<feed xmlns='http://www.w3.org/2005/Atom'>
<title>packages/net/acme-common, branch master</title>
<subtitle>Mirror of packages feed</subtitle>
<id>https://git.openwrt.org/feed/packages/atom?h=master</id>
<link rel='self' href='https://git.openwrt.org/feed/packages/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/feed/packages/'/>
<updated>2026-07-04T15:27:50Z</updated>
<entry>
<title>acme-common: version bump to 1.5.3 after adding nftables hooks</title>
<updated>2026-07-04T15:27:50Z</updated>
<author>
<name>Michael A Cassaniti</name>
</author>
<published>2026-07-03T23:35:19Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/feed/packages/commit/?id=3a1eab7c6b77b17394833b67efa95052a9e78e6a'/>
<id>urn:sha1:3a1eab7c6b77b17394833b67efa95052a9e78e6a</id>
<content type='text'>
Also bumped PKG_RELEASE of affected packages

Signed-off-by: Michael A Cassaniti &lt;michael@cassaniti.id.au&gt;
</content>
</entry>
<entry>
<title>acme-common: move nftables rule to hook</title>
<updated>2026-07-04T15:27:50Z</updated>
<author>
<name>Michael A Cassaniti</name>
</author>
<published>2026-06-22T03:17:52Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/feed/packages/commit/?id=ba08c8cb51102dc5575575fb72073170b6ef1a4b'/>
<id>urn:sha1:ba08c8cb51102dc5575575fb72073170b6ef1a4b</id>
<content type='text'>
The nftables rule in acme-common partially works, but it races against the
acme.sh and uacme client. While the client is performing the renew the rule
is being deleted because the client is run in the background. This change
moves the rule management to the hook instead. While duplicate rules could
be created, the benefits outway the potential costs. It is unknown how many
installations issue/renew multiple certificates.

Signed-off-by: Michael A Cassaniti &lt;michael@cassaniti.id.au&gt;
</content>
</entry>
<entry>
<title>acme-common: migrate uacme config paramaters</title>
<updated>2026-04-14T07:38:06Z</updated>
<author>
<name>Seo Suchan</name>
</author>
<published>2026-02-25T19:39:13Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/feed/packages/commit/?id=2da557bbf516e43e7927fca4042d54d72d719cca'/>
<id>urn:sha1:2da557bbf516e43e7927fca4042d54d72d719cca</id>
<content type='text'>
migrate old uacme specific config parameters into acme-common format.

Signed-off-by: Seo Suchan &lt;tjtncks@gmail.com&gt;
</content>
</entry>
<entry>
<title>acme: make virtual package satisfiable by uacme</title>
<updated>2026-04-14T07:38:06Z</updated>
<author>
<name>Seo Suchan</name>
</author>
<published>2026-02-25T19:39:12Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/feed/packages/commit/?id=fe3d05090b20d5d45a307df165a098fd02227533'/>
<id>urn:sha1:fe3d05090b20d5d45a307df165a098fd02227533</id>
<content type='text'>
currently acme metapackage only able to satisfied with acme-acmesh,
but make is satisfieable by uacme if it's already installed.
still defaults to acme.sh

Signed-off-by: Seo Suchan &lt;tjtncks@gmail.com&gt;
</content>
</entry>
<entry>
<title>acme-acme.sh: support --cert-profile option</title>
<updated>2026-01-03T14:19:18Z</updated>
<author>
<name>Norman Gehrsitz</name>
</author>
<published>2025-12-31T02:02:10Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/feed/packages/commit/?id=c410b896322248340c79abd783fff66c6d43881b'/>
<id>urn:sha1:c410b896322248340c79abd783fff66c6d43881b</id>
<content type='text'>
acme 3.1.2 added a new --cert-profile option to request specific certificates.
This makes it possible to request shortlived six day certificates from Letsencrypt.

Signed-off-by: Norman Gehrsitz &lt;openwrt@gehrsitz.eu&gt;
</content>
</entry>
<entry>
<title>acme: version bump</title>
<updated>2025-10-08T18:27:32Z</updated>
<author>
<name>Aditya Bhargava</name>
</author>
<published>2025-10-04T23:29:36Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/feed/packages/commit/?id=a1537c4d22080d644538174d8a7c65cabfd995fe'/>
<id>urn:sha1:a1537c4d22080d644538174d8a7c65cabfd995fe</id>
<content type='text'>
* Bump acme-common to 1.5.0
  * New `abort` command added and logging behaviour improved
* Bump acme-acmesh to 3.1.1-r4
  * Fix logging and support killing from procd (`stop` and `abort`) via SIGTERM

Signed-off-by: Aditya Bhargava &lt;rightaditya@gmail.com&gt;
</content>
</entry>
<entry>
<title>acme.sh: add `abort` service command and improve interactive messages</title>
<updated>2025-10-08T18:27:32Z</updated>
<author>
<name>Aditya Bhargava</name>
</author>
<published>2025-09-29T22:05:19Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/feed/packages/commit/?id=fbf38647fda3e1577257297d5815714814813abf'/>
<id>urn:sha1:fbf38647fda3e1577257297d5815714814813abf</id>
<content type='text'>
For runs started interactively, improve messaging and allow a run to be
aborted with `service acme abort`.

Signed-off-by: Aditya Bhargava &lt;rightaditya@gmail.com&gt;
</content>
</entry>
<entry>
<title>acme.sh: move to procd to ensure logging gets to syslog</title>
<updated>2025-10-08T18:27:32Z</updated>
<author>
<name>Aditya Bhargava</name>
</author>
<published>2025-09-22T07:56:17Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/feed/packages/commit/?id=76b676e4ebbb4b13dd476c626c56f72b44564e7e'/>
<id>urn:sha1:76b676e4ebbb4b13dd476c626c56f72b44564e7e</id>
<content type='text'>
acme.sh error output never made it to the syslog, so:
* Add procd setup to catch stderr
* Make sure a message goes to syslog if acme.sh dies due to SIGINT

Signed-off-by: Aditya Bhargava &lt;rightaditya@gmail.com&gt;
</content>
</entry>
<entry>
<title>acme-common: support listen_port option</title>
<updated>2025-10-02T11:14:11Z</updated>
<author>
<name>Vladimir Kochnev</name>
</author>
<published>2025-10-01T17:48:01Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/feed/packages/commit/?id=9f4e7726ec7df3a4388541a66895ed8495548dd1'/>
<id>urn:sha1:9f4e7726ec7df3a4388541a66895ed8495548dd1</id>
<content type='text'>
listen_port option allows to redefine the default 80/443 port
used in standalone/alpn challenges.

It's also useful for other types of challenges which require
accepting a connection on some TCP port so we need to expose
it via nft as well.

Signed-off-by: Vladimir Kochnev &lt;hashtable@yandex.ru&gt;
</content>
</entry>
<entry>
<title>acme-common: cleanup acme start crontab migration</title>
<updated>2025-09-03T21:25:08Z</updated>
<author>
<name>Satadru Pramanik, DO, MPH, MEng</name>
</author>
<published>2025-09-03T15:23:23Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/feed/packages/commit/?id=b3098fe68a0559b8a8958f2ec1a537d7468ad72c'/>
<id>urn:sha1:b3098fe68a0559b8a8958f2ec1a537d7468ad72c</id>
<content type='text'>
The '/etc/init.d/acme start' crontab migration
should also delete the existing
'/etc/init.d/acme start' line.

Otherwise, on every sysupgrade that carries
forward existing configurations, a new
'0 0 * * * /etc/init.d/acme renew' line is
added to the crontab.

Furthermore, do not add an 'acme renew' crontab
line if it already exists.

Signed-off-by: Satadru Pramanik, DO, MPH, MEng &lt;satadru@gmail.com&gt;
</content>
</entry>
</feed>
