Subject: CVS commit: pkgsrc/security
From: Adam Ciarcinski
Date: 2022-11-26 19:01:37
Message id: 20221126180137.EB1CFFA90@cvs.NetBSD.org

Log Message:
py-acme py-certbot*: updated to 2.0.0

Certbot 2.0.0

Added

Support for Python 3.11 was added to Certbot and all of its components.
acme.challenges.HTTP01Response.simple_verify now accepts a timeout argument \ 
which defaults to 30 that causes the verification request to timeout after that \ 
many seconds.

Changed

The default key type for new certificates is now ECDSA secp256r1 (P-256). It was \ 
previously RSA 2048-bit. Existing certificates are not affected.
The Apache plugin no longer supports Apache 2.2.
acme and Certbot no longer support versions of ACME from before the RFC 8555 \ 
standard.
acme and Certbot no longer support the old urn:acme:error: ACME error prefix.
Removed the deprecated certbot-dns-cloudxns plugin.
Certbot will now error if a certificate has --reuse-key set and a conflicting \ 
--key-type, --key-size or --elliptic-curve is requested on the CLI. Use \ 
--new-key to change the key while preserving --reuse-key.
3rd party plugins no longer support the dist_name:plugin_name format on the CLI \ 
and in configuration files. Use the shorter plugin_name format.
acme.client.Client, acme.client.ClientBase, \ 
acme.client.BackwardsCompatibleClientV2, acme.mixins, \ 
acme.client.DER_CONTENT_TYPE, acme.fields.Resource, acme.fields.resource, \ 
acme.magic_typing, acme.messages.OLD_ERROR_PREFIX, \ 
acme.messages.Directory.register, \ 
acme.messages.Authorization.resolved_combinations, \ 
acme.messages.Authorization.combinations have been removed.
acme.messages.Directory now only supports lookups by the exact resource name \ 
string in the ACME directory (e.g. directory['newOrder']).
Removed the deprecated source_address argument for acme.client.ClientNetwork.
The zope based interfaces in certbot.interfaces have been removed in favor of \ 
the abc based interfaces found in the same module.
Certbot no longer depends on zope.
Removed deprecated function certbot.util.get_strict_version.
Removed deprecated functions certbot.crypto_util.init_save_csr, \ 
certbot.crypto_util.init_save_key,
and certbot.compat.misc.execute_command
The attributes FileDisplay, NoninteractiveDisplay, SIDE_FRAME, \ 
input_with_timeout, separate_list_input, summarize_domain_list, HELP, and ESC \ 
from certbot.display.util have been removed.
Removed deprecated functions certbot.tests.util.patch_get_utility*. Plugins \ 
should now
patch certbot.display.util themselves in their tests or use
certbot.tests.util.patch_display_util as a temporary workaround.
Certbot's test API under certbot.tests now uses unittest.mock instead of the 3rd \ 
party mock library.

Fixed

Fixes a bug where the certbot working directory has unusably restrictive \ 
permissions on systems with stricter default umasks.
Requests to subscribe to the EFF mailing list now time out after 60 seconds.

Files:
RevisionActionfile
1.32modifypkgsrc/security/py-acme/Makefile
1.16modifypkgsrc/security/py-acme/PLIST
1.46modifypkgsrc/security/py-acme/distinfo
1.36modifypkgsrc/security/py-certbot/Makefile
1.71modifypkgsrc/security/py-certbot/Makefile.common
1.33modifypkgsrc/security/py-certbot/PLIST
1.74modifypkgsrc/security/py-certbot/distinfo
1.46modifypkgsrc/security/py-certbot-apache/distinfo
1.34modifypkgsrc/security/py-certbot-dns-digitalocean/distinfo
1.41modifypkgsrc/security/py-certbot-dns-dnsimple/distinfo
1.41modifypkgsrc/security/py-certbot-dns-dnsmadeeasy/distinfo
1.41modifypkgsrc/security/py-certbot-dns-gehirn/distinfo
1.41modifypkgsrc/security/py-certbot-dns-google/distinfo
1.41modifypkgsrc/security/py-certbot-dns-linode/distinfo
1.46modifypkgsrc/security/py-certbot-dns-luadns/distinfo
1.46modifypkgsrc/security/py-certbot-dns-nsone/distinfo
1.46modifypkgsrc/security/py-certbot-dns-ovh/distinfo
1.46modifypkgsrc/security/py-certbot-dns-rfc2136/distinfo
1.46modifypkgsrc/security/py-certbot-dns-route53/distinfo
1.46modifypkgsrc/security/py-certbot-dns-sakuracloud/distinfo
1.47modifypkgsrc/security/py-certbot-nginx/distinfo