Log message:
py-acme py-certbot*: updated to 1.21.0

Certbot 1.21.0

Added

Certbot will generate a web.config file on Windows in the challenge path
when the webroot plugin is used, if one does not exist. This web.config file
lets IIS serve challenge files while they do not have an extension.

Changed

We changed the PGP key used to sign the packages we upload to PyPI. Going
forward, releases will be signed with one of three different keys. All of
these keys are available on major key servers and signed by our previous PGP
key. The fingerprints of these new keys are:
BF6BCFC89E90747B9A680FD7B6029E8500F7DB16
86379B4F0AF371B50CD9E5FF3402831161D1D280
20F201346BF8F3F455A73F9A780CC99432A28621

Fixed

More details about these changes can be found on our GitHub repo.

Log message:
security: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Unfetchable distfiles (fetched conditionally?):
./security/cyrus-sasl/distinfo \ 
cyrus-sasl-dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d.patch.v2

Log message:
py-acme py-certbot: updated to 1.20.0

1.20.0

Added

* Added `--no-reuse-key`. This remains the default behavior, but the flag may be
  useful to unset the `--reuse-key` option on existing certificates.

Fixed

* The certbot-dns-rfc2136 plugin in Certbot 1.19.0 inadvertently had an implicit
  dependency on `dnspython>=2.0`. This has been relaxed to `dnspython>=1.15.0`.

Log message:
security: Remove SHA1 hashes for distfiles

Log message:
py-acme py-certbot*: updated to 1.19.0

Certbot 1.19.0

Added

The certbot-dns-rfc2136 plugin always assumed the use of an IP address as the
target server, but this was never checked. Until now. The plugin raises an error
if the configured target server is not a valid IPv4 or IPv6 address.
Our acme library now supports requesting certificates for IP addresses.
This feature is still unsupported by Certbot and Let's Encrypt.

Changed

Several attributes in certbot.display.util module are deprecated and will
be removed in a future release of Certbot. Any import of these attributes will
emit a warning to prepare the transition for developers.
zope based interfaces in certbot.interfaces module are deprecated and will
be removed in a future release of Certbot. Any import of these interfaces will
emit a warning to prepare the transition for developers.
We removed the dependency on chardet from our acme library. Except for when
downloading a certificate in an alternate format, our acme library now
assumes all server responses are UTF-8 encoded which is required by RFC 8555.

Fixed

Fixed parsing of Defined values in the Apache plugin to allow for = in the value.
Fixed a relatively harmless crash when issuing a certificate with --quiet/-q.

Log message:
py-acme py-certbot*: updated to 1.18.0

1.18.0

Added

New functions that Certbot plugins can use to interact with the user have been \ 
added to certbot.display.util. We plan to deprecate using IDisplay with zope in \ 
favor of these new functions in the future.
The Plugin, Authenticator and Installer classes are added to certbot.interfaces \ 
module as alternatives to Certbot's current zope based plugin interfaces. The \ 
API of these interfaces is identical, but they are based on Python's abc module \ 
instead of zope. Certbot will continue to detect plugins that implement either \ 
interface, but we plan to drop support for zope based interfaces in a future \ 
version of Certbot.
The class certbot.configuration.NamespaceConfig is added to the Certbot's public API.

Changed

When self-validating HTTP-01 challenges using \ 
acme.challenges.HTTP01Response.simple_verify, we now assume that the response is \ 
composed of only ASCII characters. Previously we were relying on the default \ 
behavior of the requests library which tries to guess the encoding of the \ 
response which was error prone.
acme: the .client.Client and .client.BackwardsCompatibleClientV2 classes are now \ 
deprecated in favor of .client.ClientV2.
The certbot.tests.patch_get_utility* functions have been deprecated. Plugins \ 
should now patch certbot.display.util themselves in their tests or use \ 
certbot.tests.util.patch_display_util as a temporary workaround.
In order to simplify the transition to Certbot's new plugin interfaces, the \ 
classes Plugin and Installer in certbot.plugins.common module and \ 
certbot.plugins.dns_common.DNSAuthenticator now implement Certbot's new plugin \ 
interfaces. The Certbot plugins based on these classes are now automatically \ 
detected as implementing these interfaces.
We added a dependency on chardet to our acme library so that it will be used \ 
over charset_normalizer in newer versions of requests.

Fixed

The Apache authenticator no longer crashes with "Unable to insert \ 
label" when encountering a completely empty vhost. This issue affected \ 
Certbot 1.17.0.
Users of the Certbot snap on Debian 9 (Stretch) should no longer encounter an \ 
"access denied" error when installing DNS plugins.

Log message:
py-acme, py-certbot*: updated to 1.17.0

Certbot 1.17.0

Added

Add Void Linux overrides for certbot-apache.

Changed

We changed how dependencies are specified between Certbot packages. For this
and future releases, higher level Certbot components will require that lower
level components are the same version or newer. More specifically, version X
of the Certbot package will now always require acme>=X and version Y of a
plugin package will always require acme>=Y and certbot=>Y. Specifying
dependencies in this way simplifies testing and development.
The Apache authenticator now always configures virtual hosts which do not have
an explicit ServerName. This should make it work more reliably with the
default Apache configuration in Debian-based environments.

Fixed

When we increased the logging level on our nginx "Could not parse \ 
file" message,
it caused a previously-existing inability to parse empty files to become more
visible. We have now added the ability to correctly parse empty files, so that
message should only show for more significant errors.

Log message:
py-acme py-certbot*: updated to 1.16.0

Certbot 1.16.0

Changed

DNS plugins based on lexicon now require dns-lexicon >= v3.1.0
Use UTF-8 encoding for renewal configuration files
Windows installer now cleans up old Certbot dependency packages
before installing the new ones to avoid version conflicts.
This release contains a substantial command-line UX overhaul,
based on previous user research. The main goal was to streamline
and clarify output. If you would like to see more verbose output, use
the -v or -vv flags. UX improvements are an iterative process and
the Certbot team welcomes constructive feedback.
Functions certbot.crypto_util.init_save_key and certbot.crypto_util.init_save_csr,
whose behaviors rely on the global Certbot config singleton, are deprecated and will
be removed in a future release. Please use certbot.crypto_util.generate_key and
certbot.crypto_util.generate_csr instead.

Fixed

Fix TypeError due to incompatibility with lexicon >= v3.6.0
Installers (e.g. nginx, Apache) were being restarted unnecessarily after dry-run \ 
renewals.
Colors and bold text should properly render in all supported versions of Windows.

Log message:
py-acme py-certbot*: updated to 1.15.0

1.15.0 - 2021-05-04
More details about these changes can be found on our GitHub repo.

Log message:
py-acme py-certbot*: updated to 1.14.0

Certbot 1.14.0

Changed

certbot-auto no longer checks for updates on any operating system.
The module acme.magic_typing is deprecated and will be removed in a future release.
Please use the built-in module typing instead.
The DigitalOcean plugin now creates TXT records for the DNS-01 challenge with a \ 
lower 30s TTL.

Fixed

Don't output an empty line for a hidden certificate when certbot certificates is \ 
being used
in combination with --cert-name or -d.