See the change log in the GitHub release notes.
- Support newer versions of the
openssl_privatekey_info
Ansible module (#43)
- Replace expired Let's Encrypt intermediate certificate (#42)
- Determine the correct FreeBSD Python packages automatically
- Add support for RHEL 8
- Use Python 3.7 packages for FreeBSD
- Add support for the zone ID
route53
option for accounts with limited Route 53 permissions - Add the ability to change the intermediate CA to download
- Fix a bug in the Let's Encrypt challenge verification step
- Use the new R3 intermediate CA (#33)
- Add the "install" tag to the "use the created virtualenv" task
- Add support for MacOS
- Pin the version of setuptools in the RHEL/CentOS virtualenv to continue supporting Python 2
- Allow calling the role in a loop by setting explicit variable names for the loops in the role
- Fix the verification step for wildcard common names
- Add the
install
tag - Add the
openssl
tag - Consolidate the tasks that were used to set permissions into the existing OpenSSL tasks
- Verify the consistent of the private keys and CSR
- Add Python 3 support for Debian based systems
- Switch ACME protocol version to v2 as v1 will be deprecated in November 2019 (https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430)
- Set the
ler53_cert_changed
fact when the certificate is created or renewed - Notify
handle services
on validation instead of initiation - Fix deprecated when statements
- Require Ansible 2.7
- Fix package installer deprecation warnings in Ansible 2.7
- Use the acme_certificate module instead of the deprecated letsencrypt module
- Add the ability to run service handlers when a certificate is updated with ler53_service_handlers.
- Add the ability to specify extended key usage on CSRs (thanks @calebtonn).
- Allow specifying a custom URL to the Let's Encrypt agreement.
- Migrate to the Ansible OpenSSL modules for idempotence (now installs pyOpenSSL).
- Use Python virtualenvs when installing boto and pyOpenSSL on RHEL/CentOS.
- Add the ability to recreate a cert when the CSR changes.
- Install prerequisite packages on FreeBSD.
- Add the ability to specify SAN's for the same domain.
- Add the ability specify the key usage.
- Install the python-boto package instead of through pip.
- Remove the variables ler53_cert_country, ler53_cert_state, ler53_cert_locality, and ler53_cert_organization since these aren't used by Let's Encrypt (thanks @stevenringo).
- Remove the variable ler53_cert_subject and now only use ler53_cert_common_name.
- Replace ler53_intermediate_download with ler53_chain_download.
- Replace ler53_intermediate_file_name with ler53_chain_file_name.
- Replace ler53_cert_and_intermediate_file_name with ler53_cert_and_chain_file_name.
- Default ler53_cert_file_name to
{{ ler53_cert_common_name }}.crt
. - Default ler53_intermediate_file_name to
{{ ler53_cert_common_name }}.intermediate.crt
. - Default ler53_cert_and_intermediate_file_name to
{{ ler53_cert_common_name }}.pem
. - Make ownership and permissions on ler53_cert_dir compatible with more *nix systems.
- Initial release.