Version 0.3.1

With this release letsencrypt.sh was renamed to dehydrated.

Reason for this was a violation of the Let's Encrypt Trademark Policy, there was no possibility to keep the old name.

This will unfortunately break a few setups, so make sure you rename your configs and WELLKNOWN directory according to the new defaults.

See CHANGELOG below for details:

[0.3.1] - 2016-09-13

Changed

• Renamed project to dehydrated.
• Default WELLKNOWN location is now /var/www/dehydrated
• Config location is renamed to dehydrated (e.g. /etc/dehydrated)

Version 0.3.0

This release adds a few new options and has a few changed default parameters, see CHANGELOG below:

[0.3.0] - 2016-09-07

Changed

• Config is now named config instead of config.sh!
• Location of domains.txt is now configurable via DOMAINS_TXT config variable
• Location of certs directory is now configurable via CERTDIR config variable
• signcsr command now also outputs chain certificate if --full-chain/-fc is set
• Location of account-key(s) changed
• Default WELLKNOWN location is now /var/www/letsencrypt
• New version of Let's Encrypt Subscriber Agreement

Added

• Added option to add CSR-flag indicating OCSP stapling to be mandatory
• Initial support for configuration on per-certificate base
• Support for per-CA account keys and custom config for output cert directory, license, etc.
• Added option to select IP version of name to address resolution
• Added option to run letsencrypt.sh without locks

Fixed

• letsencrypt.sh no longer stores account keys from invalid registrations

Version 0.2.0

This version fixes a json-parsing bug which made letsencrypt.sh incompatible with up-to-date ACME servers.

Also this release adds initial documentation (which will be improved over time).

For other changes the the CHANGELOG excerpt below:

[0.2.0] - 2016-05-22

Changed

• PRIVATE_KEY config parameter has been renamed to ACCOUNT_KEY to avoid confusion with certificate keys
• deploy_cert hook now also has the certificates timestamp as standalone parameter
• Temporary files are now identifiable (template: letsencrypt.sh-XXXXXX)
• Private keys are now regenerated by default

Added

• Added documentation to repository

Fixed

• Fixed bug with uppercase names in domains.txt (script now converts everything to lowercase)
• mktemp no longer uses the deprecated -t parameter.
• Compatibility with "pretty" json

Initial numbered version

This is the first numbered version of letsencrypt.sh