NEW FEATURES:
- add the
tidy
endpoint that cleans up the cache periodically instead of when no one is using a given certificate
NEW FEATURES:
- The
dns_resolvers
parameter can now be set to choose the DNS resolvers used to check the propagation of the ACME DNS-01 challenge.
IMPROVEMENTS:
- Better error message are now returned when a certificate signing request fails.
IMPROVEMENTS:
- It is now possible to update an ACME account.
IMPROVEMENTS:
- Simultanous requests to create the same certificate will now return the same one to avoid sending multiple requests to the ACME provider.
- The
provider_configuration
parameter can now be used to set the configuration of the ACME client instead of using environment variables.
BUG FIXES:
- Failure to retrieve the Lego client now properly return an error.
NEW FEATURES:
- It is now possible to ignore skip waiting for the DNS propagation by setting the
ignore_dns_propagation
parameter on an account. The default isfalse
and will check that the ACME DNS challenge has been properly propagated before requesting a certificate.
NEW FEATURES:
- It is now possible to set the type of key used for an account by setting the
key_type
parameter. Possible values areEC256
,EC384
,RSA2048
,RSA4096
andRSA8192
.
BUG FIXES:
- The binaries are now statically built to work with Alpine Linux.
NEW FEATURES:
- Initial release of the Vault ACME secret engine.