-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 13 Jun 2024 19:19:07 +0200
Source: lacme
Architecture: source
Version: 0.8.0-2+deb11u2
Distribution: bullseye
Urgency: medium
Maintainer: Guilhem Moulin <guilhem@debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Closes: 1072847
Changes:
lacme (0.8.0-2+deb11u2) bullseye; urgency=medium
.
* Backport upstream patches to fix post-issuance validation logic. We avoid
pinning the intermediate certificates in the bundle and instead validate
the leaf certificate with intermediates supplied during issuance as
untrusted (used for chain building only). Only the root certificates are
used as trust anchor.
Not pinning intermediate certificates is in line with Let's Encrypt's
latest recommendations.
Closes: #1072847
* Adjust test suite against current Let's Encrypt staging environment.
Checksums-Sha1:
0d271783d6a808bc85ce44f7883087b348bad183 1924 lacme_0.8.0-2+deb11u2.dsc
850c8a5ab446ef6a0a26b1682d27d2041a4d5e49 20848 lacme_0.8.0-2+deb11u2.debian.tar.xz
55daa909dc6ea4698a6b5b027e95ff188ec2994e 6546 lacme_0.8.0-2+deb11u2_amd64.buildinfo
Checksums-Sha256:
46db26d15c7717c96e26cf10e22df41d8dda6affbf2bcb4eb3bbd2b6ec0b5b44 1924 lacme_0.8.0-2+deb11u2.dsc
bb2acb43e92e0cd48712644535cfceb3cbbbc86c412e30f614b9b719d42a1f2c 20848 lacme_0.8.0-2+deb11u2.debian.tar.xz
fd63350f932bd59c155ba0590a1ee4b9b2c9d2586ef4710d4e23f8b61eecb150 6546 lacme_0.8.0-2+deb11u2_amd64.buildinfo
Files:
d5df633a3c5af23efe9d8448f7cc1ac2 1924 utils optional lacme_0.8.0-2+deb11u2.dsc
ae2a34e62e9ef21a3e42f5ec7791968d 20848 utils optional lacme_0.8.0-2+deb11u2.debian.tar.xz
3805bc773a9fa600769b9fdacc6af2a7 6546 utils optional lacme_0.8.0-2+deb11u2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=f9JI
-----END PGP SIGNATURE-----
Attachment:
pgpnMDLV0VZvO.pgp
Description: PGP signature