-
Jarl v0.6.4
StableAll checks were successfulrelease / release (push) Successful in 5m15sreleased this
2026-10-25 19:06:47 +00:00 | 0 commits to main since this releaseAdded
- Failed logins in the journal. A failed login (a wrong password, or
a wrong two-factor code) and a refused API token are logged as well as
audited, with the address first (msg="login failed" ip=… user=…,
msg="token refused" ip=…), for Guard'sjarlpreset or a fail2ban
filter to ban such addresses (docs/operations.md). jarl cert get --combined PATHalso writes the key and the full
chain in one file (mode 600, written all at once), for HAProxy. It
belongs outside--dir, so a directory of combined files can be
HAProxy'scrtdirectory. The hook gets it asJARL_CERT_COMBINED.
Adding it to a certificate this host already has writes it from the
files on disk and runs the hook;--combined ''removes it.jarl cert get --localdoesn't ask jarld: it writes the combined
file and runs the hook from this host's files, to apply a changed
setting or test a hook.jarl cert saved NAMEshows all of one certificate's saved
settings (names, key type, dir, combined file, hook, server) and this
host's copy. The token is never shown.jarl cert listhas a PULLED column: when the certificate was last
downloaded, with(old)while a host hasn't fetched the renewed one.
The owner of a certificate obtained withjarl cert getnow sees their
own downloads (pulled_by) injarl cert listandjarl cert show, not
only administrators.
Changed
jarl cert listshowsgetas USES for a certificate obtained with
jarl cert get, not-.jarl cert getwithout a name refuses--dir,--hook,--key-type,
--combined,--replaceand--no-save, which change one
certificate; they used to be ignored.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Failed logins in the journal. A failed login (a wrong password, or