v3.0.0

ACMEz v3 simply replaces zap with slog, for wider compatibility and a thinner dependency tree. Now, this package has no dependencies outside of the standard library and extended standard library.

Zap loggers can still be used as slog handlers by way of the go.uber.org/zap/exp/zapslog package: slog.New(zapslog.NewHandler(zapLogger.Core())),

What's Changed

• Remove dependency on zap by @jantytgat in #30

New Contributors

• @jantytgat made their first contribution in #30

Full Changelog: v2.0.3...v3.0.0

v2.0.3

Some minor updates:

• We now include ACME account location as part of the returned the certificate metadata. This is not required by spec, but it is useful for ARI maintenance as well as reference/troubleshooting.
• Minor changes to conform with ari-draft-04 revisions, namely handling errors/invalid responses from ACME servers.

Full Changelog: v2.0.1...v2.0.3

v2.0.1

This patch release enhances ARI support based on downstream implementation in CertMagic, and has a minor fix for email-reply-00.

What's Changed

• Fix email-reply-00 response generation and add basic test by @hslatman in #25
• Improve ARI support

Full Changelog: v2.0.0...v2.0.1

v2.0.0

ACMEz 2.0 makes a slightly breaking change to the high-level acmez package API (the acme package is largely unchanged). The changes allow for more customization of orders/CSRs, such as specifying NotBefore or NotAfter fields (which some CAs support).

As for new features, ACMEz 2.0 supports using ACME for S/MIME certificates (RFC 8823)! Thank you @orangepizza for that contribution!

Several minor changes or fixes have also been made, like adding the account ID to some logs, or updating to the latest ARI draft spec (-03).

ACMEz v1 will not be maintained, so please upgrade to v2.

What's Changed

• Set omitempty on Order.Status field by @commonism in #21
• New v2 API for more customizable orders by @mholt in #23
• support for RFC8823(s/mime) by @orangepizza in #13

New Contributors

• @commonism made their first contribution in #21
• @orangepizza made their first contribution in #13

Full Changelog: v1.2.0...v2.0.0

v2.0.0-beta.2

Fixes the go.mod for /v2

v2.0.0-beta.1

Version 2 beta introduces some breaking change enhancements to the high-level ("porcelain") APIs in the acmez package. The lower-level acme package APIs ("plumbing") remain unbroken and stable, but those who are using the acmez package will find this new API more flexible:

• Ability to customize certificate lifetimes (NotBefore/NotAfter) -- if the CA supports this
• Support for ARI draft 03.

Namely, the new API introduces the OrderParameters struct which allows full customization of the, well, order parameters. We've also simplified the ObtainCertificate*() functions down to just a single ObtainCertificate(), and for the most common, simple cases, ObtainCertificateForSANs() which lightly wraps ObtainCertificate() into a one-liner for most users.

Some of the new exported API is still experimental and subject to change, but hopefully will get stable fairly quickly. Thanks for using acmez!

What's Changed

• Set omitempty on Order.Status field by @commonism in #21
• New v2 API for more customizable orders by @mholt in #23

New Contributors

• @commonism made their first contribution in #21

Full Changelog: v1.2.0...v2.0.0-beta.1

v1.2.0

This release adds CSRSource and GetCertificateFromCSRSource(), which makes it possible to generate the CSR after the order has been created, but before it is finalized. And a couple other minor enhancements.

Thanks to @smallstep for contributing!

What's Changed

• Add ObtainCertificateUsingCSRSource by @hslatman in #19

New Contributors

• @hslatman made their first contribution in #19

Full Changelog: v1.1.1...v1.2.0

v1.1.1

Initial support for draft ARI (ACME Renewal Info) specification, subject to change. Add the CA directory URL to the Certificate struct for convenience in storing with the certificate (not part of specification - but useful for restoring lost ACME client configs).

What's Changed

• Implement ARI draft spec; update dependencies by @mholt in #17

Full Changelog: v1.1.0...v1.1.1

v1.1.0

This release notably adds support for the draft spec of device attestation challenges, complete with examples and utility functions. Thanks to @maraino from Smallstep Labs for contributing this!

We also have a fix for the Retry-After (because I'm a dum-dum).

And then there's enhanced logging, which is always nice.

Enjoy this release! (Go attest with devices!)

What's Changed

• Handle Retry-After in date-time format by @teleclimber in #15
• Device Attestation Challenge by @maraino in #16

New Contributors

• @teleclimber made their first contribution in #15
• @maraino made their first contribution in #16

Full Changelog: v1.0.4...v1.1.0

v1.0.3

Minor bug fix and upgrade dependencies.

What's Changed

• add get order method by @mailbaoer in #9
• Use correct error variable in logging by @dtchanpura in #11

New Contributors

• @mailbaoer made their first contribution in #9
• @dtchanpura made their first contribution in #11

Full Changelog: v1.0.2...v1.0.3