v2.3.2

[WouterTinus]

Features

• The manual validation plugin can now handle HTTP challenges as well, instead of only DNS challenges. While manual validation is not recommended (especially with certificate lifetimes becoming ever shorter) it is a tool on the belt that's been requested by several users over the years, most recently @pnmsib in https://github.com/orgs/simple-acme/discussions/34
• A new none validation plugin can be selected if your domain(s) have been pre-authorized by the ACME server. This is especially useful for pre-authorized wildcards, where the program would previously force the user to configure one of the DNS based options. Requested by @mattTrustzone in https://github.com/orgs/simple-acme/discussions/27
• It is now possible to use an external script as the source for a renewal. This may be used to request a CSR from a third party tool. Requested by @kentuckyvmdude in How do I run a script to generate a CSR during the Win-Acme task? win-acme/win-acme#2718
• Two new (read only) secret vault plugins are shipped with the program. The script vault calls a script configurable in settings.json to retrieve a secret and is intended as a bridge to connect to third party secret management solutions that do not have native plugin available (yet). The environment vault looks at environment variables and is intended for servers that are under configuration management.
• @jbubik contributed an example script that renews certificates in Sparx ProCloud (Add integration script ImportSparxProCloud.ps1 #29)

Enhancements

• A new settings called DnsPropagationDelay allows users to configure an additional delay after DNS prevalidation is succesful. This allows certain providers with multi-homed IP infrastructure (e.g. GoDaddy, DNS Made Easy) to complete world-wide synchronisation before the challenge answer is submitted.

Bugs

• Renewals that failed once, could also fail on future runs, due to the ARI replacement metadata included with the request. Thanks for the report @ithielnor.
• Configuring Route 53 DNS validation interactively was broken in release v2.1.3.9. Reported by @gp-jraynes in Route 53 plugin still unable to assume role in a different account #47
• Data loss could occur if the drive containing the {ConfigurationPath} (default: C:\) would run out of free space. Reported by @JashanChittesh in Renewals Break Permanently When Disk Runs Full win-acme/win-acme#2765.
• HTTP responses would not be logged if the the Content-Length header was not set by the server

Code

• *.renewal.json files will now contain a reference to a published JSON schema, improving the manual editing experience. Note that not all plugins have their specific schemas published yet, contributions in this are most welcome.
• simple-acme and its plugins are now available via official Chocolatey packages. Previously community members have created unofficial packages, but these ones are automatically created and updated during the release process.
• Activated Dependabot to make GitHub automatically create pull requests when there are third party dependency updates, and automatically merge them if they are minor updates that pass basic checks.
• Updated various third-party dependencies.

---

This discussion was created from the release v2.3.2.