From this IRC log:
2015-11-02 16:31:29 @pdeee for >= 2.4.8:
2015-11-02 16:32:23 @pdeee add new SSLCertificateFile pointing to fullchain.pem
2015-11-02 16:33:10 @pdeee remove all preexisting SSLCertificateFile, SSLCertificateChainFile, SSLCACertificatePath, and possibly other fields subject to careful research :)
2015-11-02 16:33:21 @pdeee for < 2.4.8:
2015-11-02 16:34:03 @pdeee add SSLCertificateFile pointing to cert.pem
2015-11-02 16:34:42 @pdeee and SSLCertificateChainFile pointing to chain.pem
2015-11-02 16:34:50 xamnesiax gotcha
2015-11-02 16:34:55 @pdeee remove all preexisting/conflicting entries
2015-11-02 16:35:19 xamnesiax Am I correct to assume that this can all be done from deploy_certs in the apache configurator?
2015-11-02 16:36:32 xamnesiax deploy_cert *
2015-11-02 16:36:48 @pdeee I think so
2015-11-02 16:36:59 @pdeee again, jdkasten may wish to say more
Pull strings out for find_dir
A bit of logging
Add version logging
Logging, temporarily remove one branch
of the conditional for testing
Fix bad directive stringgrabbing code
Fix directive removal logic
Grab string from tree to be removed
Calling apache2ctl -D DUMP_RUN_CFG on Debian Wheezy (Apache 2.2) will
open a socket which breaks standalone auth. letsencrypt still won’t
work with apache 2.2 because it only returns „Syntax OK“.
Apache 2.4 works the same with or without -t.
Add a server_names_hash_bucket_size directive during challenges to fix an nginx
crash on restart (Fixes#922).
Use fullchain instead of chain (Fixes#610).
Implement OCSP stapling (Fixes#937, Fixes#931).
Hide Boulder output in integration tests to make them more readable.
