adam/jarl
Watch
1
0
Fork
You've already forked jarl
 0
Code Issues 4 Pull requests Projects Releases 35 Packages Wiki Activity Actions
35 releases 35 tags
  • v0.6.4-rc.2 67a829be34

    Jarl v0.6.4-rc.2 Pre-release

    adam released this 2026-10-25 00:24:45 +01:00 | 1 commits to main since this release

    Added

    • Failed logins in the journal. A failed login (a wrong password, or
      a wrong two-factor code) and a refused API token are logged as well as
      audited, with the address first (msg="login failed" ip=… user=…,
      msg="token refused" ip=…), for Guard's jarl preset or a fail2ban
      filter to ban such addresses (docs/operations.md).
    • jarl cert get --combined PATH also writes the key and the full
      chain in one file (mode 600, written all at once), for HAProxy. It
      belongs outside --dir, so a directory of combined files can be
      HAProxy's crt directory. The hook gets it as JARL_CERT_COMBINED.
      Adding it to a certificate this host already has writes it from the
      files on disk and runs the hook; --combined '' removes it.
    • jarl cert get --local doesn't ask jarld: it writes the combined
      file and runs the hook from this host's files, to apply a changed
      setting or test a hook.
    • jarl cert saved NAME shows all of one certificate's saved
      settings (names, key type, dir, combined file, hook, server) and this
      host's copy. The token is never shown.
    • jarl cert list has a PULLED column: when the certificate was last
      downloaded, with (old) while a host hasn't fetched the renewed one.
      The owner of a certificate obtained with jarl cert get now sees their
      own downloads (pulled_by) in jarl cert list and jarl cert show, not
      only administrators.

    Changed

    • jarl cert list shows get as USES for a certificate obtained with
      jarl cert get, not -.
    • jarl cert get without a name refuses --dir, --hook, --key-type,
      --combined, --replace and --no-save, which change one
      certificate; they used to be ignored.
    Downloads