Compare commits

...

8 Commits

Author SHA1 Message Date
LinuxServer-CI 32c26223dd Bot Updating Package Versions 2026-06-01 16:09:07 +00:00
aptalca 60161a3baf Merge pull request #613 from linuxserver/cert-check
remove obsolete old cert check logic
2026-06-01 12:02:02 -04:00
aptalca 321837be0d remove obsolete old cert check logic 2026-06-01 11:04:38 -04:00
LinuxServer-CI c371973f5f Bot Updating Package Versions 2026-05-30 06:29:09 +00:00
LinuxServer-CI bc18a403ba Bot Updating Package Versions 2026-05-23 06:17:54 +00:00
LinuxServer-CI b104a66e06 Bot Updating Package Versions 2026-05-16 06:00:50 +00:00
LinuxServer-CI 80bc4b4243 Bot Updating Package Versions 2026-05-14 20:15:20 +00:00
LinuxServer-CI 7cf7838a87 Bot Updating Package Versions 2026-05-14 19:54:29 +00:00
4 changed files with 42 additions and 52 deletions
+1
View File
@@ -433,6 +433,7 @@ Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64
## Versions
* **01.06.26:** - Remove obsolete old cert check logic.
* **23.01.26:** - Reorder init to fix proxy conf version checks.
* **21.12.25:** - Add support for hetzner-cloud dns validation.
* **04.11.25:** - Switch default Gandi credentials from API Key to Token, allow DNS propagation time for Azure DNS plugin.
+40 -40
View File
@@ -23,8 +23,8 @@ azure-mgmt-dns 9.0.0 python
backports-tarfile 1.2.0 python
bash 5.2.37-r0 apk
beautifulsoup4 4.14.3 python
boto3 1.43.6 python
botocore 1.43.6 python
boto3 1.43.18 python
botocore 1.43.18 python
brotli-libs 1.1.0-r2 apk
bs4 0.0.2 python
busybox 1.37.0-r20 apk
@@ -79,15 +79,15 @@ certbot-dns-standalone 1.2.1 python
certbot-dns-transip 0.5.2 python
certbot-dns-vultr 1.1.0 python
certbot-plugin-gandi 1.5.0 python
certifi 2026.4.22 python
certifi 2026.5.20 python
cffi 2.0.0 python
charset-normalizer 3.4.7 python
cli UNKNOWN binary
cli-32 UNKNOWN binary
cli-64 UNKNOWN binary
cli-arm64 UNKNOWN binary
cloudflare 5.1.0 python
composer 2.9.7 binary
cloudflare 5.2.0 python
composer 2.10.0 binary
configargparse 1.7.5 python
configobj 5.0.9 python
coreutils 9.7-r1 apk
@@ -122,8 +122,8 @@ gnupg-utils 2.4.9-r0 apk
gnupg-wks-client 2.4.9-r0 apk
gnutls 3.8.13-r0 apk
google-api-core 2.30.3 python
google-api-python-client 2.196.0 python
google-auth 2.52.0 python
google-api-python-client 2.197.0 python
google-auth 2.53.0 python
google-auth-httplib2 0.4.0 python
googleapis-common-protos 1.75.0 python
gpg 2.4.9-r0 apk
@@ -142,7 +142,7 @@ httplib2 0.31.2 python
httpx 0.28.1 python
icu-data-en 76.1-r1 apk
icu-libs 76.1-r1 apk
idna 3.14 python
idna 3.17 python
importlib-metadata 8.7.1 python
inotify-tools 4.23.9.0-r0 apk
inotify-tools-libs 4.23.9.0-r0 apk
@@ -157,7 +157,7 @@ jinja2 3.1.6 python
jmespath 1.1.0 python
josepy 2.2.0 python
jq 1.8.1-r0 apk
jsonpickle 4.1.1 python
jsonpickle 4.1.2 python
libapk2 2.14.9-r3 apk
libassuan 2.5.7-r0 apk
libattr 2.5.2-r2 apk
@@ -191,7 +191,7 @@ libncursesw 6.5_p20250503-r0 apk
libnftnl 1.2.9-r0 apk
libpanelw 6.5_p20250503-r0 apk
libpng 1.6.57-r0 apk
libpq 17.9-r0 apk
libpq 17.10-r0 apk
libproc2 4.0.4-r3 apk
libpsl 0.21.5-r3 apk
libsasl 2.1.28-r8 apk
@@ -210,7 +210,7 @@ libxau 1.0.12-r0 apk
libxcb 1.17.0-r0 apk
libxdmcp 1.1.5-r1 apk
libxext 1.3.6-r2 apk
libxml2 2.13.9-r0 apk
libxml2 2.13.9-r1 apk
libxpm 3.5.19-r0 apk
libxslt 1.1.43-r3 apk
libxt 1.3.1-r0 apk
@@ -220,14 +220,14 @@ libzip 1.11.4-r0 apk
linux-pam 1.7.0-r4 apk
logrotate 3.21.0-r1 apk
loopialib 0.2.0 python
lxml 6.1.0 python
lxml 6.1.1 python
lz4-libs 1.10.0-r0 apk
markupsafe 3.0.3 python
memcached 1.6.32-r0 apk
mock 5.2.0 python
more-itertools 10.8.0 python
mpdecimal 4.0.1-r0 apk
msal 1.36.0 python
msal 1.37.0 python
msal-extensions 1.3.1 python
musl 1.2.5-r12 apk
musl-utils 1.2.5-r12 apk
@@ -235,26 +235,26 @@ nano 8.4-r0 apk
ncurses-terminfo-base 6.5_p20250503-r0 apk
netcat-openbsd 1.229.1-r0 apk
nettle 3.10.2-r0 apk
nghttp2-libs 1.65.0-r0 apk
nginx 1.28.3-r0 apk
nginx-mod-devel-kit 1.28.3-r0 apk
nginx-mod-http-brotli 1.28.3-r0 apk
nginx-mod-http-dav-ext 1.28.3-r0 apk
nginx-mod-http-echo 1.28.3-r0 apk
nginx-mod-http-fancyindex 1.28.3-r0 apk
nginx-mod-http-geoip2 1.28.3-r0 apk
nginx-mod-http-headers-more 1.28.3-r0 apk
nginx-mod-http-image-filter 1.28.3-r0 apk
nginx-mod-http-perl 1.28.3-r0 apk
nginx-mod-http-redis2 1.28.3-r0 apk
nginx-mod-http-set-misc 1.28.3-r0 apk
nginx-mod-http-upload-progress 1.28.3-r0 apk
nginx-mod-http-xslt-filter 1.28.3-r0 apk
nginx-mod-mail 1.28.3-r0 apk
nginx-mod-rtmp 1.28.3-r0 apk
nginx-mod-stream 1.28.3-r0 apk
nginx-mod-stream-geoip2 1.28.3-r0 apk
nginx-vim 1.28.3-r0 apk
nghttp2-libs 1.69.0-r0 apk
nginx 1.28.3-r2 apk
nginx-mod-devel-kit 1.28.3-r2 apk
nginx-mod-http-brotli 1.28.3-r2 apk
nginx-mod-http-dav-ext 1.28.3-r2 apk
nginx-mod-http-echo 1.28.3-r2 apk
nginx-mod-http-fancyindex 1.28.3-r2 apk
nginx-mod-http-geoip2 1.28.3-r2 apk
nginx-mod-http-headers-more 1.28.3-r2 apk
nginx-mod-http-image-filter 1.28.3-r2 apk
nginx-mod-http-perl 1.28.3-r2 apk
nginx-mod-http-redis2 1.28.3-r2 apk
nginx-mod-http-set-misc 1.28.3-r2 apk
nginx-mod-http-upload-progress 1.28.3-r2 apk
nginx-mod-http-xslt-filter 1.28.3-r2 apk
nginx-mod-mail 1.28.3-r2 apk
nginx-mod-rtmp 1.28.3-r2 apk
nginx-mod-stream 1.28.3-r2 apk
nginx-mod-stream-geoip2 1.28.3-r2 apk
nginx-vim 1.28.3-r2 apk
npth 1.8-r0 apk
oniguruma 6.9.10-r0 apk
openssl 3.5.6-r0 apk
@@ -315,13 +315,13 @@ php84-xmlwriter 8.4.16-r0 apk
php84-xsl 8.4.16-r0 apk
php84-zip 8.4.16-r0 apk
pinentry 1.3.1-r0 apk
pip 26.1.1 python
pip 26.1.2 python
pkb-client 2.3.1 python
platformdirs 4.4.0 python
popt 1.19-r4 apk
procps-ng 4.0.4-r3 apk
proto-plus 1.28.0 python
protobuf 7.34.1 python
protobuf 7.35.0 python
pyacmedns 0.4 python
pyasn1 0.6.3 python
pyasn1-modules 0.4.2 python
@@ -329,7 +329,7 @@ pyc 3.12.13-r0 apk
pycparser 3.0 python
pydantic 2.13.4 python
pydantic-core 2.46.4 python
pyjwt 2.12.1 python
pyjwt 2.13.0 python
pynamecheap 0.0.3 python
pyopenssl 26.2.0 python
pyotp 2.9.0 python
@@ -343,18 +343,18 @@ python3-pyc 3.12.13-r0 apk
python3-pycache-pyc0 3.12.13-r0 apk
pyyaml 6.0.3 python
readline 8.2.13-r1 apk
requests 2.33.1 python
requests 2.34.2 python
requests-file 3.0.1 python
requests-mock 1.12.1 python
requests-unixsocket 0.4.1 python
s3transfer 0.17.0 python
s3transfer 0.18.0 python
scanelf 1.3.8-r1 apk
setuptools 82.0.1 python
shadow 4.17.3-r0 apk
six 1.17.0 python
skalibs-libs 2.14.4.0-r0 apk
sniffio 1.3.1 python
soupsieve 2.8.3 python
soupsieve 2.8.4 python
sqlite-libs 3.49.2-r1 apk
ssl_client 1.37.0-r20 apk
tiff 4.7.1-r0 apk
@@ -373,5 +373,5 @@ whois 5.6.3-r0 apk
xz-libs 5.8.3-r0 apk
zipp 3.23.0 python
zlib 1.3.2-r0 apk
zope-interface 8.4 python
zope-interface 8.5 python
zstd-libs 1.5.7-r0 apk
+1
View File
@@ -219,6 +219,7 @@ init_diagram: |
"swag:latest" <- Base Images
# changelog
changelogs:
- {date: "01.06.26:", desc: "Remove obsolete old cert check logic."}
- {date: "23.01.26:", desc: "Reorder init to fix proxy conf version checks."}
- {date: "21.12.25:", desc: "Add support for hetzner-cloud dns validation."}
- {date: "04.11.25:", desc: "Switch default Gandi credentials from API Key to Token, allow DNS propagation time for Azure DNS plugin."}
@@ -206,18 +206,6 @@ fi
# saving new variables
echo -e "ORIGURL=\"${URL}\" ORIGSUBDOMAINS=\"${SUBDOMAINS}\" ORIGONLY_SUBDOMAINS=\"${ONLY_SUBDOMAINS}\" ORIGEXTRA_DOMAINS=\"${EXTRA_DOMAINS}\" ORIGVALIDATION=\"${VALIDATION}\" ORIGDNSPLUGIN=\"${DNSPLUGIN}\" ORIGPROPAGATION=\"${PROPAGATION}\" ORIGSTAGING=\"${STAGING}\" ORIGCERTPROVIDER=\"${CERTPROVIDER}\" ORIGEMAIL=\"${EMAIL}\"" >/config/.donoteditthisfile.conf
# Check if the cert is using the old LE root cert, revoke and regen if necessary
if [[ -f "/config/keys/letsencrypt/chain.pem" ]] && { [[ "${CERTPROVIDER}" == "letsencrypt" ]] || [[ "${CERTPROVIDER}" == "" ]]; } && [[ "${STAGING}" != "true" ]] && ! openssl x509 -in /config/keys/letsencrypt/chain.pem -noout -issuer | grep -q "ISRG Root X"; then
echo "The cert seems to be using the old LE root cert, which is no longer valid. Deleting and revoking."
REV_ACMESERVER=("https://acme-v02.api.letsencrypt.org/directory")
if [[ -f /config/etc/letsencrypt/live/"${ORIGDOMAIN}"/fullchain.pem ]]; then
certbot revoke --config-dir /config/etc/letsencrypt --logs-dir /config/log/letsencrypt --work-dir /tmp/letsencrypt --config /config/etc/letsencrypt/cli.ini --non-interactive --cert-path /config/etc/letsencrypt/live/"${ORIGDOMAIN}"/fullchain.pem --server "${REV_ACMESERVER[@]}" || true
else
certbot revoke --config-dir /config/etc/letsencrypt --logs-dir /config/log/letsencrypt --work-dir /tmp/letsencrypt --config /config/etc/letsencrypt/cli.ini --non-interactive --cert-name "${ORIGDOMAIN}" --server "${REV_ACMESERVER[@]}" || true
fi
rm -rf /config/etc/letsencrypt/{accounts,archive,live,renewal}
fi
# if zerossl is selected or staging is set to true, use the relevant server
if [[ "${CERTPROVIDER}" = "zerossl" ]] && [[ "${STAGING}" = "true" ]]; then
echo "ZeroSSL does not support staging mode, ignoring STAGING variable"