mod_md v2.6.11

• New directive MDHttpProxyCACertificateFile. [Michael Kaufmann]
• OpenSSL 4 compatibility.
• Allow the MDHttpProxy setting to be set per MDomain. The global MDHttpProxy setting is used by default. [Michael Kaufmann]

mod_md v2.6.10

• Fix issue #420 by ignoring job.json files that claim to have completely finished a certificate renewal, but have not produced the necessary result files.

mod_md v2.6.9

• Pebble 2.9+ reports another error when terms of service agreement is not set.
  Treating all "userActionRequired" errors as permanent now.

mod_md v2.6.8

• Fix the ARI related replaces property in ACME order creation to only
  be used when the CA supports ARI and it is enabled in the menu config.
  Fixes #406.
• Fix compatibility with APR versions before 1.6.0 which do not have
  apr_cstr_casecmp and should use apr_strnatcasecmp instead.

mod_md v2.6.7

• Fix a regression in MDStapleOthers, broken in v2.6.0, that made it no longer apply, no matter the configuration.

mod_md v2.6.6

• Fix a small memory leak when using OpenSSL's BIGNUMs. [Theo Buehler]
• Fix reuse of curl easy handles by resetting them. [Michael Kaufmann]

mod_md v2.6.5

• Hardening: when build with OpenSSL older than 1.0.2 or old libressl versions,
  the parsing of ASN.1 time strings did not do a length check.
• Hardening: when reading back OCSP responses stored in the local JSON store,
  missing 'valid' key led to uninitialized values, resulting in wrong
  refresh behaviour.

mod_md v2.6.4

• New directive MDInitialDelay, controlling how longer to wait after
  a server restart before checking certificates for renewal.
  [Michael Kaufmann]

mod_md v2.6.2

• Fix error retry delay calculation to not already doubling the wait on the first error.

mod_md v2.6.1

• Increasing default MDRetryDelay to 30 seconds to generate less bursty
  traffic on errored renewals for the ACME CA. This leads to error retries
  of 30s, 1 minute, 2, 4, etc. up to daily attempts.
• Checking that configuring MDRetryDelay will result in a positive
  duration. A delay of 0 is not accepted.
• Fix a bug in checking Content-Type of responses from the ACME server.