Go to file
Fabian Grünbichler 2307c38b59 support downloading alternate chains
the current default chains end with an expired root certificate for
maximum compatibility with old Android versions. this breaks some other
older clients (openssl, gnutls) which don't expect chains to contain any
expired certificates, even if they are 'above' the trust anchor.

by setting $root, it is possible to specify which root the ACME provided
certificate chain should end with, downloading alternate chains as
necessary.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Reviewed-by: Stoiko Ivanov <s.ivanov@proxmox.com>
Tested-by: Stoiko Ivanov <s.ivanov@proxmox.com>
2021-10-08 10:55:49 +02:00
debian bump version to 1.3.0 2021-08-11 12:26:39 +02:00
src support downloading alternate chains 2021-10-08 10:55:49 +02:00
.gitignore Add Debian Buildsystem config 2020-04-02 14:29:16 +02:00
.gitmodules use smart-relative gitmodule path 2020-05-03 17:17:39 +02:00
Makefile buildsys: change upload dist to bullseye 2021-06-08 10:29:08 +02:00