Onionspray release 1.7.0

rhatto · October 23, 2025, 12:35pm

Greetings,

We just released Onionspray 1.7.0, an application to serve regular websites as onionsites.

This release brings many new features and also some fixes, which are listed in
the 1.7.0 milestone.

Found a bug or have a fix? Please report to us so it can be solved.

Highlights

A lot of effort was put in making easier to quickly install create onionsites.
HTTPS certificate management also got easier and better documented.
It’s now simpler to update an installation with the onionspray update and onionspray upgrade commands.

Enhanced build system (tpo/onion-services/onionspray#73), including:
- Support building Onionspray without sudo privileges on Debian-like systems
  (tpo/onion-services/onionspray#61).
- Support compilation procedure in “dependencies” and “build” stages
  (tpo/onion-services/onionspray#62).
Vanity address generation (tpo/onion-services/onionspray#65) using
Onionmine.
New “create” command for quick setup (tpo/onion-services/onionspray#66).
Self-signed TLS certificate script now also generates a CSR, for those who
wants to get a CA-issued HTTPS certificate
(tpo/onion-services/onionspray#76).
Allow for customizing self-signed certificate and CSR information
(tpo/onion-services/onionspray#72).
Added regenerate-tls-keys command to regenerate TLS keys, CSR and
self-signed certificate (tpo/onion-services/onionspray#76).
Added prove-possession command, used to prove possession of an .onion
address (tpo/onion-services/onionspray#76,
tpo/onion-services/onionspray!130). Useful for getting a CA-issued
certificate.
It can support many procedures, but initially only the onion-csr
nonce-based Proof of Possession (PoP) needs to be supported, through Onionmine.
Support for Debian trixie (tpo/onion-services/onionspray!99).
Updated platform maintenance status (tpo/onion-services/onionspray#74).
Improved installation and usage docs (tpo/onion-services/onionspray#67).

Update OpenResty to 1.27.1.2.
Update Tor to 0.4.8.19.
Auto-generated self-signed certificates lifetime bumped to 365 days by
default (tpo/onion-services/onionspray!93).
Install deb.torproject.org-keyring on Debian systems (tpo/onion-services/onionspray#71).
Don’t append the date in the configure log, as this messes log rotation
(tpo/onion-services/onionspray!117).