# changelog

author: LiveConfig <support@liveconfig.com> - 3.2.0-1
changelog:
  - Frontend: added reports
  - Frontend: added newsletter
  - Frontend: allow sending e-mail with login details to users
  - Frontend: allow custom CSS (GH-9)
  - Frontend: fixed/improved configuration of web statistics
  - Frontend: improved usability of several selectors (TLS certificates,
    customers, contacts)
  - Frontend: fixed Single Sign-On to phpMyAdmin (GH-111)
  - Frontend: show values for `extension`/`zend_extension` when editing
    php.ini settings
  - Frontend: fixed bug in AppInstaller when WordPress and/or phpMyAdmin
    were not allowed for installation
  - Frontend: don't show web terminal if not available (i.e. Basic license
    or LiveConfig <3.0)
  - Frontend: updated Xterm.js to 6.0.0
  - Frontend: allow upper-case characters for mailbox name (converted to
    lower-case automatically)
  - Frontend: fixed missing button to manually create webspace backups
  - Frontend: check for forbidden e-mail forwarding targets
    (LCDefaults `mail.forwards.blacklist`)
  - Frontend: improved usability when error in multi-tab input (i.e.
    e-mail) has occured in an inactive tab
  - Frontend: fixed bug when deleting last/all custom DNS RRs from a
    subdomain
  - Frontend: fixed bug in webspace log viewer
  - Backend: improved support for LiveConfig 2.x clients
  - Backend: support more TSIG algorithms for external DNS servers
  - Backend: e-mail autoresponder wasn't disabled automatically when
    an end date was set
  - Backend: fixed bug when setting floating-point values for
    spam filter thresholds (sometimes rejected as "invalid input")
  - Backend: enable sending TLS expiration mails by default for
    new automated certificates
  - Backend: it wasn't possible to create (manual) TLS certificates
    with wildcard domain name
  - Backend: fixed deletion of accounts when no webserver is assigned any more
  - Backend: check for pending account deletion during start
  - Backend: fixed bug when deleting MySQL database from LC2 client
  - Backend: fixed FTP permission on hosting templates when permission
    has been added subsequently
  - Backend: e-mail password was not updated when saving via self-service
  - Backend: SPF records have not been updated when default SPF for a
    SMTP server has been modified
  - Backend: fixed hangup when deleting e-mail alias or forward with
    SQLite backend
  - Backend: allow editing mailboxes when e-mail quota is exceeded but
    mailbox size not increased
  - Backend: proper error handling when `sendmail` is not available (GH-122)
  - Backend: fixed bug when saving TSIG key for external DNS server (GH-119)
  - Backend: TSIG keys have not been created automatically for managed
    secondary DNS servers (GH-121)
  - Backend: A/AAAA record was not removed from www subdomain when
    webspace got disabled for non-www subdomain and "sync with www" option
    was set
  - Backend: added checks to not allow DynDNS while Webspace is enabled
  - Backend: fixed license activation during AutoDeploy
  - Backend: restricted access for editing crontab files
  - added support for SSHFP DNS records
  - lcsam (LiveConfig SpamAssassin Milter): supporting configuration file
    (`/etc/liveconfig/lcsam`) to set custom reject codes and bounce message
  - allow enabling of TLS (and optionally validate TLS server
    certificate) when LiveConfig database is on a remote MySQL/MariaDB
    server (`db_options=tls|tls-verify-server`)
  - updated OpenSSL (3.5.6 LTS), MariaDB Connector/C (3.4.8),
    SQLite (3.51.3), cURL (8.19.0), zlib (1.3.2) and Expat (2.7.5)
  - improved checks for duplicate e-mail aliases or forwarding
    targets
  - `--db-check` command now also detects gaps in account structure
  - `--db-repair` command now also deletes orphaned customer records
  - fixed bug in `pam_lac` module when `/etc/liveconfig/lac.users` has not
    been created yet (GH-116)


author: LiveConfig <support@liveconfig.com> - 3.2.0-2
changelog:
  - Frontend: Server report was limited to 10 rows
  - Backend: fixed bug when adding/editing TLSA record (PCRE check failed)
  - Backend: fixed bug when checking for resources to be deleted while
    server is not connected (GH-129)


author: LiveConfig <support@liveconfig.com> - 3.2.0-3
changelog:
  - Backend: modified (manual) TLS certificates didn't get
    deployed/replaced in some cases
  - Backend: managed TLS certificate for frontend was not deployed after update


author: LiveConfig <support@liveconfig.com> - 3.2.0-4
changelog:
  - Backend: fixed bug when very old (Confixx-imported) databases were still
    in state "database being added"
  - Backend: fixed bug when deleting database while same login is still used
    with other databases (also affecting Confixx-imported databases)
  - Backend: fixed bug when calculating next available account number
    or customer number
  - Backend: fixed bug affecting backups on multi-server deployments (resources
    on remote server couldn't be backed up in certain cases)


author: LiveConfig <support@liveconfig.com> - 3.2.1-1
changelog:
  - Frontend: allow editing/changing contact data of customers' main user
  - Backend: supporting "old" encrypted object IDs from LiveConfig 2.x API
  - Backend: added LCDefaults option `rrd.retention` to allow automatic deletion
    of old RRD data from unlimited archives
  - Backend: fixed bug when user is member of a very large group
    (i.e. `lc-sftponly`)
  - Backend: TLS certificates sometimes were not completely removed from database
    when deleted with domain
  - Backend: expiring TLS certificates marked for deletion won't be renewed any more
  - Backend: fixed bug when reseller creates a new customer while reseller settings
    have not yet been initialized
  - Installer: added dependencies and check for availability of systemd


author: LiveConfig <support@liveconfig.com> - 3.2.1-2
changelog:
  - Frontend: fixed typo leading to error when traffic was >= 1TB (GH-130)
  - Frontend: fixed selection of wrong e-mail template when sending login
    data to customer
  - Backend: fixed bug when saving reseller settings in certain cases
    (old / uninitialized accounts only)
  - updated SQLite to 3.53.0


author: LiveConfig <support@liveconfig.com> - 3.2.2-1
changelog:
  - Frontend: added support for "e-mail only" accounts
  - Frontend: show additional information on accounts being deleted
  - Backend: reseller accounts containing a dash (`-`) could not be used
  - Backend: fixed log message "Can't add domain to object log" when
    editing existing domains
  - Backend: DKIM was also enabled automatically for new external domains
    (now only if `mail.dkim.default` is `2`)
  - Backend: fixed bug when selecting existing TLS certificate while
    adding a new subdomain (GH-131)
  - Backend: fixed bug when deleting account which still has backup records
    created with LiveConfig 2.x
  - Backend: fixing missing permission on reseller templates created with
    LiveConfig 2.x
  - Backend: improved checks for available features when editing existing
    hosting template (no errors for properties which are not modified)
  - Backend: fixed _NotFoundException_ when deleting an account
    without webspace
  - Backend: fixed incomplete limit check of reseller account when
    editing an end user account
  - Backend: mailbox size in reports (customer accounts) had wrong unit
  - Backup: scheduled backups on multi-server setups were not started
    under certain circumstances (i.e. remote "mail-only" server)
  - Backup: fixed bug preventing database backups on remote servers
    (multi-server setup only) under certain conditions
  - LAC: auto-detect correct MTU for virtual network interfaces
  - LAC: added `/etc/ssl` and `/etc/pki` to whitelist
    (required for TLS connections)
  - updated SQLite (3.53.1), cURL (8.20.0), unbound (1.25.0)
    and Expat (2.8.1)


author: LiveConfig <support@liveconfig.com> - 3.2.3-1
changelog:
  - Frontend: fixed issue when disabling mail forwarding (GH-132)
  - Frontend: fixed bug when sending newsletter to LiveConfig users
  - Frontend: fixed bug in permission check when end user (below
    reseller account) edits own php.ini settings
  - Frontend: increased maximum length of virtual FTP account names
    from 16 to 64 byte
  - Frontend: allow explicit removal of MySQL admin (root) password
  - Frontend: resellers were not allowed to change contact data of
    a customers' main user
  - Frontend: some browsers blocked access to `/log` endpoint, so we
    added an alternative route (`/log/show`)
  - Backend: e-mail addresses were not removed from LCPolicyd under
    certain circumstances
  - Backend: fixed issue with catch-all targets and SRS
  - Backend: fixed possible hangup during outbound HTTP requests
    (i.e. license renewal)
  - Backend: fixed bug when creating account with very large number
    in name (>`UINT64_MAX`)
  - Backend: fixed bug when downloading MySQL dump (data was corrupted
    in some cases)
  - API: fixed unit of mailbox size (MB instead of byte) for mailbox
    statistics (i.e. in dashboard)
  - updated unbound to 1.25.1
  - added systemd dependency for `dbus.service`
  - updated OpenSSL to 3.5.7


