Next | Query returned 39 messages, browsing 11 to 20 | Previous

History of commit frequency

CVS Commit History:


   2021-10-26 13:18:07 by Nia Alarie | Files touched by this commit (605)
Log message:
security: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Unfetchable distfiles (fetched conditionally?):
./security/cyrus-sasl/distinfo \ 
cyrus-sasl-dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d.patch.v2
   2021-10-10 20:43:13 by Adam Ciarcinski | Files touched by this commit (18) | Package updated
Log message:
py-acme py-certbot: updated to 1.20.0

1.20.0

Added

* Added `--no-reuse-key`. This remains the default behavior, but the flag may be
  useful to unset the `--reuse-key` option on existing certificates.

Fixed

* The certbot-dns-rfc2136 plugin in Certbot 1.19.0 inadvertently had an implicit
  dependency on `dnspython>=2.0`. This has been relaxed to `dnspython>=1.15.0`.
   2021-10-07 16:54:50 by Nia Alarie | Files touched by this commit (606)
Log message:
security: Remove SHA1 hashes for distfiles
   2021-09-15 14:05:16 by Adam Ciarcinski | Files touched by this commit (18) | Package updated
Log message:
py-acme py-certbot*: updated to 1.19.0

Certbot 1.19.0

Added

The certbot-dns-rfc2136 plugin always assumed the use of an IP address as the
target server, but this was never checked. Until now. The plugin raises an error
if the configured target server is not a valid IPv4 or IPv6 address.
Our acme library now supports requesting certificates for IP addresses.
This feature is still unsupported by Certbot and Let's Encrypt.

Changed

Several attributes in certbot.display.util module are deprecated and will
be removed in a future release of Certbot. Any import of these attributes will
emit a warning to prepare the transition for developers.
zope based interfaces in certbot.interfaces module are deprecated and will
be removed in a future release of Certbot. Any import of these interfaces will
emit a warning to prepare the transition for developers.
We removed the dependency on chardet from our acme library. Except for when
downloading a certificate in an alternate format, our acme library now
assumes all server responses are UTF-8 encoded which is required by RFC 8555.

Fixed

Fixed parsing of Defined values in the Apache plugin to allow for = in the value.
Fixed a relatively harmless crash when issuing a certificate with --quiet/-q.
   2021-08-05 12:52:01 by Adam Ciarcinski | Files touched by this commit (33) | Package updated
Log message:
py-acme py-certbot*: updated to 1.18.0

1.18.0

Added

New functions that Certbot plugins can use to interact with the user have been \ 
added to certbot.display.util. We plan to deprecate using IDisplay with zope in \ 
favor of these new functions in the future.
The Plugin, Authenticator and Installer classes are added to certbot.interfaces \ 
module as alternatives to Certbot's current zope based plugin interfaces. The \ 
API of these interfaces is identical, but they are based on Python's abc module \ 
instead of zope. Certbot will continue to detect plugins that implement either \ 
interface, but we plan to drop support for zope based interfaces in a future \ 
version of Certbot.
The class certbot.configuration.NamespaceConfig is added to the Certbot's public API.

Changed

When self-validating HTTP-01 challenges using \ 
acme.challenges.HTTP01Response.simple_verify, we now assume that the response is \ 
composed of only ASCII characters. Previously we were relying on the default \ 
behavior of the requests library which tries to guess the encoding of the \ 
response which was error prone.
acme: the .client.Client and .client.BackwardsCompatibleClientV2 classes are now \ 
deprecated in favor of .client.ClientV2.
The certbot.tests.patch_get_utility* functions have been deprecated. Plugins \ 
should now patch certbot.display.util themselves in their tests or use \ 
certbot.tests.util.patch_display_util as a temporary workaround.
In order to simplify the transition to Certbot's new plugin interfaces, the \ 
classes Plugin and Installer in certbot.plugins.common module and \ 
certbot.plugins.dns_common.DNSAuthenticator now implement Certbot's new plugin \ 
interfaces. The Certbot plugins based on these classes are now automatically \ 
detected as implementing these interfaces.
We added a dependency on chardet to our acme library so that it will be used \ 
over charset_normalizer in newer versions of requests.

Fixed

The Apache authenticator no longer crashes with "Unable to insert \ 
label" when encountering a completely empty vhost. This issue affected \ 
Certbot 1.17.0.
Users of the Certbot snap on Debian 9 (Stretch) should no longer encounter an \ 
"access denied" error when installing DNS plugins.
   2021-07-23 09:26:45 by Adam Ciarcinski | Files touched by this commit (18) | Package updated
Log message:
py-acme, py-certbot*: updated to 1.17.0

Certbot 1.17.0

Added

Add Void Linux overrides for certbot-apache.

Changed

We changed how dependencies are specified between Certbot packages. For this
and future releases, higher level Certbot components will require that lower
level components are the same version or newer. More specifically, version X
of the Certbot package will now always require acme>=X and version Y of a
plugin package will always require acme>=Y and certbot=>Y. Specifying
dependencies in this way simplifies testing and development.
The Apache authenticator now always configures virtual hosts which do not have
an explicit ServerName. This should make it work more reliably with the
default Apache configuration in Debian-based environments.

Fixed

When we increased the logging level on our nginx "Could not parse \ 
file" message,
it caused a previously-existing inability to parse empty files to become more
visible. We have now added the ability to correctly parse empty files, so that
message should only show for more significant errors.
   2021-06-14 14:15:41 by Adam Ciarcinski | Files touched by this commit (24) | Package updated
Log message:
py-acme py-certbot*: updated to 1.16.0

Certbot 1.16.0

Changed

DNS plugins based on lexicon now require dns-lexicon >= v3.1.0
Use UTF-8 encoding for renewal configuration files
Windows installer now cleans up old Certbot dependency packages
before installing the new ones to avoid version conflicts.
This release contains a substantial command-line UX overhaul,
based on previous user research. The main goal was to streamline
and clarify output. If you would like to see more verbose output, use
the -v or -vv flags. UX improvements are an iterative process and
the Certbot team welcomes constructive feedback.
Functions certbot.crypto_util.init_save_key and certbot.crypto_util.init_save_csr,
whose behaviors rely on the global Certbot config singleton, are deprecated and will
be removed in a future release. Please use certbot.crypto_util.generate_key and
certbot.crypto_util.generate_csr instead.

Fixed

Fix TypeError due to incompatibility with lexicon >= v3.6.0
Installers (e.g. nginx, Apache) were being restarted unnecessarily after dry-run \ 
renewals.
Colors and bold text should properly render in all supported versions of Windows.
   2021-05-14 10:24:08 by Adam Ciarcinski | Files touched by this commit (17) | Package updated
Log message:
py-acme py-certbot*: updated to 1.15.0

1.15.0 - 2021-05-04
More details about these changes can be found on our GitHub repo.
   2021-04-15 07:16:37 by Adam Ciarcinski | Files touched by this commit (18) | Package updated
Log message:
py-acme py-certbot*: updated to 1.14.0

Certbot 1.14.0

Changed

certbot-auto no longer checks for updates on any operating system.
The module acme.magic_typing is deprecated and will be removed in a future release.
Please use the built-in module typing instead.
The DigitalOcean plugin now creates TXT records for the DNS-01 challenge with a \ 
lower 30s TTL.

Fixed

Don't output an empty line for a hidden certificate when certbot certificates is \ 
being used
in combination with --cert-name or -d.
   2021-03-06 14:34:25 by Adam Ciarcinski | Files touched by this commit (17) | Package updated
Log message:
py-acme py-certbot*: updated to 1.13.0

Certbot 1.13.0

Changed

CLI flags --os-packages-only, --no-self-upgrade, --no-bootstrap and \ 
--no-permissions-check,
which are related to certbot-auto, are deprecated and will be removed in a \ 
future release.
Certbot no longer conditionally depends on an external mock module. Certbot's
test API will continue to use it if it is available for backwards
compatibility, however, this behavior has been deprecated and will be removed
in a future release.
The acme library no longer depends on the security extras from requests
which was needed to support SNI in TLS requests when using old versions of
Python 2.
Certbot and all of its components no longer depend on the library six.
The update of certbot-auto itself is now disabled on all RHEL-like systems.
When revoking a certificate by --cert-name, it is no longer necessary to specify \ 
the --server
if the certificate was obtained from a non-default ACME server.
The nginx authenticator now configures all matching HTTP and HTTPS vhosts for \ 
the HTTP-01
challenge. It is now compatible with external HTTPS redirection by a CDN or load \ 
balancer.

Next | Query returned 39 messages, browsing 11 to 20 | Previous