fix(site): keep proxy and SSL state consistent when an update fails - #505

Merged

mrrobot47 merged 27 commits into

EasyEngine:developfrom

mrrobot47:fix/proxy-cache-rollback-and-le-alias

Sep 29, 2026

Commits on Sep 29, 2026

fix(site): keep the proxy config valid when a proxy cache update fails
mrrobot47
committed
d078fb0
fix(site): roll back an alias change when its certificate can't be issued
mrrobot47
committed
6060570
fix(site): remove a site's certificate files whenever they exist
mrrobot47
committed
1108099
fix(site): keep sites without SSL HTTP-only on alias changes
mrrobot47
committed
26b45d9
fix(site): skip ACME challenges EE can't solve when ordering a certificate
mrrobot47
committed
773af89
fix(site): parse certificates that have no subject CN
mrrobot47
committed
4d2da2e
fix(site): allow turning SSL off on sites stored as wildcard
mrrobot47
committed
b795f55
fix(site): reload the proxy after removing a deleted site's www redirect
mrrobot47
committed
96fade4
fix(site): fail `update --ssl=le` when no certificate was issued
mrrobot47
committed
b052b80
fix(site): keep token-bearing ACME challenges of every type
mrrobot47
committed
1fea072
fix(site): revoke only certificates an alias change replaced
mrrobot47
committed
9b5aa02
fix(site): refuse `--ssl=off` while other sites inherit the certificate
mrrobot47
committed
46e8ef6
fix(site): put the site back HTTP-only when `update --ssl=` throws
mrrobot47
committed
3f1759e
fix(site): remove a deleted alias's ACME state
mrrobot47
committed
e33671a
refactor(site): drop the unvalidated le-mail fallback from the alias update
mrrobot47
committed
809e092
fix(site): keep a custom certificate the user keeps in the certs dir when enabling SSL fails
mrrobot47
committed
8b3daa7
fix(site): let a self-signed site enable SSL again after `--ssl=off`
mrrobot47
committed
aa4766d
fix(site): name every needed flag in the `update --ssl=` re-run hint
mrrobot47
committed
09217cb
fix(site): remove a wildcard certificate's `*.<site>` ACME state with the site
mrrobot47
committed
a6074e6
docs(site): say which files a failed certificate reissue puts back
mrrobot47
committed
b5128d3
fix(site): refuse normal SSL on a wildcard site only when it needs the wildcard
mrrobot47
committed
8c1ed2a
fix(site): stop before changing files when a backup can't be read
mrrobot47
committed
a9372b4
fix(site): treat self-signed SSL as wildcard when updating a site
mrrobot47
committed
5c34be8
fix(site): restore the proxy cache files when writing them fails
mrrobot47
committed
3df337e
fix(site): show the first SAN as the subject in ssl-info when there is no CN
mrrobot47
committed
4d549a5
fix(site): quote the certificate paths in the update --ssl=custom re-run hint
mrrobot47
committed
0fbab4d
fix(site): don't restart the proxy when the reload refused the new config
mrrobot47
committed
38c68ff

Navigation Menu

fix(site): keep proxy and SSL state consistent when an update fails - #505

fix(site): keep proxy and SSL state consistent when an update fails#505
mrrobot47 merged 27 commits into
EasyEngine:developfrom
mrrobot47:fix/proxy-cache-rollback-and-le-alias

Commits on Sep 29, 2026

fix(site): keep the proxy config valid when a proxy cache update fails

fix(site): roll back an alias change when its certificate can't be issued

fix(site): remove a site's certificate files whenever they exist

fix(site): keep sites without SSL HTTP-only on alias changes

fix(site): skip ACME challenges EE can't solve when ordering a certificate

fix(site): parse certificates that have no subject CN

fix(site): allow turning SSL off on sites stored as wildcard

fix(site): reload the proxy after removing a deleted site's www redirect

fix(site): fail `update --ssl=le` when no certificate was issued

fix(site): keep token-bearing ACME challenges of every type

fix(site): revoke only certificates an alias change replaced

fix(site): refuse `--ssl=off` while other sites inherit the certificate

fix(site): put the site back HTTP-only when `update --ssl=` throws

fix(site): remove a deleted alias's ACME state

refactor(site): drop the unvalidated le-mail fallback from the alias update

fix(site): keep a custom certificate the user keeps in the certs dir when enabling SSL fails

fix(site): let a self-signed site enable SSL again after `--ssl=off`

fix(site): name every needed flag in the `update --ssl=` re-run hint

fix(site): remove a wildcard certificate's `*.<site>` ACME state with the site

docs(site): say which files a failed certificate reissue puts back

fix(site): refuse normal SSL on a wildcard site only when it needs the wildcard

fix(site): stop before changing files when a backup can't be read

fix(site): treat self-signed SSL as wildcard when updating a site

fix(site): restore the proxy cache files when writing them fails

fix(site): show the first SAN as the subject in ssl-info when there is no CN

fix(site): quote the certificate paths in the update --ssl=custom re-run hint

fix(site): don't restart the proxy when the reload refused the new config