Component: certificate
362 changelog entries across 174 version(s)
Releases by channel (stacked)
- add option for pasting certificate in PEM format in add and import commands;
- fix CRL download failing when the server responds with an HTTP 3xx code;
- fix empty error message when ACME DNS validation times out;
- fix services continuing to use the previous certificate after ACME renewal;
- fix ACME certificate issuance for wildcard domains;
- refactor certificate internal processes;
- refactor certificate internal processes (additional changes);
- add "SSL.com Root Certification Authority ECC" to built-in root certificate authorities store;
- allow importing a cross-signed certificate without replacing the existing one;
- refactor certificate internal processes;
- remove "GoDaddy Class 2 CA" from built-in root certificate authorities store;
- add "SSL.com Root Certification Authority ECC" to built-in root certificate authorities store;
- allow importing a cross-signed certificate without replacing the existing one;
- refactor certificate internal processes;
- remove "GoDaddy Class 2 CA" from built-in root certificate authorities store;
- refactor certificate internal processes (additional changes);
- remove "GoDaddy Class 2 CA" from built-in root certificate authorities store;
- fix changing the built-in trust store setting (introduced in 7.22.2);
- fix changing the built-in trust store setting (introduced in 7.22.2);
- allow importing a cross-signed certificate without overwriting the existing one;
- fix ACME certificate issuance for wildcard domains;
- fix changing the built-in trust store setting (introduced in 7.22.2);
- improve certificate import process;
- refactor certificate internal processes;
- added "acme-renew" command;
- general improvements in certificate handling;
- use AES encryption when exporting certificates in PKCS#12 format;
- added "ISRG Root X2", "Root YE" and "Root YR" to SMIPS built-in root certificate authorities store;
- added "Root YE" and "Root YR" to built-in root certificate authorities store;
- added "ISRG Root X2", "Root YE" and "Root YR" to SMIPS built-in root certificate authorities store;
- added "Root YE" and "Root YR" to built-in root certificate authorities store;
- always use all trust stores for downloaded CRL validation;
- use AES encryption when exporting certificates in PKCS#12 format;
- always use all trust stores for downloaded CRL validation;
- general improvements in certificate handling;
- added "acme-renew" command;
- added "ISRG Root X1" and "DigiCert Global Root G2" to SMIPS built-in root certificate authorities store;
- allow deleting ACME certificate that failed to generate;
- improved ACME logging;
- improved ACME status reporting;
- set Let's Encrypt as default ACME directory;
- improved ACME logging (additional fixes);
- improved ACME status reporting (additional fixes);
- added option to configure built-in trust store for all services (additional fixes);
- allow deleting ACME certificate that failed to generate;
- improved ACME logging;
- improved ACME status reporting;
- set Let's Encrypt as default ACME directory;
- added "ISRG Root X1" and "DigiCert Global Root G2" to SMIPS built-in root certificate authorities store;
- added option to configure built-in trust store for all services (CLI only);
- use "default" for built-in trust store default value;
- added option to configure built-in trust store for all services (CLI only);
- use "default" for built-in trust store default value;
- improved certificate export process;
- improved logging;
- added support for multiple ACME certificates (additional fixes);
- fixed initial certificate creation using SCEP (introduced in v7.21);