Timothe Litt

Fixes #827 Automagically update the contact e-mail when ACCOUNT_EMAIL is changed in `getssl.cfg`. Note that prior registrations included a space after `mailto:` when registering (e.g. mailto: @example.net). This made them...

Added the missing admin/security functions to rotate account key (key compromise, or policy) and deactivate account. Could use tests - verified with LE. These functions (and --account-id) really shouldn't require...

@timkimber : The test "failures" with this PR are due to invalid CNAMEs in the test environment, which `getssl` now detects. These CNAMEs must have the format: `_acme-challenge.from-domain. CNAME _acme-challenge[.from-domain].to-domain.`...

Implemented a version of #267 ( @zazaz-de )'s token substitution in challenge ACLs. Not clear why the proposal wanted to substitute $DOMAIN; $SAN seems more useful. But if you place...

Fixed #801 - added support for specifying local IP address in `nsupdate` challenge responses. Also rebased to latest master.

I relaxed the (new) restriction on CNAME targets to allow for hashed names. The target **must** start with `_acme-challenge.`, but no longer requires that the source domain name follow. One...

@timkimber I did release `acme_token_check`, with support for ACME verification redirection (CNAMEs). Also, I made changes (mostly whitespace) to ensure that the account management commands don't require or play with...

Should now fix #818 - and any cousin bugs. LC_ALL overrides all I18n variables (except LANGUAGE, which doesn't effect `getssl`).

@timkimber: Some of the test failures were not due to CNAME issues. Those had to do with curl version changes, and some FTP issues in the new token removals that...