CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

security/acme.sh3.1.6

ACME protocol client written in shell

Maintainer
dvl@FreeBSD.org
Packages
acme.sh 3.1.6
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://github.com/acmesh-official/acme.sh
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range this version has left.

Commits (66)

Dan Langille (dvl) · 3.1.6
security/acme.sh: Update to 3.1.5

re: https://github.com/acmesh-official/acme.sh/releases/tag/3.1.5
7d8a2b66ca
Dan Langille (dvl) · 3.1.4
security/acme.sh: Update to 3.1.4

re: https://github.com/acmesh-official/acme.sh/releases/tag/3.1.4
891f2ee786
Po-Chuan Hsieh (sunpoet) · 3.1.3_1
security/acme.sh: Update WWW and add LICENSE_FILE

PR:		295144
Approved by:	maintainer (timeout, 16 days)
218c90017d
Dan Langille (dvl) · 3.1.3_1
security/acme.sh: Fix plist errors

Reported by:	Cy Schubert
Fixes:	439b1870ab
e6fbab288c
Dan Langille (dvl) · 3.1.3
security/acme.sh: Update to 3.1.3

re: https://github.com/acmesh-official/acme.sh/releases/tag/3.1.3
439b1870ab
Dan Langille (dvl) · 3.1.2
security/acme.sh: Update to 3.1.2

re: https://github.com/acmesh-official/acme.sh/releases/tag/3.1.2

WIth this update, the temporary patch added during
1c0a8f34bb0558176e91835f88d1733e3c4d5ee3 is no longer required.
9f788061af
Dan Langille (dvl) · 3.1.1_1
security/acme.sh: Apply upstream patch for tr

This fixes a change to "tr a-z A-Z" behaviour that appeared in
FreeBSD 11.*, causing tr to output unexpected garbage, not
uppercasing a string.

re: * https://github.com/acmesh-official/acme.sh/issues/6511#issuecomment-3282521860
    * https://github.com/acmesh-official/acme.sh/commit/a1ea2a5aa6a63c1c99daffc66c1463e3a2ac88ab

PR:		289444
1c0a8f34bb
Dan Langille (dvl) · 3.1.1
security/acme.sh: Update to 3.1.1

re: https://github.com/acmesh-official/acme.sh/releases/tag/3.1.1
f2a75cc5b0
Dan Langille (dvl) · 3.1.0
security/acme.sh: Update to 3.1.0

Minor fixes: https://github.com/acmesh-official/acme.sh/releases/tag/3.1.0
cd957a097b
Dan Langille (dvl) · 3.0.9
security/acme.sh: Update to 3.0.9

Minor, just for nsupdate hook

https://github.com/acmesh-official/acme.sh/releases/tag/3.0.9
510b3837a6
Dan Langille (dvl) · 3.0.8
security/acme.sh: Update to 3.8.0

https://github.com/acmesh-official/acme.sh/releases/tag/3.0.8

See diff for changes to pkg-plist
600b4959b2
Dan Langille (dvl) · 3.0.7_2
security/acme.sh: fix 'pkg -r' installation

PR:		280916
a38bf998b9
Dan Langille (dvl) · 3.0.7_1
security/acme.sh: fix post-install script

The install script contained a syntax error which caused the log file
to not be created.

While here:

* rename script from pkg-install to pkg-post-install
* include another crontab example which provides additional contet to
  logging.

PR:		274348
678db807ed
Dan Langille (dvl) · 3.0.7
security/acme.sh: Update to 3.0.7

re: https://github.com/acmesh-official/acme.sh/releases/tag/3.0.7

Thanks to Ken for telling me about this update.
e77844cbb7
Dan Langille (dvl) · 3.0.6_1
security/acme.sh: create the log file

If the log file does not exist on pkg-install, create it with the
expected permissions

PR:		264789
beb96db3ca
Dan Langille (dvl) · 3.0.6
security/acme.sh: Fix remote exec issue

re: https://github.com/acmesh-official/acme.sh/releases/tag/3.0.6
47a16e63dc
Dan Langille (dvl) · 3.0.5_1
security/acme.sh: Fix up some install issues

Don't install cronjob to /usr/local/etc/cron.d/
There is no concept of sample files in this directory. Everything is active.
Instead, install to /usr/local/share/examples/acme.sh and let the user
copy it over.

In the cronjob itself, specify the acme user. This was previously omitted
and the job would not run.

Install the sample newsyslog file to /usr/local/etc/newsyslog.conf.d - this
was installing to /usr/local/etc/newsyslog.d/acme.sh

Add an update cluse to pkg-message mentioning the newsyslog issue.

None of these changes should break existing installs.
34da3d7161
Dan Langille (dvl) · 3.0.5
security/acme.sh: Update to 3.0.5

re: https://github.com/acmesh-official/acme.sh/releases/tag/v3.0.5

While here, change from Neilpang to acmesh-official since it redirects.
45e1885701
Dan Langille (dvl) · 3.0.4_2
security/acme.sh: Move cron example to EXAMPLESDIR

Instead of installing the sample crontab to etc/cron.d, install it to
EXAMPLESDIR

etc/cron.d/acme.sh will still be installed (if not present) but now
contains no active lines and more complete instructions.

Both the cron the newsyslog examples are only installed if the EXAMPLES
config option is ON (default).

Reported by:	bapt
375881c9d3
Dan Langille (dvl) · 3.0.4_1
security/acme.sh: Change crontab and add newsyslog

This update may break your install if you were using a symlink to
%%EXAMPLESDIR%%/acme.sh.conf - that file is no longer installed. Instead,
a log rotation configuration is now installed to etc/cron.d/acme.sh.sample
you should modify etc/cron.d/acme.sh to needs.

The port now installs a log rotation file to etc/newsyslog.d/acme.sh.sample
and you you should update etc/newsyslog.d/acme.sh to suit your needs.
This file has long been part of the port, but was never installed.

Neither the log rotation nor the crontab are active until you remove the
comments.

While here, several portclippy updates

Reported by:	marck
318400ae02
Stefan Eßer (se) · 3.0.4
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.0.4
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dan Langille (dvl) · 3.0.4
security/acme.sh: Update to 3.0.4

Now supports:

* Google Public CA
* NotBefore and NotAfter fields

re: https://github.com/acmesh-official/acme.sh/releases/tag/3.0.4
    https://github.com/acmesh-official/acme.sh/releases/tag/3.0.3
d65fed5f97
Dan Langille (dvl) · 3.0.2
security/acme.sh: Update to 3.0.2

re: https://github.com/acmesh-official/acme.sh/releases/tag/3.0.2
720efe0a00
Dan Langille (dvl) · 3.0.1
security/acme.sh: Update to 3.0.1

More updates for DST root expiring issues

re https://github.com/acmesh-official/acme.sh/releases/tag/3.0.1
a7ff36c516
Dan Langille (dvl) · 3.0.0
security/acme.sh: update to 3.0.0

Support multiple CAs

* Zerossl.com is set a default CA now:
    https://github.com/acmesh-official/acme.sh/wiki/Change-default-CA-to-ZeroSSL
* SSL.com is supported now:
    https://github.com/acmesh-official/acme.sh/wiki/SSL.com-CA
* Add more retry logic for unstable network connections.
* More dns apis are aded.
* Bug fixes.
14d0e456fd
Dan Langille (dvl) · 2.9.0_1
security/acme.sh: ensure sed -i works in examples/acme.sh/dnsapi/dns_nsd.sh

PR:		256664
Reported by:	Freddy DISSAUX <dsx@bsdsx.fr>
f5536c9ffd
Dan Langille (dvl) · 2.9.0
security/acme.sh: update to 2.9.0

This removes support for ACME v1

re: https://github.com/acmesh-official/acme.sh/releases/tag/2.9.0
a2c6793875
Dan Langille (dvl) · 2.8.9
security/acme.sh: update to 2.8.9

* fixed --preferred-chain
* more DNS APIs are supported.
* bug fixes.

https://github.com/acmesh-official/acme.sh/releases/tag/2.8.9
453d59bfa7
Mathieu Arnold (mat) · 2.8.8
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.8.8
Remove # $FreeBSD$ from Makefiles.
305f148f48
Dan Langille (dvl) · 2.8.8
Update to 2.8.8

* More dns apis added
* Bug fixes.
* Move CI checks from travis-ci to Github Actions by https://vmactions.org

https://github.com/acmesh-official/acme.sh/releases/tag/2.8.8
86ca213bde
Dan Langille (dvl) · 2.8.7
Update to 2.8.7

* Support External Account Binding(EAB)
* Support ZeroSSL.com CA
* Support preferred-chain
* More dns api support
* Adds Docker multi-arch build support
90cdc26376
Dan Langille (dvl) · 2.8.6_2
Enable acme.sh to recognize sane sudo commands besides /bin/su and /bin/bash

PR:		248434
Submitted by:	John W. O'Brien <john@saltant.com>
2dd855bc86
Dan Langille (dvl) · 2.8.6_1
Include missing plugin scripts

Thanks to Frank Wall <fw@moov.de> for the patch.

PR:		248425
Submitted by:	phedoreanu <phedoreanu@wearehackerone.com>
MFH:		2020Q3
7d693c4323
Dan Langille (dvl) · 2.8.6
Update to 2.8.6

* bug fixes
* and new dns providers.

re: https://github.com/acmesh-official/acme.sh/releases/tag/2.8.6
8cfb859234
Dan Langille (dvl) · 2.8.5_1
Use EXAMPLES properly

Now you don't have to install them if you don't want them.  This include
these directorys:

/var/db/acme/.acme.sh/deploy
/var/db/acme/.acme.sh/dnsapi
/var/db/acme/.acme.sh/notify

Reported by:	mat
Reviewed by:	sunpoet
Differential Revision:	https://reviews.freebsd.org/D23209
ba9ed89db9
Dan Langille (dvl) · 2.8.5
Update to 2.8.5

bug fix: fix auto upgrade error message.

re: https://github.com/Neilpang/acme.sh/releases/tag/2.8.5

2.8.4 was skipped, but covered:

* Avoiding autoupdate by checking master hash value.
* more dns api support
* adapt recent letsencrypt ca http headers changes.
* bugs fixes.

re: https://github.com/Neilpang/acme.sh/releases/tag/2.8.4

While here, add in a lot of things missed in previous version of this port.
Look in share/examples/acme.sh/deploy,dnsapi,notify

Sorry about that.
95ddc7de14
Dan Langille (dvl) · 2.8.3
Update to 2.8.3

Letsencrypt CA recent changed the CDN provider, which resulted in hanging
issues. Any downstream package should update. This is important.

re: https://github.com/Neilpang/acme.sh/releases/tag/2.8.3

Submitted by:	Ken (via private email)
ca1933b905
Dan Langille (dvl) · 2.8.2_1
Fix build for IDN when not using BINDTOOLS by correcting the RUN_DEPENDS:

Remove: idn2:dns/idnkit2
Add:    idn2:dns/libidn2

I believe this is a case of incorrect RUN_DEPENDS.

The problem does not appear when using BINDTOOLS because that option pulls
in libidn2 via dns/bind-tools

Reported by:	Russian <russian@russerver.org>
MFH:		2019Q3
6fdba18b79
Mathieu Arnold (mat) · 2.8.2_1
Convert to UCL & cleanup pkg-message (categories s)
bc89cd3d2c
Dan Langille (dvl) · 2.8.2_1
Include the notify directory, for all those new features mentioned in the previous commit.

Reported by:	Ken
a598e9563c
Dan Langille (dvl) · 2.8.2
Update to 2.8.2

* Support notifications for renewal: email, mailgun, sendgrid, IFTTT, pushover
  etc. https://github.com/Neilpang/acme.sh/wiki/notify
* add deploy hook to docker containers:
  https://github.com/Neilpang/acme.sh/wiki/deploy-to-docker-containers
* dns api: Schlundtech, NLnetLabs , acmeproxy, durabledns, Active24, MaraDNS,
  regru, jdcloud.com(?????????), Vultr, hexonet
* Support cloudflare new dns api Token format
* bug fixes.

re https://github.com/Neilpang/acme.sh/releases/tag/2.8.2
838a7a339c
Dan Langille (dvl) · 2.8.1_2
Remove references to ${LOCALBASE}/bin/ - they are redudant

Credit to:    adamw
4be7c8cc4a
Dan Langille (dvl) · 2.8.1_1
Add IDN support

PR:		238237
Submitted by:	takefu@airport.fm
47f89a7b1a
Dan Langille (dvl) · 2.8.1
Upgrade to 2.8.1

* Use letsencrypt v2 api as default.
* Use dns over tls to check domain status.
* Support Windows native taskschuler for cronjob.
* fix IDN name issues.
* fix other issues.

re https://github.com/Neilpang/acme.sh/releases/tag/2.8.1
def37202a5
Dan Langille (dvl) · 2.8.0
Upgrade to 2.8.0 Add a C to the syslog.conf example and comment it out Make this pass testport by moving stuff from pkg-install into the Makefile

PR:		228829,236041,228791
Submitted by:	Lapo Luchini <lapo@lapo.it>,Frank Wall <fw@moov.de>,Mark Felder <feld@FreeBSD.org>
ff59172aad
Ben Woods (woodsb02) · 2.7.9_1
security/acme.sh: Use .conf suffix for /usr/local/etc/newsyslog.conf.d/

Rename files intended for installation to /usr/local/etc/newsyslog.conf.d/
to end with a '.conf' suffix.

Proposed changes to /etc/newsyslog.conf will only include files from the
/usr/local/etc/newsyslog.conf.d/ directory which end with '.conf' and do
not beginning with a '.' character. https://reviews.freebsd.org/D17086

Approved by:	dvl (maintainer)
Differential Revision:	https://reviews.freebsd.org/D17092
80a7367942
Dan Langille (dvl) · 2.7.9
Update to 2.7.9

PR:		229884
Submitted by:	brnrd
ee1ae37b22
Dan Langille (dvl) · 2.7.8
Upgrade to 2.7.8

From the author:

* fix bugs in 2.7.7, Strongly recommended to upgrade from 2.7.7.
* more apis are fixed for acme v2 wildcard certs.
* New dns api: KingHost (https://www.kinghost.com.br/) and Zilore (https://zilore.com)
34063c0282