Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

Added an early dns-01 prerequisite check in certificate creation for wildcard certificates.

Fixed silent failures for wildcard dns-01 runs by aborting certificate creation and logging a clear error when the configured TSIG/RNDC key file is missing.

Added a POSIX-compliant dynTLS management script for issuing, checking, removing and updating TLS certificates.
Added the commands init-pki, add-cert, check-cert, remove-cert and update-cert.
Added PKI initialization helpers for certificate, key, token and local root certificate directory setup.
Added configurable ACME backend integration through DYNTLS_LE_PROGRAM.
Added support for HTTP-01 and DNS-01 challenge workflows through external ACME helper scripts.
Added certificate deployment mapping through DYNTLS_DOMAINSERVICE_LIST for service-specific target paths, ownership, permissions and restart or reload actions.
Added support for multi-domain certificate sets through DYNTLS_DOMAIN_LIST.
Added pre- and post-execution command hooks through DYNTLS_CMD_PRE_LIST and DYNTLS_CMD_POST_LIST.
Added structured logging with log levels, timestamps and per-domain-set identifiers.
Added temporary file handling, cleanup routines and command parameter validation.
Added example configuration in vars.example for PKI paths, ACME settings, DNS settings, logging, domain sets, service mappings and backup retention.

Separated certificate issuance logic from ACME protocol handling by delegating ACME communication to an external client script.
Standardized runtime configuration around environment variables and a dedicated vars file workflow.
Organized certificate management around reusable PKI directory and service deployment patterns suitable for self-hosted multi-service environments.

Improved operational safety through stricter directory, file and environment validation before certificate operations are executed.
Improved cleanup behavior by removing temporary session data automatically on exit and restoring terminal state.