NeverLapse Cert releases
Newest first. Installed apps show the newest one under Settings > Updates; the installers are on your account page.
| Version | Released | For | What's new |
|---|---|---|---|
| 1.9.0 latest | Nov 3, 2026 | Linux | New Settings > Updates page: see and install new versions from inside the app (backup first, automatic rollback if the new version does not start). |
| 1.9.0 latest | Nov 3, 2026 | Windows | New Settings > Updates page: see and install new versions from inside the app (backup first, automatic rollback if the new version does not start). |
| 1.8.5 | Nov 2, 2026 | Linux | New certificates start on the DNS provider set up in Get started; Credentials page in groups with Used by, every kind editable; Settings List/Tiles view. |
| 1.8.5 | Nov 2, 2026 | Windows | New certificates start on the DNS provider set up in Get started; Credentials page in groups with Used by, every kind editable; Settings List/Tiles view. |
| 1.8.0 | Nov 1, 2026 | Linux | Issue now opens a window with live steps; Manual DNS and NeverLapse DNS walk-throughs; errors that need a fix stop at once with Fix it; easier to read, phone layout as cards; NeverLapse DNS is the default for new certificates. |
| 1.8.0 | Nov 1, 2026 | Windows | Issue now opens a window with live steps; Manual DNS and NeverLapse DNS walk-throughs; errors that need a fix stop at once with Fix it; easier to read, phone layout as cards; NeverLapse DNS is the default for new certificates. |
| 1.7.0 | Oct 31, 2026 | Linux | Ten more DNS providers: Azure DNS, Amazon Route 53, Google Cloud DNS, Namecheap, IONOS, cPanel, DigitalOcean, DNS Made Easy, DNSimple and Name.com. Database change (two new columns), applied by itself on upgrade. |
| 1.7.0 | Oct 31, 2026 | Windows | Ten more DNS providers: Azure DNS, Amazon Route 53, Google Cloud DNS, Namecheap, IONOS, cPanel, DigitalOcean, DNS Made Easy, DNSimple and Name.com. Database change (two new columns), applied by itself on upgrade. |
| 1.6.2 | Oct 31, 2026 | Linux | NeverLapse Cert 1.6.2: NeverLapse DNS setup in plain words. The Certificates page walks you through the one-time DNS record step by step, shows it the way your DNS host asks for it (Type, Name, Value, TTL), has a Copy as a message button, and says exactly what to fix when the record is not right. Help has steps for GoDaddy, Cloudflare, Namecheap, Azure DNS and Windows DNS. No database change. See /docs/neverlapse-dns |
| 1.6.2 | Oct 31, 2026 | Windows | NeverLapse Cert 1.6.2: NeverLapse DNS setup in plain words. The Certificates page walks you through the one-time DNS record step by step, shows it the way your DNS host asks for it (Type, Name, Value, TTL), has a Copy as a message button, and says exactly what to fix when the record is not right. Help has steps for GoDaddy, Cloudflare, Namecheap, Azure DNS and Windows DNS. No database change. See /docs/neverlapse-dns |
| 1.6.1 | Oct 31, 2026 | Linux | NeverLapse DNS and acme-dns: the certificate page now counts the CNAME records your names need as you type them, and when you list hosts one by one (www, mail, ...) offers to switch to example.com + *.example.com in one click: one CNAME covers the whole domain, for this and every future certificate. Clearer wording on Get started, the Certificates page and in Help. No database change; upgrade by running the new Setup (Windows) or the new package's install.sh (Linux). See neverlapse.live/docs/neverlapse-dns. |
| 1.6.1 | Oct 31, 2026 | Windows | NeverLapse DNS and acme-dns: the certificate page now counts the CNAME records your names need as you type them, and when you list hosts one by one (www, mail, ...) offers to switch to example.com + *.example.com in one click: one CNAME covers the whole domain, for this and every future certificate. Clearer wording on Get started, the Certificates page and in Help. No database change; upgrade by running the new Setup (Windows) or the new package's install.sh (Linux). See neverlapse.live/docs/neverlapse-dns. |
| 1.6.0 | Oct 31, 2026 | Linux | NeverLapse Cert 1.6.0 - New DNS provider: acme-dns, for your own acme-dns server(s). Works with any DNS host and needs no key to your DNS: add one CNAME record per name, once (_acme-challenge.<name> pointing at your acme-dns server), and NeverLapse answers every challenge there, renewals included. NeverLapse registers the accounts or uses ones you paste in, and sends every challenge to all the servers you list. - The Certificates page shows the CNAME record(s) to add, with a Check CNAME button. Issue now and every renewal check the CNAMEs first and don't contact the certificate authority until they're in place. Names on one certificate can be in different zones. Get started can test the connection (a real update and a DNS lookup). - New DNS provider: NeverLapse DNS, included with your license. The same one-CNAME-per-name setup with nothing to host yourself: LiveIT runs two independent name servers, every challenge goes to both and one is enough. See neverlapse.live/docs/neverlapse-dns. - Upgrade: run the new Setup (Windows) or install.sh (Linux) over the old version. Agents don't need updating. |
| 1.6.0 | Oct 31, 2026 | Windows | NeverLapse Cert 1.6.0 - New DNS provider: acme-dns, for your own acme-dns server(s). Works with any DNS host and needs no key to your DNS: add one CNAME record per name, once (_acme-challenge.<name> pointing at your acme-dns server), and NeverLapse answers every challenge there, renewals included. NeverLapse registers the accounts or uses ones you paste in, and sends every challenge to all the servers you list. - The Certificates page shows the CNAME record(s) to add, with a Check CNAME button. Issue now and every renewal check the CNAMEs first and don't contact the certificate authority until they're in place. Names on one certificate can be in different zones. Get started can test the connection (a real update and a DNS lookup). - New DNS provider: NeverLapse DNS, included with your license. The same one-CNAME-per-name setup with nothing to host yourself: LiveIT runs two independent name servers, every challenge goes to both and one is enough. See neverlapse.live/docs/neverlapse-dns. - Upgrade: run the new Setup (Windows) or install.sh (Linux) over the old version. Agents don't need updating. |
| 1.5.3 | Oct 31, 2026 | Linux | NeverLapse Cert 1.5.3 - New host types: Linux - Apache Tomcat (agent, pull) and Windows - Apache Tomcat (agent, pull). The NeverLapse agent on the Tomcat server writes each new or renewed certificate as a PKCS12 keystore next to server.xml (readable only by Tomcat's service account), points the HTTPS connector on the port you set at it -- the <SSLHostConfig> form or the older keystoreFile connector attributes, changing only those attributes -- restarts Tomcat and checks the port serves the new certificate. If not, it puts server.xml and the keystore back and restarts Tomcat again. server.xml and the Tomcat service are found automatically. Tested with Tomcat 9 and 10.1. - Fixed: after a reboot where SQL Server Express took a few minutes to start, the NeverLapse services gave up and stayed stopped. They now wait for the database and start on their own as soon as it answers (Windows and Linux). |
| 1.5.3 | Oct 31, 2026 | Windows | NeverLapse Cert 1.5.3 - New host types: Linux - Apache Tomcat (agent, pull) and Windows - Apache Tomcat (agent, pull). The NeverLapse agent on the Tomcat server writes each new or renewed certificate as a PKCS12 keystore next to server.xml (readable only by Tomcat's service account), points the HTTPS connector on the port you set at it -- the <SSLHostConfig> form or the older keystoreFile connector attributes, changing only those attributes -- restarts Tomcat and checks the port serves the new certificate. If not, it puts server.xml and the keystore back and restarts Tomcat again. server.xml and the Tomcat service are found automatically. Tested with Tomcat 9 and 10.1. - Fixed: after a reboot where SQL Server Express took a few minutes to start, the NeverLapse services gave up and stayed stopped. They now wait for the database and start on their own as soon as it answers (Windows and Linux). |
| 1.5.2 | Oct 30, 2026 | Linux | NeverLapse Cert 1.5.2 - New host type: Microsoft Remote Desktop Services (agent, pull). Install the NeverLapse Windows agent on the RD Connection Broker and pick which roles get the certificate: RD Gateway, RD Web Access, and the broker's single sign-on and publishing certificates (all four by default). On every renewal the agent applies the certificate with Set-RDCertificate (RDS copies it to Gateway and Web Access servers elsewhere in the deployment), skips roles that already have it, checks that every role shows it and that RD Web Access and each Gateway serve it, and puts the previous certificates back if not. With highly available brokers it uses the active broker. The host's page shows each role's certificate and what the last change did, step by step. |
| 1.5.2 | Oct 30, 2026 | Windows | NeverLapse Cert 1.5.2 - New host type: Microsoft Remote Desktop Services (agent, pull). Install the NeverLapse Windows agent on the RD Connection Broker and pick which roles get the certificate: RD Gateway, RD Web Access, and the broker's single sign-on and publishing certificates (all four by default). On every renewal the agent applies the certificate with Set-RDCertificate (RDS copies it to Gateway and Web Access servers elsewhere in the deployment), skips roles that already have it, checks that every role shows it and that RD Web Access and each Gateway serve it, and puts the previous certificates back if not. With highly available brokers it uses the active broker. The host's page shows each role's certificate and what the last change did, step by step. |
| 1.5.1 | Oct 30, 2026 | Linux | NeverLapse Cert 1.5.1 - Fixed: changes saved while a certificate was being issued or renewed (for example the sites picked for an nginx, Apache or HAProxy host, or any other host setting) could be undone when the issuance finished. Every save now keeps what others saved in the meantime. - Fixed: issuing a certificate again shortly after it was issued could fail with "Cannot update challenge with status valid". NeverLapse now reuses names the certificate authority has already checked instead of asking again. - Fixed: the separate agent port on the Pull Agents page could be set to the web interface's own port (for example 8443 on a Linux server installed with --port 8443), which stopped the NeverLapse service from starting. That port, NeverLapse's internal port 5081 and ports another program uses are now refused with a suggestion, and if the saved port can't be opened the service logs it and keeps running without it. - Fixed: a certificate whose issuance was cut off by a service restart or an upgrade stayed on "Issuing now" for good. It is now issued again after the restart. |
| 1.5.1 | Oct 30, 2026 | Windows | NeverLapse Cert 1.5.1 - Fixed: changes saved while a certificate was being issued or renewed (for example the sites picked for an nginx, Apache or HAProxy host, or any other host setting) could be undone when the issuance finished. Every save now keeps what others saved in the meantime. - Fixed: issuing a certificate again shortly after it was issued could fail with "Cannot update challenge with status valid". NeverLapse now reuses names the certificate authority has already checked instead of asking again. - Fixed: the separate agent port on the Pull Agents page could be set to the web interface's own port (for example 8443 on a Linux server installed with --port 8443), which stopped the NeverLapse service from starting. That port, NeverLapse's internal port 5081 and ports another program uses are now refused with a suggestion, and if the saved port can't be opened the service logs it and keeps running without it. - Fixed: a certificate whose issuance was cut off by a service restart or an upgrade stayed on "Issuing now" for good. It is now issued again after the restart. |
| 1.5.0 | Oct 30, 2026 | Linux | NeverLapse Cert 1.5.0: new host type "Linux - nginx (agent, pull)". The Linux agent finds nginx server blocks and you pick which sites get which certificate. On every new or renewed certificate it backs up what it changes, writes the full chain and key, points nginx at them, runs nginx -t, reloads and checks the site serves the new certificate; if anything fails it puts everything back. Plain-HTTP sites get an HTTPS server added. Needs the native Linux agent (x86_64, systemd). |
| 1.5.0 | Oct 30, 2026 | Windows | NeverLapse Cert 1.5.0: new host type "Linux - nginx (agent, pull)". The Linux agent finds nginx server blocks and you pick which sites get which certificate. On every new or renewed certificate it backs up what it changes, writes the full chain and key, points nginx at them, runs nginx -t, reloads and checks the site serves the new certificate; if anything fails it puts everything back. Plain-HTTP sites get an HTTPS server added. Needs the native Linux agent (x86_64, systemd). |
| 1.4.2 | Oct 30, 2026 | Linux | NeverLapse Cert 1.4.2: Microsoft Exchange hosts with SMTP picked now move send and receive connectors that name a certificate to the renewed certificate, as described in 1.4.1 (in 1.4.1 this step never ran, so those connectors kept the old certificate). Upgrade the NeverLapse server, then the agent on each Exchange server. |
| 1.4.2 | Oct 30, 2026 | Windows | NeverLapse Cert 1.4.2: Microsoft Exchange hosts with SMTP picked now move send and receive connectors that name a certificate to the renewed certificate, as described in 1.4.1 (in 1.4.1 this step never ran, so those connectors kept the old certificate). Upgrade the NeverLapse server, then the agent on each Exchange server. |
| 1.4.1 | Oct 30, 2026 | Linux | Microsoft Exchange host type (agent, pull): imports and enables the certificate with Exchange cmdlets, no script. |
| 1.4.1 | Oct 30, 2026 | Windows | Microsoft Exchange host type (agent, pull): imports and enables the certificate with Exchange cmdlets, no script. |
| 1.4.0 | Oct 30, 2026 | Linux | First Linux release: Ubuntu 22.04/24.04 and Debian 12/13 with systemd, or Docker Compose (docker folder inside). PostgreSQL. Same license and agents. Windows DNS and Windows push hosts need NeverLapse on Windows. |
| 1.4.0 | Oct 30, 2026 | Windows | NeverLapse Cert now also runs on Linux and Docker (separate download). Windows: same installer, SQL Server Express. Quieter logs. |
| 1.3.11 | Oct 29, 2026 | Windows | Certificates page: Manual DNS records box and renewal errors now sit in a full-width row under the certificate; Get new records moved into that box; the box names the certificate own CA. In-app Help updated. |
| 1.3.10 | Oct 29, 2026 | Windows | Host page shows Linux or Windows wording to match the host. Includes everything in 1.3.9 (VMware Cloud Director cells). |
| 1.3.9 | Oct 29, 2026 | Windows | New host type for VMware Cloud Director cells (Linux agent, swaps the cell certificate and restarts vmware-vcd, rolls back on failure). Linux agent self-update fix. |
| 1.3.8 | Oct 23, 2026 | Windows | Confirmations use the app's own dialog (works in browsers that block pop-ups); names with apostrophes fixed |
| 1.3.7 | Oct 23, 2026 | Windows | You choose which agents update, from the Hosts page (or turn automatic agent updates back on) |
| 1.3.6 | Oct 23, 2026 | Windows | IIS bindings NeverLapse created stay ticked on the host page, so renewals keep rebinding them |
| 1.3.5 | Oct 23, 2026 | Windows | Fix: IIS sites now get their certificate bound (push hosts and the IIS agent) |
| 1.3.3 | Oct 23, 2026 | Windows | Hosts list shows each agent version; Windows agent listed in Settings > Apps with Uninstall |
| 1.3.1 | Oct 23, 2026 | Windows | GoDaddy SSL certificates via ACME (one entry per certificate you bought) |
| 1.3.0 | Oct 23, 2026 | Windows | Agents check in every minute (per-host setting) and update themselves |
| 1.2.9 | Oct 23, 2026 | Windows | Agents re-apply their certificates once after an upgrade (fixes extra certificates missed by older agents) |
| 1.2.8 | Oct 23, 2026 | Windows | New users choose their own password in a dialog at first sign-in, then go straight to the dashboard |
| 1.2.7 | Oct 23, 2026 | Windows | General agent hosts (Windows + Linux) can carry several certificates, each in its own sub-folder |
| 1.2.6 | Oct 14, 2026 | Windows | Setup now copes with security software (e.g. SentinelOne) that interferes with Windows Installer during the SQL Server Express step: it restarts Windows Installer and resumes, and otherwise says what to exclude. |
| 1.2.5 | Oct 14, 2026 | Windows | New: certificates from other CAs besides Let's Encrypt (ZeroSSL, Google Trust Services, DigiCert, Sectigo, SSL.com or any ACME CA) under Settings > Certificate authorities; live step-by-step status while a certificate issues; CA column on the Certificates page. |
| 1.1.4 | Oct 14, 2026 | Windows | New: Manual DNS (add the TXT records yourself, for any DNS host), optional email when a certificate is issued or renewed, failed renewals shown on the certificate and the dashboard. Fixes: DNS check works behind firewalls that block direct name server queries; action menus no longer cut off. |
| 1.1.3 | Oct 14, 2026 | Windows | Fix: certificates no longer fail when this server cannot reach the domain name servers directly (firewall or NAT); the DNS check now uses public resolvers in that case. |
| 1.1.2 | Oct 13, 2026 | Windows | Uninstall: removing all data works (incl. SQL Express 2025). |
| 1.1.1 | Oct 13, 2026 | Windows | Fixes fresh installs (web interface did not start in 1.1.0). |
| 1.1.0 | Oct 13, 2026 | Windows | First production release: production license key, signed by Live Information Technology Consulting Group, LLC (publicly trusted). |
| 1.0.12 (staging) | Oct 13, 2026 | Windows | Renamed to NeverLapse Cert; clearer in-app help. |
| 1.0.11 (staging) | Oct 11, 2026 | Windows | Get started: every DNS provider gets its own connect step with a real add-and-remove test; links to where to get keys. |
| 1.0.10 (staging) | Oct 11, 2026 | Windows | Get started: Windows DNS setup with server, zone, account and a live connection test; certificate form pre-filled. |
| 1.0.9 (staging) | Oct 11, 2026 | Windows | Uninstall can remove all NeverLapse data, including its SQL Express instance. |
| 1.0.8 (staging) | Oct 11, 2026 | Windows | Trial check: one trial per server, domain and company. |
| 1.0.7 (staging) | Oct 11, 2026 | Windows | Get started: the DNS provider can be changed after picking it. |
| 1.0.6 (staging) | Oct 11, 2026 | Windows | Get started checklist, new icon, step-by-step setup progress. |
| 1.0.5 (staging) | Oct 10, 2026 | Windows | Test build: setup shows each step, a timer and download progress. |
| 1.0.4 (staging) | Oct 10, 2026 | Windows | Test build: licenses against neverlapse.live. |