Release notes from acme.sh

3.1.6

2026-09-20T11:15:48Z

Release tags are signed from 3.1.6 on. The public key is allowed_signers
in this repository; see "Verify a Release" in the README.
3.1.5 and earlier are unsigned. The 3.1.5 tag was created by the GitHub
release form, which can only produce a lightweight tag and therefore carries
no signature (#7273).
No functional change since 3.1.5.

v3.1.6

2026-09-20T11:15:03Z

release 3.1.6

3.1.5

2026-09-19T18:11:14Z

Release tags are signed from 3.1.5 on. The public key is allowed_signers
in this repository; see "Verify a Release" in the README.
New ACME_PACKAGED mode for distro-packaged installs: --install no longer
copies the script into LE_WORKING_DIR, and --upgrade, --install-online and the
auto-upgrade cron path defer to the system package manager
(#7135).
Standalone mode listens on both IPv4 and IPv6 by default, and the port
check now works on the BSDs, macOS and Haiku.
An explicit --days or --valid-to now outranks the ARI renewal window.
Order handling: poll the order this run created instead of the one the
previous cert came from, wait for a not-ready order instead of failing the
finalize, honor an HTTP-date Retry-After, retry a gateway error from the CA,
and back off between retries.
alreadyRevoked is now treated as a successful revocation.
The conf file is never truncated when a saved value breaks the rewrite.
New DNS providers: Huawei Cloud (dns_hw), HestiaCP, DNSMint, Opteamax,
Optidata Cloud, NexDNS, Realtox Media, myloc. Azure now supports Private DNS
zones, netcup moved to the new REST API, and JD Cloud moved to the v2 API.
New deploy hooks: UniFi OS, JetKVM, Shelly (Gen3+), iKuai, and
truenas_websocat for TrueNAS SCALE 25.10+.
dnsapi/dns_linode.sh (Linode API v3) was removed, use dns_linode_v4
(#7054).
CI now also covers GNU Hurd, openEuler, HardenedBSD and OPNsense
(31 platforms).
A lot of bug fixes.

v3.1.5: Merge pull request #7271 from acmesh-official/dev

2026-09-19T17:22:24Z

Dev

3.1.4

2026-07-17T02:07:22Z

Support ACME Renewal Information (ARI, RFC 9773), enabled by default. Renewals now follow the renewal window suggested by the CA. Set NO_ARI=1 to disable. The installed cron job now runs every 6 hours to react to ARI renewal windows in time.
Support the dns-persist-01 challenge, with --dns-persist-days.
A negative --days schedules renewal relative to the cert expiration date, and can be combined with --valid-to to set a renewal margin.
Support ACME account key rollover.
Support multiple account emails. --update-account now persists the new email.
Retry failed install/deploy steps on the next renewal.
Add bash completion, installed via --install.
New DNS providers: Level27, CDMON, Poweradmin, IP-Projects, EuroDNS, Firestorm, creoline, LaoDC, WEDOS, muumuu, Volcano Engine, Glesys, Aruba Business, Calrissia, Hostinger. New deploy hooks: FortiGate, Baidu Cloud CDN, Windows RDP. New notify hook: customscript.
dns_hetzner.sh was removed (#6990).
Docker images are now also published to ghcr.io.
A lot of bug fixes.

3.1.3

2026-04-28T20:27:29Z

normal release, fix bugs

Regular release

2025-11-29T15:36:45Z

support cert profile and ip cert.
a lot of bug fixes.

normal release

2025-04-23T18:50:06Z

What's Changed

add dns_api for Technitum dns server by @qupfer in #6117
deploy hook for Ruckus ZoneDirector / Unleashed by @kchiem in #4832
dns_world4you: Adapt to change in world4you.com DeleteDnsRecordForm by @NerLOR in #6114
Add support for ZoneEdit.com by @lukavia in #6136
Fix keystore ownership in Unifi deployment - unifi.sh by @adn77 in #6168
DNS API: fix structural info for new providers by @stokito in #6174
dnsapi: Add structured info for lima-city and west.cn by @stokito in #6176
fix: remove control characters by @M0NsTeRRR in #6181
Add mijn.host DNS API Support by @peterv99 in #6178
Fix syntax for OpenBSD sh by @catap in #6099
Update dns_cyon plugin by @JazzMalar in #6184
Correct typo in acme.sh by @jpmens in #6190
Create script for deploy certificate on Proxmox Backup Server by @HTDemony in #6191
Feature: Add new version API dns SELECTEL dns_selectel.sh (actual v2) by @vlad-kms in #5128
Portability: use uname -n instead of hostname. by @ghen2 in #6194
Fixed cloudkey gen 2 changes by @3VAbdAVE in #6195
Truenas deploy websocket by @Attackwave in #6108
Add dnsapi script for HE DDNS by @markkuleinio in #5237
Add Beget.com DNS API support by @ARNik in #6202
Fix bug saving SYNO_LOCAL_HOSTNAME by @davidha in #6226
Allow deploying of PKCS to docker containers and other hooks by @tomo2403 in #6234
chore(synology): remove personal mail by @scruel in #6239
dns_world4you: Adapt to change in world4you.com by @NerLOR in #6242
Support FreeBSD's sed -i by @aafbsd in #6245
Add FreeMyIP DNS Api Support by @Giova96 in #6240
cqhttp notify-hook：Compatibility with QQ Headless Project Napcat by @metaforget in #6257
dns_he_ddns: Add empty dns_he_ddns_rm() to remove warnings by @markkuleinio in #6263
routeros: file-name should in quotes in newer (7.18) version by @copyliu in #6262
haproxy: don't leak private keys when doing --debug by @wlallemand in #6268
update documentation for --cert-home parameter by @fraenki in #4384
support NTFY_TOKEN by @beedaddy in #6277
fix regex of matching hetzner dns api error responses by @lindsayzhou in #6198
Avoid permissions errors for chown .well-known by @kevinoid in #623
Fix error message variable when reload cmd returns with an error by @magyarsz in #6282
Don't deploy ECC certs to legacy Ruckus by @ms264556 in #6285
Bump Alpine version from 3.17 to 3.21 by @Gontier-Julien in #6299
Add Edgecenter DNS API by @ruuuch in #6317
Fix error detection in vault deploy hook by @alindt in #6315

New Contributors

@qupfer made their first contribution in #6117
@kchiem made their first contribution in #4832
@lukavia made their first contribution in #6136
@adn77 made their first contribution in #6168
@peterv99 made their first contribution in #6178
@catap made their first contribution in #6099
@JazzMalar made their first contribution in #6184
@HTDemony made their first contribution in #6191
@vlad-kms made their first contribution in #5128
@Attackwave made their first contribution in #6108
@markkuleinio made their first contribution in #5237
@ARNik made their first contribution in #6202
@davidha made their first contribution in #6226
@aafbsd made their first contribution in #6245
@Giova96 made their first contribution in #6240
@metaforget made their first contribution in #6257
@copyliu made their first contribution in #6262
@beedaddy made their first contribution in #6277
@lindsayzhou made their first contribution in #6198
@kevinoid made their first contribution in #623
@magyarsz made their first contribution in #6282
@ms264556 made their first contribution in #6285
@Gontier-Julien made their first contribution in #6299
@ruuuch made their first contribution in #6317
@alindt made their first contribution in #6315

Full Changelog: 3.1.0...3.1.1

Minor fixes

2024-11-23T10:03:18Z

What's Changed

refactor: Alibaba Cloud API by @PMExtra in #5294
Fix Timeweb Cloud DNS API pagination by @nikolaypronchev in #5296
Update dns_openprovider.sh for OpenProvider by @WinSCaP in #5183
update dns_doapi by @henrikalves in #5158
Add OpenContainers Annotations as Labels to Docker Image by @mpgirro in #5305
Add ali_dcdn deploy hook (Alibaba Cloud DCDN) by @PMExtra in #5297
on OpenBSD, add libiconv by @jschauma in #5309
Updated MS links, added wiki link, updated error messages, updated API limit comment by @abulgatz in #5313
Adding omg.lol DNS API by @as-kholin in #5301
Fix markdown issue in telegram notify hook by @fazelukario in #5315
Update Porkbun API URL by @allddd in #5323
Revert txt add update by @lifeboy in #5331
Fix POSIX shell portability by @ryoon in #5374
Fix dns_pdns.sh to use saved account conf by @sahsanu in #5328
Dns API: fix structural info by @stokito in #6087
Fixes issue 4956: 'Linode DNS Pagination Bug' by @vmmello in #5172
fix(truenas): broken script since 23.10 scale release by @M0NsTeRRR in #6089
StrongSwan deploy hook: swanctl support by @sergiustheblack in #6094
Add existing bearer token support to Azure DNS API by @stbeldarborge in #5276
fix: new version of fornex dns based on api version 2.3.1 by @CreatorHRS in #6106

New Contributors

@WinSCaP made their first contribution in #5183
@henrikalves made their first contribution in #5158
@mpgirro made their first contribution in #5305
@jschauma made their first contribution in #5309
@abulgatz made their first contribution in #5313
@as-kholin made their first contribution in #5301
@fazelukario made their first contribution in #5315
@ryoon made their first contribution in #5374
@vmmello made their first contribution in #5172
@M0NsTeRRR made their first contribution in #6089
@sergiustheblack made their first contribution in #6094
@stbeldarborge made their first contribution in #5276
@CreatorHRS made their first contribution in #6106

Full Changelog: 3.0.9...3.1.0

Minor, just for nsupdate hook

2024-09-23T16:13:05Z

Minor, just for nsupdate hook