mirror of
https://github.com/apache/httpd.git
synced 2025-08-10 02:56:11 +00:00
2498e69562
- supports the ACMEv2 protocol
- supports the new challenge method 'tls-alpn-01'
- supports command configuration to setup/teardown 'dns-01' challenges
- supports wildcard certificates when dns challenges are configured
- ACMEv2 is the new default and will be used on the next certificate renewal,
unless another MDCertificateAuthority is configured
- challenge type 'tls-sni-01' has been removed as CAs do not offer this any longer
- a domain exposes its status at https://<domain>/.httpd/certificate-status
- Managed Domains are now in Apache's 'server-status' page
- A new handler 'md-status' exposes verbose status information in JSON format
- new directives "MDCertificateFile" and "MDCertificateKeyFile" to configure a
Managed Domain that uses static files. Auto-renewal is turned off for those.
- new MDMessageCmd that is invoked on several events: 'renewed', 'expiring' and
'errored'. New 'MDWarnWindow' directive to configure when expiration warnings
shall be issued.
- ACMEv2 endpoints use the GET via empty POST way of accessing resources, see
announcement by Let's Encrypt:
https://community.letsencrypt.org/t/acme-v2-scheduled-deprecation-of-unauthenticated-resource-gets/74380
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1862013 13f79535-47bb-0310-9956-ffa450edef68
43 lines
1.6 KiB
C
43 lines
1.6 KiB
C
/* Licensed to the Apache Software Foundation (ASF) under one or more
|
|
* contributor license agreements. See the NOTICE file distributed with
|
|
* this work for additional information regarding copyright ownership.
|
|
* The ASF licenses this file to You under the Apache License, Version 2.0
|
|
* (the "License"); you may not use this file except in compliance with
|
|
* the License. You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#ifndef mod_md_mod_md_h
|
|
#define mod_md_mod_md_h
|
|
|
|
#include <openssl/evp.h>
|
|
#include <openssl/x509v3.h>
|
|
|
|
struct server_rec;
|
|
|
|
APR_DECLARE_OPTIONAL_FN(int,
|
|
md_is_managed, (struct server_rec *));
|
|
|
|
/**
|
|
* Get the certificate/key for the managed domain (md_is_managed != 0).
|
|
*
|
|
* @return APR_EAGAIN if the real certificate is not available yet
|
|
*/
|
|
APR_DECLARE_OPTIONAL_FN(apr_status_t,
|
|
md_get_certificate, (struct server_rec *, apr_pool_t *,
|
|
const char **pkeyfile,
|
|
const char **pcertfile));
|
|
|
|
APR_DECLARE_OPTIONAL_FN(int,
|
|
md_is_challenge, (struct conn_rec *, const char *,
|
|
X509 **pcert, EVP_PKEY **pkey));
|
|
|
|
#endif /* mod_md_mod_md_h */
|