Skip to content
This repository was archived by the owner on Jun 9, 2026. It is now read-only.

Releases: icing/mod_md

mod_md v2.4.26

03 Jan 10:14

Choose a tag to compare

  • Using OCSP stapling information to trigger certificate renewals. Proposed
    by Fraser Tweedale.
  • Added directive MDCheckInterval to control how often the server checks
    for detected revocations. Added proposals for configurations in the
    README.md chapter "Revocations".
  • OCSP stapling: accept OCSP responses without a nextUpdate entry which is
    allowed in RFC 6960. Treat those as having an update interval of 12 hours.
    Added by @frasertweedale.
  • Adapt OpenSSL usage to changes in their API. By Yann Ylavic.

mod_md v2.4.25

31 Oct 10:13

Choose a tag to compare

  • Fix the reported "until" validity of a certificate in the status handler.
    [Rainer Jung]
  • Fix possible NULL deref when logging the error that an authentication
    resource could not be retrieved from the ACME server. Refs #324

mod_md v2.4.24

16 Aug 11:27

Choose a tag to compare

  • Fixed passing of the server environment variables to programs started via
    MDMessageCmd and MDChallengeDns01 on *nix system. See #319.

mod_md v2.4.23

14 Jul 11:25

Choose a tag to compare

  • New directive MDMatchNames all|servernames to allow more control over how
    MDomains are matched to VirtualHosts.
  • New directive MDChallengeDns01Version. Setting this to 2 will provide
    the command also with the challenge value on teardown invocation. In version
    1, the default, only the setup invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.

mod_md v2.4.22

12 Jul 08:56

Choose a tag to compare

  • For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
    This should resolve #301.

mod_md v2.4.21

02 Mar 17:22

Choose a tag to compare

  • MDChallengeDns01 can now be configured for individual domains.
    Using PR from Jérôme Billiras (@bilhackmac) and adding test case and fixing proper working
  • Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.

mod_md v2.4.20

16 Nov 11:30

Choose a tag to compare

  • Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.

mod_md v2.4.19

25 Aug 13:13

Choose a tag to compare

  • restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that. Fixes #293.

mod_md v2.4.18

15 Jul 11:27

Choose a tag to compare

  • New directive MDStoreLocks that can be used on cluster setups with
    a shared file system for MDStoreDir to order activation of renewed
    certificates when several cluster nodes are restarted at the same time.
    Store locks are not enabled by default.

mod_md v2.4.17

02 Jun 09:25

Choose a tag to compare

  • A bug was fixed that caused very large MDomains with the combined DNS
    names exceeding ~7k to fail, as request bodies would contain partially
    wrong data from uninitialized memory. This would have appeared as
    failure in signing-up/renewing such configurations.
    This was reported by Ronald Crane (Zippenhop LLC).