@small-tech/auto-encrypt 3.0.1 → 3.1.0

package/README.md

@@ -266,7 +266,7 @@ We exist in part thanks to patronage by people like you. If you share [our visio
 
 ## Copyright
 
-© 2020-2021 [Aral Balkan](https://ar.al), [Small Technology Foundation](https://small-tech.org).
+© 2020-present [Aral Balkan](https://ar.al), [Small Technology Foundation](https://small-tech.org).
 
 Let’s Encrypt is a trademark of the Internet Security Research Group (ISRG). All rights reserved. Node.js is a trademark of Joyent, Inc. and is used with its permission. We are not endorsed by or affiliated with Joyent or ISRG.
 

package/lib/acmeCsr.js

@@ -62,7 +62,7 @@ function csrAsPem (domains, key) {
     }]
   }])
 
-  csr.sign(keys.private)
+  csr.sign(keys.private, forge.md.sha256.create())
 
   const pem = forge.pki.certificationRequestToPem(csr)
   return pem

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@small-tech/auto-encrypt",
-  "version": "3.0.1",
+  "version": "3.1.0",
   "description": "Adds automatic provisioning and renewal of Let’s Encrypt TLS certificates with OCSP Stapling to Node.js https servers (including Express.js, etc.)",
   "keywords": [
     "let's encrypt",
@@ -64,7 +64,7 @@
     "encodeurl": "^1.0.2",
     "jose": "^1.24.0",
     "moment": "^2.24.0",
-    "node-forge": "^0.10.0",
+    "node-forge": "^1.3.1",
     "ocsp": "^1.2.0",
     "server-destroy": "^1.0.1"
   },
@@ -72,7 +72,7 @@
     "@small-tech/esm-tape-runner": "^1.0.3",
     "@small-tech/node-pebble": "^4.2.4",
     "@small-tech/tap-monkey": "^1.3.0",
-    "c8": "^7.6.0",
+    "c8": "^7.11.3",
     "dependency-cruiser": "^9.15.1",
     "esbuild": "^0.8.53",
     "jsdoc": "^3.6.6",

package/CHANGELOG.md

@@ -1,120 +0,0 @@
-# Changelog
-
-All notable changes to this project will be documented in this file.
-
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-
-## [3.0.1] - 2021-03-21
-
-Fixes regression on Windows introduced in 3.x branch.
-
-### Fixed
-
-  - Make `__dirname` declaration cross-platform (was previously failing on Windows). See https://github.com/nodejs/node/issues/37845
-  - Introduce small delay in request fail check test while certificate is being provisioned to ensure tests pass with Let’s Encrypt staging server.
-
-## [3.0.0] - 2021-03-08
-
-### Changed
-
-  - __Breaking change:__ Is now an ECMAScript Modules (ESM) project.
-  - Now includes the latest Let’s Encrypt certificate authority root certificate for the staging environment. (This is automatically injected into your Node.js environment when running the server in staging mode and is used during testing.)
-  - Dev: now using @small-tech/esm-tape-runner.
-  - Dev: replaced tap-spec and tap-nyc with @small-tech/tap-monkey.
-
-### Fixed
-
-  - No longer crashes when checking for certificate renewal. (#34)
-  - Tests now run properly in staging mode.
-
-### Improved
-
-  - npm package size is now 193.1kb (down from 345kb previously).
-
-## [2.1.0 and 2.1.1] - Do not use these versions.
-
-These accidentally included the breaking change from 3.0.0 in a semver minor update.
-
-_The CommonJS version of Auto Encrypt now lives in the 2.x branch and the first release from it is version 2.2.0 which has the bug fix and the root certificate update from version 3.0.0 backported. For future 2.x release info, please see the changelog in the 2.x branch._
-
-## [2.0.6] - 2021-02-16
-
-### Fixed
-
-  - Assignment to constant. This would have caused a crash when a `Retry-After` header was received from Let’s Encrypt.
-
-### Improved
-
-  - Developer documentation. Now lists value to be added to hosts files to run local tests.
-
-## [2.0.5] - 2020-10-29
-
-### Improved
-
-  - Update dependencies to remove npm vulnerability warnings.
-
-## [2.0.4] - 2020-07-10
-
-### Fixed
-
-  - HTTP to HTTPS redirects now start up and work as they should (they weren’t previously).
-
-## [2.0.3] - 2020-07-10
-
-### Changed
-
-  - Update source code repository in npm package to point to GitHub mirror. (The GitHub mirror is the public repository where we can accept issues and pull requests. [The canonical repository](https://source.small-tech.org/site.js/lib/auto-encrypt) is on our own server where we do not accept sign ups as we don’t want it to become yet another centralised host.)
-
-## [2.0.2] - 2020-07-10
-
-### Fixed
-
-  - Links to developer documentation now work everywhere, not just on source code repository web interfaces.
-
-### Changed
-
-  - Replaced outdated coverage message in readme and linked to developer documentation for information on tests and coverage.
-
-## [2.0.1] - 2020-07-03
-
-### Added
-
-  - HTTP to HTTPS redirects are now logged.
-
-## [2.0.0] - 2020-07-03
-
-### Changed
-
-  - Breaking change: you no longer have to call AutoEncrypt.shutdown() manually. Closing your server will do it automatically (#33).
-
-### Added
-
-  - Automatic HTTP to HTTPS redirection. An HTTP server is now kept running for the lifetime of your HTTPS server and, when it is not responding to Let’s Encrypt challenges, it redirects HTTP calls on port 80 to your HTTPS server (#32).
-
-## [1.0.3] - 2020-06-20
-
-### Fixed
-
-  - Carriage returns are now stripped from Certificate Signing Requests (CSRs) (#31).
-
-## [1.0.2] - 2020-06-16
-
-### Fixed
-
-  - No longer crashes if OCSP request received before certificate created.
-  - Cosmetic: format certificate details nicely in log message.
-  - Minor: fix capitalisation in log message.
-
-## [1.0.1] - 2020-06-15
-
-### Changed
-
-  - Update log format to match Site.js output.
-
-### Fixed
-
-  - Remove debug output.
-
-## [1.0.0] - 2020-04-15
-
-Initial release.