ACME

Release date 2026/04/07

Feature

• Added support for the tls_certificate_verify global option. When this option is enabled, the plugin’s storage_config.redis.tls_verify setting cannot be disabled.

Release date 2025/12/18

Feature

• Enabled at-rest keyring encryption for sensitive fields in ACME plugin.

• added support for the tls_certificate_verify global option. When this option is enabled, the plugin’s storage_config.vault.tls_verify setting cannot be disabled.

Bugfix

• Fixed an issue where the plugin would not properly handle cases when a referenced key_set does not exist, now returns a clear error message instead of causing unexpected behavior.

Release date 2024/09/11

Bugfix

• Fixed an issue of DP reporting that deprecated config fields are used when configuration from CP is pushed

• Fixed an issue where username and password were not accepted as valid authentication methods.

Release date 2024/05/28

Bugfix

• Fixed an issue where the certificate was not successfully renewed during ACME renewal.

• Fixed migration of redis configuration.

• fix a bug where the wrong error log is printed, regarding private keys.

Release date 2024/06/18

Bugfix

• Fixed migration of redis configuration.

Release date 2024/04/08

Bugfix

• Fixed an issue where the certificate was not successfully renewed during ACME renewal.

Release date 2024/02/12

Deprecation

• Standardize redis configuration across plugins. The redis configuration right now follows common schema that is shared across other plugins.

Bugfix

• validate private and public key for keys entity

Release date 2024/05/20

Bugfix

• Fixed an issue where the certificate was not successfully renewed during ACME renewal.

Release date 2023/11/08

Feature

• add scan_count to redis storage schema

Release date 2024/04/15

Bugfix

• Fixed an issue where the certificate was not successfully renewed during ACME renewal.

Release date 2023/08/09

Bugfix

• Fixed an issue where the sanity test didn’t work with kong storage in hybrid mode.#10852

Release date 2023/05/19

Feature

• This plugin now supports configuring an account_key in keys and key_sets.#9746

• This plugin now supports configuring a namespace for Redis storage, which defaults to an empty string for backwards compatibility.#10562

Release date 2022/12/06

Feature

• Added support for Redis SSL, through configuration propertiesconfig.storage_config.redis.ssl, config.storage_config.redis.ssl_verify, and config.storage_config.redis.ssl_server_name.#9626

Release date 2022/09/09

Feature

• Added the allow_any_domain field. It defaults to false and if set to true, the gateway will ignore the domains field.#9047

Bugfix

• The default value of the auth_method configuration parameter is now set to token.#8565

• Added a cache for domains_matcher.#9048

Breaking Change

• Updated the priority for some plugins.: acme changed from 1007 to 1705

• The default value of the auth_method configuration parameter is now token.

Release date 2022/08/05

Bugfix

• The domains plugin parameter can now be left empty. When domains is empty, all TLDs are allowed. Previously, the parameter was labelled as optional, but leaving it empty meant that the plugin retrieved no certificates at all.

Release date 2022/03/02

Feature

• Added the rsa_key_size configuration parameter.

  Thanks, lodrantl! #8114