Richard Körber
dc7182ca1f
Increase default network timeout to 30 seconds
2025-08-16 10:43:31 +02:00
Richard Körber
294d977757
Remove unused field
2025-08-16 10:25:13 +02:00
Richard Körber
2ca2f4b264
Add Actalis support ( fixes #173 )
2025-08-13 20:48:16 +02:00
Richard Körber
2a5df329bd
draft-ietf-acme-ari is RFC 9773 now
...
Also this feature ends experimental status.
2025-06-19 16:38:37 +02:00
Richard Körber
b62709470e
Replace new URL() with URI.create()
...
new URL() is deprecated starting Java 20
2025-05-18 10:19:40 +02:00
Richard Körber
ce60dc9368
Remove all deprecated code
2025-04-26 13:36:31 +02:00
Richard Körber
feee96444f
Add missing @Serial annotations
2025-04-26 12:49:45 +02:00
Richard Körber
ba50d4ec72
Remove deprecated method Connection.handleRetryAfter()
2025-04-26 12:46:07 +02:00
Richard Körber
1dc3c7ad64
Remove deprecated method Certificate.getCertID()
2025-04-26 12:42:29 +02:00
Richard Körber
c0d96e709e
Add support for draft-ietf-acme-dns-account-label
2025-04-26 12:40:03 +02:00
Richard Körber
1ed293c5bb
Upgrade to Java 17
2025-04-26 09:22:18 +02:00
Richard Körber
8678f80ac6
Add missing providers to module-info
2025-02-17 20:10:14 +01:00
Richard Körber
36363adfe2
Add method to get available profiles
2025-01-18 12:07:13 +01:00
Richard Körber
83d6f38ec7
Add method to return profile description
2025-01-18 11:47:16 +01:00
Richard Körber
43b6a7c7c6
Fix unit tests
2025-01-18 11:38:39 +01:00
Jared Crawford
c0fede3b1a
Add support for draft-aaron-acme-profiles
2025-01-18 10:37:20 +01:00
Jared Crawford
6e9c266b17
Add support for draft-aaron-acme-profiles
2025-01-18 10:37:20 +01:00
Jared Crawford
c85f4a627b
Add support for draft-aaron-acme-profiles
2025-01-18 10:37:20 +01:00
Jared Crawford
19371229b8
Add support for draft-aaron-acme-profiles
2025-01-18 10:37:20 +01:00
Richard Körber
318aeaab9d
Single method to get the certificate
2024-10-21 07:11:09 +02:00
Richard Körber
c6f6ee9d07
Check if auto-renewal-get is supported by CA
2024-10-20 09:34:26 +02:00
Richard Körber
d9186ede14
Fix outdated newAccount test response
2024-10-01 14:50:17 +02:00
Richard Körber
87bbb9efbf
Add Buypass provider
2024-09-22 16:54:17 +02:00
Richard Körber
beec5156c2
Add Google CA provider
2024-09-22 16:32:00 +02:00
Richard Körber
0ccd68c09a
Update to draft-ietf-acme-ari-05
2024-08-24 12:19:13 +02:00
Richard Körber
e589b16d98
Allow custom pebble.minica.pem files
...
Also changes from a Java proprietary truststore file to the official
Pebble PEM file.
2024-08-22 20:16:35 +02:00
Richard Körber
171ee474c0
Deprecate update() and AcmeRetryAfterException
2024-08-18 11:42:50 +02:00
Richard Körber
b897dc277d
Add new methods for status change busy waiting
2024-08-17 17:20:52 +02:00
Richard Körber
a9ce33a921
Update to draft-ietf-acme-ari-04
...
Only changes to the docs were necessary.
2024-06-11 18:54:31 +02:00
Richard Körber
6120a2b476
Do not set autoRenewal on cert replacement ( fixes #158 )
2024-06-07 17:18:04 +02:00
Richard Körber
6d5da63b8e
Handle HTTP errors when fetching a nonce
...
The nonce is fetched via HEAD request. Before this fix, if there was a
HTTP error, acme4j expected a Problem JSON body, which was not send
because of the HEAD request, and lead to an AcmeProtocolException.
Now either an AcmeException or AcmeRetryAfterException is thrown.
2024-05-15 15:39:56 +02:00
Richard Körber
aeff12088f
Update spotbugs and related new warnings ( fixes #157 )
2024-05-10 16:07:41 +02:00
Richard Körber
773cacde4f
Add subdomain validation support (RFC 9444)
2024-03-15 17:18:01 +01:00
Richard Körber
b5a7e00ac3
Use example IPs according to RFC3849/RFC5737
2024-03-13 20:27:12 +01:00
Richard Körber
511954171d
Use en locale for uppercase/lowercase ( fixes #156 )
2024-03-09 16:14:20 +01:00
Richard Körber
bbc057b81f
Align unit test names
2024-02-29 17:06:18 +01:00
Richard Körber
f9d479a8f7
Simplify handling of Retry-After header
2024-02-26 18:26:45 +01:00
Richard Körber
908e11b152
Workaround for ssl.com metadata bug
...
ssl.com requires EAB for account creation, but the metadata's
"externalAccountRequired" property gives "false", indicating that no EAB
is used.
This fix patches the read directory's metadata if the ssl.com provider
is used.
2024-02-26 18:26:45 +01:00
Richard Körber
081e53f137
SSL.com: Add support for ECC and RSA mode
2024-02-26 18:26:45 +01:00
Richard Körber
98ef2b8466
Give instance URL if user action is required
2024-02-26 18:26:45 +01:00
Richard Körber
7c17645212
Add missing ssl.com unit tests
2024-02-26 18:26:45 +01:00
Richard Körber
60342c435f
Add ZeroSSL provider
...
As ZeroSSL makes use of the Retry-After header, the example
implementation has also been changed accordingly.
2024-02-26 18:26:45 +01:00
George Fergadis
9c6eb5e610
Add SSL.com provider
2024-02-20 16:22:39 +01:00
Richard Körber
48c32f612d
Upgrade to draft-ietf-acme-ari-03
2024-02-19 07:44:40 +01:00
Richard Körber
6a4770c23a
Get unique identifier according to draft-ietf-acme-ari-03
2024-02-18 16:16:29 +01:00
Richard Körber
edb7ec83b6
Generic ACME URIs forward query parameters ( #152 )
2024-02-06 18:20:44 +01:00
Richard Körber
216d30b600
Minor JavaDoc change
2023-11-24 11:56:12 +01:00
Richard Körber
67a90df47f
Do not set two CNs
2023-11-24 11:38:29 +01:00
Richard Körber
50a74251e0
setCommonName() sets CN only
2023-11-24 11:18:45 +01:00
Matthew McPherrin
278f9bd57b
Test value changes
...
These are genuine functionality changes, and may represent unexpected
impact. Having two CNs doesn't seem right, but that case is tested so
I'm leaving that here for discussion's sake.
The other test case doesn't have a CN anymore, as expected
2023-11-24 11:05:27 +01:00