v2.5.0

Added:

• [cli] Adds renew hook
• [dnsprovider] Adds 'Since' to DNS providers documentation

Changed:

• [dnsprovider] gcloud: use public DNS zones
• [dnsprovider] route53: enhance documentation.

Fixed:

• [dnsprovider] cloudns: fix TTL and status validation
• [dnsprovider] sakuracloud: supports concurrent update
• [dnsprovider] Disable authz when solve fail.
• Add tzdata to the Docker image.

v2.4.0

• Migrate from xenolf/lego to go-acme/lego.

Added:

• [dnsprovider] Add DNS Provider for Domain Offensive (do.de)
• [dnsprovider] Adds information about '_FILE' suffix.

Fixed:

• [cli,dnsprovider] Add 'manual' provider to the output of dnshelp
• [dnsprovider] hostingde: Use provided ZoneName instead of domain
• [dnsprovider] pdns: fix wildcard with SANs

v2.3.0

Added:

• [dnsprovider] Add DNS Provider for ClouDNS.net
• [dnsprovider] Add DNS Provider for Oracle Cloud

Changed:

• [cli] Adds log when no renewal.
• [dnsprovider,lib] Add a mechanism to wrap a PreCheckFunc
• [dnsprovider] oraclecloud: better way to get private key.
• [dnsprovider] exoscale: update library

Fixed:

• [dnsprovider] OVH: Refresh zone after deleting challenge record
• [dnsprovider] oraclecloud: ttl config and timeout
• [dnsprovider] hostingde: fix client fails if customer has no access to dns-groups
• [dnsprovider] vscale: getting sub-domain
• [dnsprovider] selectel: getting sub-domain
• [dnsprovider] vscale: fix TXT records clean up
• [dnsprovider] selectel: fix TXT records clean up

v2.2.0

Added:

• [dnsprovider] Add support for Openstack Designate as a DNS provider
• [dnsprovider] gcloud: Option to specify gcloud service account json by env as string
• [experimental feature] Resolve CNAME when creating dns-01 challenge. To enable: set LEGO_EXPERIMENTAL_CNAME_SUPPORT to true.

Changed:

• [cli] Applies Let’s Encrypt’s recommendation about renew. The option --days of the command renew has a new default value (30)
• [lib] Uses a jittered exponential backoff

Fixed:

• [cli] CLI and key type.
• [dnsprovider] httpreq: Endpoint with path.
• [dnsprovider] fastdns: Do not overwrite existing TXT records
• Log wildcard domain correctly in validation

v2.1.0

Added:

• [dnsprovider] Add support for zone.ee as a DNS provider.

Changed:

• [dnsprovider] nifcloud: Change DNS base url.
• [dnsprovider] gcloud: More detailed information about Google Cloud DNS.

Fixed:

• [lib] fix: OCSP, set HTTP client.
• [dnsprovider] alicloud: fix pagination.
• [dnsprovider] namecheap: fix panic.

v2.0.1

Added:

• [cli,lib] Option to disable the complete propagation Requirement
• [lib,cli] Support non-ascii domain name (punnycode)
• [cli,lib] Add configurable timeout when obtaining certificates
• [cli] Archive revoked certificates
• [cli] Add command to list certificates.
• [cli] support for renew with CSR
• [cli] add SAN on renew
• [lib] Adds Remove for challenges
• [lib] Add version to xenolf-acme in User-Agent.
• [dnsprovider] The ability for a DNS provider to solve the challenge sequentially
• [dnsprovider] Add DNS provider for "HTTP request".
• [dnsprovider] Add DNS Provider for Vscale
• [dnsprovider] Add DNS Provider for TransIP
• [dnsprovider] Add DNS Provider for inwx
• [dnsprovider] alidns: add support to handle more than 20 domains

Changed:

• [lib] Check all challenges in a predictable order
• [lib] Poll authz URL instead of challenge URL
• [lib] Check all nameservers in a predictable order
• [lib] Logs every iteration of waiting for the propagation
• [cli] --http: enable HTTP challenge important
• [cli] --http.port: previously named --http
• [cli] --http.webroot: previously named --webroot
• [cli] --http.memcached-host: previously named --memcached-host
• [cli] --tls: enable TLS challenge important
• [cli] --tls.port: previously named --tls
• [cli] --dns.resolvers: previously named --dns-resolvers
• [dnsprovider] gcloud: Use GCE_PROJECT for project always, if specified
• [cli] the option --days of the command renew has default value (15)

Removed:

• [lib] Remove SetHTTP01Address
• [lib] Remove SetTLSALPN01Address
• [lib] Remove Exclude
• [cli] Remove --exclude, -x

Fixed:

• [lib] Fixes revocation for subdomains and non-ascii domains
• [lib] Disable pending authorizations
• [dnsprovider] transip: concurrent access to the API.
• [dnsprovider] gcloud: fix for wildcard
• [dnsprovider] Azure: Do not overwrite existing TXT records
• [dnsprovider] fix: Cloudflare error.

v1.2.1

fix: Docker image. (#704)

v1.2.0

Added:

• [dnsprovider] Add DNS Provider for ConoHa DNS
• [dnsprovider] Add DNS Provider for MyDNS.jp
• [dnsprovider] Add DNS Provider for Selectel

Fixed:

• [dnsprovider] netcup: make unmarshalling of api-responses more lenient.

Changed:

• [dnsprovider] aurora: change DNS client
• [dnsprovider] azure: update auth to support instance metadata service
• [dnsprovider] dnsmadeeasy: log response body on error
• [lib] TLS-ALPN-01: Update idPeAcmeIdentifierV1, draft refs.
• [lib] Do not send a JWS body when POSTing challenges.
• [lib] Support POST-as-GET.

v1.1.0

Added:

• [lib] TLS-ALPN-01 Challenge
• [cli] Add filename parameter
• [dnsprovider] Allow to configure TTL, interval and timeout
• [dnsprovider] Add support for reading DNS provider setup from files
• [dnsprovider] Add DNS Provider for ACME-DNS
• [dnsprovider] Add DNS Provider for ALIYUN DNS
• [dnsprovider] Add DNS Provider for DreamHost
• [dnsprovider] Add DNS provider for hosting.de
• [dnsprovider] Add DNS Provider for IIJ
• [dnsprovider] Add DNS Provider for netcup
• [dnsprovider] Add DNS Provider for NIFCLOUD DNS
• [dnsprovider] Add DNS Provider for SAKURA Cloud
• [dnsprovider] Add DNS Provider for Stackpath
• [dnsprovider] Add DNS Provider for VegaDNS
• [dnsprovider] exec: add EXEC_MODE=RAW support.
• [dnsprovider] cloudflare: support for CF_API_KEY and CF_API_EMAIL

Fixed:

• [lib] Don't trust identifiers order.
• [lib] Fix missing issuer certificates from Let's Encrypt
• [dnsprovider] duckdns: fix TXT record update url
• [dnsprovider] duckdns: fix subsubdomain
• [dnsprovider] gcloud: update findTxtRecords to use Name=fqdn and Type=TXT
• [dnsprovider] lightsail: Fix Domain does not exist error
• [dnsprovider] ns1: use the authoritative zone and not the domain name
• [dnsprovider] ovh: check error to avoid panic due to nil client

Changed:

• [lib] Submit all dns records up front, then validate serially

v1.0.1

Fixed:

• [cli] Changed default server URL to new V2 endpoint
• [lib] Added missing processing status handling