Skip to content

Commit

Permalink
i did a few things worth mentioning
Browse files Browse the repository at this point in the history
promote acme-client stuff to its own dedicated section now that it has
a few more points
  • Loading branch information
botovq committed Apr 6, 2023
1 parent ee75793 commit ccd7668
Showing 1 changed file with 25 additions and 12 deletions.
37 changes: 25 additions & 12 deletions 73.html
Original file line number Diff line number Diff line change
Expand Up @@ -946,6 +946,11 @@ <h3>What's New</h3>
non-optional X.509 notBefore, and X.509 notAfter timestamps.
</ul>

<li>Updated zlib to 1.2.13.

<li>Fixed a long-standing bug in a libreadline header that broke the
interactive Python command line interface.

<li>Switched <a href="https://man.openbsd.org/tftpd.8">tftpd(8)</a> to
default to read-only unless -w is specified for write access (the
previous default).
Expand Down Expand Up @@ -1003,22 +1008,30 @@ <h3>What's New</h3>
<li>Do not test the connection in non-interactive mode. The test
writes characters to the socket which can corrupt data that is
possible piped into nc.
<li>Some refactoring and code cleanup.
</ul>

<li>Further changes:
<li>Improvements in
<a href="https://man.openbsd.org/acme-client.1">acme-client(1)</a>:
<ul>
<li>Added support for newlines inside the alternative names block in
<a
href="https://man.openbsd.org/acme-client.conf.5">acme-client.conf</a>.
<li>Made <a
href="https://man.openbsd.org/acme-client.1">acme-client(1)</a> use
time checks which eliminate time-zone variation.
<li>Encode Subject Alternative Name (SAN) entries before printing in <a
href="https://man.openbsd.org/acme-client.1">acme-client(1)</a>.
<li>Prevent <a
href="https://man.openbsd.org/acme-client.1">acme-client(1)</a> from
leaking an http get request when receiving a redirect without a
<li>Added support for newlines inside the alternative names block in
<a href="https://man.openbsd.org/acme-client.conf.5">acme-client.conf(5)</a>.
<li>Use proper data structures for retrieving subject alternative names in
certificates rather than printing them to a buffer and tokenizing and
parsing the undocumented string.
<li>Simplified, corrected and modernized the use of libcrypto interfaces.
<li>Plugged various memory leaks.
<li>Use <a href="https://man.openbsd.org/ASN1_TIME_to_tm.3">ASN1_TIME_to_tm(3)</a>
instead of a poor man's hand-rolled version of it.
<li>Use <a href="https://man.openbsd.org/acme-client.1">timegm(3)</a>
instead of <a href="https://man.openbsd.org/acme-client.1">mktime(3)</a>
to eliminate time-zone variation.
<li>Encode Subject Alternative Name (SAN) entries before printing.
<li>Prevent <a href="https://man.openbsd.org/acme-client.1">acme-client(1)</a>
from leaking an http get request when receiving a redirect without a
location header.
</ul>

<!-- smtpd -->
<li>Prevented <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>
abort due to a connection from a local, scoped ipv6 address.
Expand Down

0 comments on commit ccd7668

Please sign in to comment.