-
-
Notifications
You must be signed in to change notification settings - Fork 14.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update the release documentation #85370
Conversation
The backport is only partial because the release branch and the master branch diverged, it might be worth backporting the other missing commits to complete this one |
Thanks! also please put back the note about |
nixos/modules/security/acme.nix
Outdated
@@ -324,8 +324,8 @@ in | |||
cd ${apath} | |||
|
|||
# Test that existing cert is older than new cert | |||
KEY=${spath}/certificates/${keyName}.key | |||
if [ -e $KEY -a $KEY -nt key.pem ]; then |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Also; please add this change's description to the commit as well. Now the commit only talks about doc improvements but there's also a functional change. (Or just leave it out? im not sure)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I’ll leave it out yes, it has no consequence to use this one or another in the current 20.03 code, since there is no way to pass --reuse-key. If it’s an option, I think it would be a good idea to backport the changes from unstable, since key pinning is striclty impossible currently
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
(done)
1d5a7cc
to
60fb696
Compare
Can we make the commit message specific #85366 (comment) |
It currently says that everything will be backward compatible between lego and simp-le certificates, but it’s not.
60fb696
to
21c4a33
Compare
Changed @worldofpeace |
Thanks! |
Motivation for this change
Partial backport of #85369
Things done
sandbox
innix.conf
on non-NixOS linux)nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
./result/bin/
)nix path-info -S
before and after)