54 Releases 58 Tags

RSS Feed

• v27.1-rc.9 7792ccd240

  Compare

  v27.1-rc.9 Pre-Release

  jcoffey-dev released this 2026-11-06 07:09:57 +00:00 | 18 commits to main since this release

  The ninth release candidate of the 27.1 series: 27.1-rc.8 with certificate and DNS fixes, paging fixes for two query methods, and fuller milter traces.

  Certificates and DNS

  • CAA records are off by default. A domain with automatic certificates and automatic DNS used to publish a CAA record at its apex, tied to this server's ACME account. CAA covers every name under the domain, so another ACME client there, like certbot on a web server, would be refused at its next renewal. New domains now leave CAA off; the field explains when to turn it on. DNS-PERSIST-01 providers publish their _validation-persist record whether or not CAA is on. (#294)
  • Changing a domain's names orders a certificate right away. Editing Additional Hostnames, the ACME provider or the domain name on a domain already on ACME used to wait for the next renewal, about 60 days out. Saving now orders a certificate when the names it covers change, and a domain keeps a single queued renewal. (#295)

  Fixes

  • x:MaskedEmail/query and x:ArchivedItem/query page correctly. A request with a position past the first page returned the first page again and ignored limit. Both now honor position, anchor and limit. The masked email fix and its test are Stefan's, thanks Stefan. (#296)
  • Milter replies show in delivery traces. When a milter rejects with its own reply, the trace now records the SMTP code and text the client was sent, not just "Reply code". SMTP replies don't change. Stefan's patch again. (#293)

  Before you upgrade

  Existing domains keep the records they publish today, CAA included. If another ACME client issues certificates for names under a domain that inbuxa publishes CAA for, untick CAA in that domain's DNS settings, then delete the record at your DNS provider: unticking it doesn't remove a record that's already published. Check with dig CAA example.com.

  Run this with inbuxa-admin 27.1-rc.5, whose DNS guide leaves CAA off and lists each DNS provider's description, and inbuxa-webmail 27.1-rc.3.

  Everything in 27.1-rc.8 is here too, the directory fix, journal report format, inbuxa Relay and migrations included. inbuxa Relay ships from this tag as registry.coffeylabs.org/inbuxa/inbuxa-relay:27.1-rc.9 and as static binaries with .sig files; run it with the server release of the same version.

  Container image: registry.coffeylabs.org/inbuxa/inbuxa-server:27.1-rc.9, also tagged :27.1-rc. :latest stays on 2026.x until 27.1 ships.

  Downloads

  • SHA256SUMS
    379 B

    2026-11-06 08:04:02 +00:00
  • inbuxa-linux-amd64.tar.gz
    51 MiB

    2026-11-06 08:03:55 +00:00
  • inbuxa-linux-arm64.tar.gz
    47 MiB

    2026-11-06 08:03:59 +00:00
  • inbuxa-relay-aarch64-linux-musl
    6.3 MiB

    2026-11-06 08:04:02 +00:00
  • inbuxa-relay-aarch64-linux-musl.sig
    238 B

    2026-11-06 08:04:39 +00:00
  • inbuxa-relay-x86_64-linux-musl
    8.0 MiB

    2026-11-06 08:04:00 +00:00
  • inbuxa-relay-x86_64-linux-musl.sig
    237 B

    2026-11-06 08:04:39 +00:00
  • Source Code (ZIP)
  • Source Code (TAR.GZ)