heiko/cert-proxy
heiko/cert-proxy
Watch
1
0
Fork
You've already forked cert-proxy
 0
Code Issues 14 Pull requests 1 Releases 4 Activity Actions
4 releases 79 tags
  • v1.21.0 c3b66ce835

    release v1.21.0
    All checks were successful
    nagonag (Push) / nagonag (push) Successful in 3m11s
    Details
    Stable

    heiko released this 2026-08-18 16:12:37 +02:00 | 0 commits to master since this release

    Signed by heiko
    GPG key ID: 697F0EDD68099F6F

    Release notes

    Release v1.21.0

    • Merge branch 'cleanup'
    • Merge remote-tracking branch 'origin/nagonag/update-master' into cleanup
    • require gogogo version 0.26.0
    • deps(master): update minor/patch dependencies
    • fix(packaging): complete timer lifecycle and harden package tests ai:gpt-5.6-sol
    • fix(client): validate server URLs and preserve the man domain ai:gpt-5.6-sol
    • fix(security): encode and redact PKCS12 password URLs ai:gpt-5.6-sol
    • docs: correct the manual pages against the implementation ai:claude-opus-5
    • fix(packaging): enable the timer on first install ai:claude-opus-5
    • fix: review findings in the client, server and man package ai:claude-opus-5
    • test: pin the CA payload to the four tracked files ai:claude-opus-5
    • fix(packaging): install /etc/cert-proxy/hook executable ai:claude-opus-5
    • feat(client): check the certificate store at startup ai:claude-opus-5
    • fix: depend on the systemd helpers the postinst needs ai:claude-opus-5
    • test: provision the packaging image via make, not from the test ai:claude-opus-5
    • test: install the packages in a container, and fix a manpage conflict ai:claude-opus-5
    • docs: manual pages from Markdown, embedded and packaged ai:claude-opus-5
    • build: collapse the recursive Makefiles into one ai:claude-opus-5
    • Merge remote-tracking branch 'origin/nagonag/update-master' (fixes #47)
    • deps(master): update minor/patch dependencies
    • refactor(CA): drop the .example suffix from openssl.cnf ai:claude-opus-5
    • fix(packaging): list CA files explicitly instead of globbing ai:claude-opus-5
    • fix(packaging): restore /etc/cert-proxy/hook and certs dir ai:claude-opus-5
    • Merge remote-tracking branch 'origin/nagonag/update-master'
    • deps(master): update minor/patch dependencies
    • doc: make clear that cert-proxy is not part of dehydrated
    • docs: consolidate agent instructions into root AGENTS.md ai:claude-opus-4-6
    • demo: live DNS-01 issuance + stand-alone systemd containers ai:claude-opus-4-6
    • go: update dependencies

    Packages: cert-proxy-client 1.21.0-1 cert-proxy-server 1.21.0-1

    Downloads
  • v1.20.0 904c69f828

    release v1.20.0
    All checks were successful
    nagonag (Push) / nagonag (push) Successful in 3m6s
    Details
    Stable

    heiko released this 2026-06-16 22:42:01 +02:00 | 29 commits to master since this release

    Signed by heiko
    GPG key ID: 697F0EDD68099F6F

    Release notes

    Release v1.20.0

    • go: update dependencies
    • rm workflow artifact
    • [nagonag] update dependencies (master) (#44)
    • client: guard umask hardening behind build tags ai:claude-sonnet-4-5
    • remove the workflow artifacts
    • deps(master): update minor/patch dependencies
    • chore: vul*
    • deps(master): update minor/patch dependencies
    • Merge #42: harden temp file creation against symlink injection
    • fix: wsl_v5 whitespace violations (add blank lines before statements)
    • cert: address security review findings — active umask hardening, deployment docs, cleanup test, Rename behavior
    • cert: add hardening — NFS warning, orphaned file cleanup, umask startup check, enhanced symlink test
    • cert: harden temp file creation
    • fix: version
    • feat: align version output for client and server
    • systemd: rely on systemd for executable location
    • Add agent-specific instruction files
    • Merge branch 'packaging'
    • fix lintian warnings
    • packaging: include default and CA files
    • add config files
    • conf: add ius example config
    • fix: Lstat in Mkdir rejects symlink-to-dir (#40)
    • packaging: fix lintian override filenames and per-package coverage
    • Merge #37: reject client CN containing path separator ai:claude-opus-4-7
    • fix: sanitize 401 body, strengthen fuzz invariants
    • test: fuzz target and HTTP-boundary checks for client CN
    • fix: map invalid client CN to 401 instead of 500
    • artwork: scale frontmatter SVG to viewport width (ai:opus-4.7)
    • artwork: new frontmatter banner and project icon (ai:opus-4.7)
    • feat: reject Windows reserved names in client CN
    • refactor: reuse list.ValidateDomain for CN check
    • fix: reject client CN containing path separator
    • test: add regression for CN path separator (#31)
    • fix: atomic symlink replacement in cert client (#34)
    • packaging: first run with gogogo
    • gogogo: new config
    • cicd: rename workflow files
    • build: gogogo.conf
    • deps(master): update minor/patch dependencies
    • cicd: new shared workflow
    • cicd: workflow
    • feat: Add marketing frontmatter SVG to README
    • go: update dependencies
    • ci: disable release until it is fixed
    • ci: fixup release workflow

    Packages: cert-proxy-client 1.20.0-1 cert-proxy-server 1.20.0-1

    Downloads
  • v1.19.0 27e88ee4c9

    release v1.19.0 Stable

    heiko released this 2026-05-03 00:49:15 +02:00 | 75 commits to master since this release

    Signed by heiko
    GPG key ID: 697F0EDD68099F6F
    Downloads
  • v1.18.2 48f5d7629f

    release v1.18.2 Stable

    heiko released this 2025-12-04 10:06:55 +01:00 | 138 commits to master since this release

    Signed by heiko
    GPG key ID: 697F0EDD68099F6F
    Downloads