonging to each challenge, preserving other challenge tokens at the same record name when validating base domains and wildcards together.
|
|
|
|
## 1.0.0 - 2026-06-28
|
|
|
|
### Added
|
|
|
|
- Added a POSIX-compliant dynTLS management script for issuing, checking, removing and updating TLS certificates.
|
|
- Added the commands `init-pki`, `add-cert`, `check-cert`, `remove-cert` and `update-cert`.
|
|
- Added PKI initialization helpers for certificate, key, token and local root certificate directory setup.
|
|
- Added configurable ACME backend integration through `DYNTLS_LE_PROGRAM`.
|
|
- Added support for HTTP-01 and DNS-01 challenge workflows through external ACME helper scripts.
|
|
- Added certificate deployment mapping through `DYNTLS_DOMAINSERVICE_LIST` for service-specific target paths, ownership, permissions and restart or reload actions.
|
|
- Added support for multi-domain certificate sets through `DYNTLS_DOMAIN_LIST`.
|
|
- Added pre- and post-execution command hooks through `DYNTLS_CMD_PRE_LIST` and `DYNTLS_CMD_POST_LIST`.
|
|
- Added structured logging with log levels, timestamps and per-domain-set identifiers.
|
|
- Added temporary file handling, cleanup routines and command parameter validation.
|
|
- Added example configuration in `vars.example` for PKI paths, ACME settings, DNS settings, logging, domain sets, service mappings and backup retention.
|
|
|
|
### Changed
|
|
|
|
- Separated certificate issuance logic from ACME protocol handling by delegating ACME communication to an external client script.
|
|
- Standardized runtime configuration around environment variables and a dedicated `vars` file workflow.
|
|
- Organized certificate management around reusable PKI directory and service deployment patterns suitable for self-hosted multi-service environments.
|
|
|
|
### Fixed
|
|
|
|
- Improved operational safety through stricter directory, file and environment validation before certificate operations are executed.
|
|
- Improved cleanup behavior by removing temporary session data automatically on exit and restoring terminal state.
|