2.3.0

What's Changed

• Use images from ECR Public by @mattclay in #27

Full Changelog: 2.2.0...2.3.0

2.2.0

• Add dns-account-01 support from draft-ietf-acme-scoped-dns-challenges.
• Implement latest draft-ietf-acme-ari spec.
• Add support for ACME Profiles.
• Upgrade dependencies and runtimes.
• Update config to use new EAB KID, retryAfter, and domainBlocklist.

2.1.0

• Update Pebble version to latest stable version
• Update Go and Python base containers to latest stable versions
• Update Python requirements to latest stable versions

2.0.0

Add OCSP responder and support external account binding. See #19 for additional details.

1.9.0

• Update Pebble version
• Update Python requirements

1.8.0

• Bug fix letsencrypt/pebble#276: Make sure all intermediate certificates have the same subject
• Feature letsencrypt/pebble#269: Add SubjectKeyId to certificates
• Fix a small typo in the controller (intermediate CA certificates endpoint)
• Use a newer Go version (1.13) to build Pebble
• Changed Dockerfile to allow building from different remotes

1.7.0

• Bump Pebble version.
• Adjust/use new features.
• Bump go version.
• Integrate letsencrypt/pebble#260.

1.6.0

Bump Pebble version to include new feature and stricter checking:

• letsencrypt/pebble#234: needed for ansible/ansible#56334
• letsencrypt/pebble#246: more strict checking for RFC conformance

1.5.0

Add support for IP certificates.

1.4.2

The current Pebble version contains a lot of small improvements, such as:

• letsencrypt/pebble#180 Do not return deactivated accounts in newAccount
• letsencrypt/pebble#184 Only send Replay-Nonce for POSTs/newNonce endpoint
• letsencrypt/pebble#191 Return Status 200 for HEAD to new-nonce endpoint
• letsencrypt/pebble#211 Implement orderNotReady and badPublicKey error types

This makes it behave more closer to the current draft ACME standard.