v0.3.0

Features:

• The preferred_chain directive allows selecting alternative certificate chains.
• The profile directive allows specifying preferred certificate profile.
• Requesting certificates for IP addresses is now documented and officially supported.

Bugfixes:

• Directory metadata could not be parsed with certain fields set to null.
  Thanks to Marian Degel.
• Directory requests failed to handle HTTP redirects.
  Thanks to Marian Degel.
• Relative state_path was not using NGX_ACME_STATE_PREFIX.
• Build error with BoringSSL (via rust-openssl update).
• Build error on NetBSD 10 (via rust-openssl update).

New Contributors

• @mdegel made their first contribution in #74

Full Changelog: v0.2.0...v0.3.0

v0.2.0

Breaking changes:

• Per-issuer state directory is now created even if not configured.
  To change the prefix for default state paths, set NGX_ACME_STATE_PREFIX environment variable during build (e.g. to /var/lib/nginx).
  To disable the persistent state in configuration, use state_path off.

Features:

• The external_account_key directive allows configuring external account binding.
• Support for the tls-alpn-01 challenge. The challenge directive in the acme_issuer block now allows specifying a challenge to use.
• Account URL now can be read from a file under state path.

Bugfixes:

• Compatibility with Dogtag PKI, EJBCA, OpenBao and Vault.
• Improved logs and error reporting.
• Stability and memory usage improvements.
• Updated ngx-rust from git dependency to a released version.

v0.1.1

Initial release.

• Base ACME protocol.
• HTTP-01 challenge support.