packages/net/acme-acmesh, branch masterMirror of packages feedhttps://git.openwrt.org/feed/packages/atom?h=master2026-07-04T15:27:50Zacme-common: move nftables rule to hook2026-07-04T15:27:50ZMichael A Cassaniti2026-06-22T03:17:52Zurn:sha1:ba08c8cb51102dc5575575fb72073170b6ef1a4b
The nftables rule in acme-common partially works, but it races against the
acme.sh and uacme client. While the client is performing the renew the rule
is being deleted because the client is run in the background. This change
moves the rule management to the hook instead. While duplicate rules could
be created, the benefits outway the potential costs. It is unknown how many
installations issue/renew multiple certificates.
Signed-off-by: Michael A Cassaniti <michael@cassaniti.id.au>
acme-acmesh: remove duplicated notification on certificate renewal2026-07-01T12:50:15ZJuanyong Dong2026-06-10T13:49:46Zurn:sha1:6334216e040de2470eb54685e4bb209613514a81
fix #29703
Signed-off-by: Juanyong Dong <dongjuanyong@gmail.com>
acme-acmsh: bump acme.sh to 3.1.32026-05-15T09:04:11ZSeo Suchan2026-05-14T04:30:11Zurn:sha1:314a196e6abc541e444926bc1835a8b180bf31a7
update acme.sh version to 3.1.3
Signed-off-by: Seo Suchan <tjtncks@gmail.com>
acme: make 'acme' keyword actually virtual2026-05-15T09:04:11ZSeo Suchan2026-05-13T12:20:51Zurn:sha1:cae6de76c224917a996e0be9c7aa3fbd077c7193
before acme is an empty package that depend either acme-acmesh or uacme.
but this boolean logic in depend ignored by apk itself.
let's make a virtual keyword
witch both acme.sh and uacme provides.
acme.sh is explicit default.
Signed-off-by: Seo Suchan <tjtncks@gmail.com>
uacme: update to 1.8.12026-04-14T07:38:06ZSeo Suchan2026-02-25T19:39:13Zurn:sha1:c13864c0e93d04ac245eda36916309436afdf075
update uacme version to 1.8.1 , release upstream 2026/4/5
Signed-off-by: Seo Suchan <tjtncks@gmail.com>
uacme: use acme-common2026-04-14T07:38:06ZSeo Suchan2026-02-25T19:39:13Zurn:sha1:7f88cc5eb8eee540f57f8dcf544538d3457a6cd7
remake uacme hook scripts to base on acme-common,
and implements helper to able to use acme.sh DNS APIs
Signed-off-by: Seo Suchan <tjtncks@gmail.com>
acme: make virtual package satisfiable by uacme2026-04-14T07:38:06ZSeo Suchan2026-02-25T19:39:12Zurn:sha1:fe3d05090b20d5d45a307df165a098fd02227533
currently acme metapackage only able to satisfied with acme-acmesh,
but make is satisfieable by uacme if it's already installed.
still defaults to acme.sh
Signed-off-by: Seo Suchan <tjtncks@gmail.com>
acme-acme.sh: support --cert-profile option2026-01-03T14:19:18ZNorman Gehrsitz2025-12-31T02:02:10Zurn:sha1:c410b896322248340c79abd783fff66c6d43881b
acme 3.1.2 added a new --cert-profile option to request specific certificates.
This makes it possible to request shortlived six day certificates from Letsencrypt.
Signed-off-by: Norman Gehrsitz <openwrt@gehrsitz.eu>
acme: version bump2025-10-08T18:27:32ZAditya Bhargava2025-10-04T23:29:36Zurn:sha1:a1537c4d22080d644538174d8a7c65cabfd995fe
* Bump acme-common to 1.5.0
* New `abort` command added and logging behaviour improved
* Bump acme-acmesh to 3.1.1-r4
* Fix logging and support killing from procd (`stop` and `abort`) via SIGTERM
Signed-off-by: Aditya Bhargava <rightaditya@gmail.com>
acme.sh: add `abort` service command and improve interactive messages2025-10-08T18:27:32ZAditya Bhargava2025-09-29T22:05:19Zurn:sha1:fbf38647fda3e1577257297d5815714814813abf
For runs started interactively, improve messaging and allow a run to be
aborted with `service acme abort`.
Signed-off-by: Aditya Bhargava <rightaditya@gmail.com>