./security/py-certbot, Client for the Lets Encrypt CA

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 1.20.0, Package name: py39-certbot-1.20.0, Maintainer: adam

Certbot, previously the Let's Encrypt Client, is EFF's tool to
obtain certs from Let's Encrypt, and (optionally) autoenable HTTPS
on your server. It can also act as a client for any other CA that
uses the ACME protocol.


Required to run:
[devel/py-setuptools] [devel/py-ZopeInterface] [time/py-pytz] [time/py-parsedatetime] [devel/py-mock] [security/py-cryptography] [devel/py-ZopeComponent] [devel/py-configobj] [devel/py-configargparse] [time/py-rfc3339] [security/py-acme] [security/py-josepy] [lang/python37] [devel/py-distro]

Required to build:
[pkgtools/cwrappers]

Master sites:

RMD160: c7ca1ed62b52667a14fe9fdec566939ec961d9e9
Filesize: 398.062 KB

Version history: (Expand)


CVS history: (Expand)


   2021-10-10 20:43:13 by Adam Ciarcinski | Files touched by this commit (18) | Package updated
Log message:
py-acme py-certbot: updated to 1.20.0

1.20.0

Added

* Added `--no-reuse-key`. This remains the default behavior, but the flag may be
  useful to unset the `--reuse-key` option on existing certificates.

Fixed

* The certbot-dns-rfc2136 plugin in Certbot 1.19.0 inadvertently had an implicit
  dependency on `dnspython>=2.0`. This has been relaxed to `dnspython>=1.15.0`.
   2021-10-07 16:54:50 by Nia Alarie | Files touched by this commit (606)
Log message:
security: Remove SHA1 hashes for distfiles
   2021-09-15 14:05:16 by Adam Ciarcinski | Files touched by this commit (18) | Package updated
Log message:
py-acme py-certbot*: updated to 1.19.0

Certbot 1.19.0

Added

The certbot-dns-rfc2136 plugin always assumed the use of an IP address as the
target server, but this was never checked. Until now. The plugin raises an error
if the configured target server is not a valid IPv4 or IPv6 address.
Our acme library now supports requesting certificates for IP addresses.
This feature is still unsupported by Certbot and Let's Encrypt.

Changed

Several attributes in certbot.display.util module are deprecated and will
be removed in a future release of Certbot. Any import of these attributes will
emit a warning to prepare the transition for developers.
zope based interfaces in certbot.interfaces module are deprecated and will
be removed in a future release of Certbot. Any import of these interfaces will
emit a warning to prepare the transition for developers.
We removed the dependency on chardet from our acme library. Except for when
downloading a certificate in an alternate format, our acme library now
assumes all server responses are UTF-8 encoded which is required by RFC 8555.

Fixed

Fixed parsing of Defined values in the Apache plugin to allow for = in the value.
Fixed a relatively harmless crash when issuing a certificate with --quiet/-q.
   2021-08-05 12:52:01 by Adam Ciarcinski | Files touched by this commit (33) | Package updated
Log message:
py-acme py-certbot*: updated to 1.18.0

1.18.0

Added

New functions that Certbot plugins can use to interact with the user have been \ 
added to certbot.display.util. We plan to deprecate using IDisplay with zope in \ 
favor of these new functions in the future.
The Plugin, Authenticator and Installer classes are added to certbot.interfaces \ 
module as alternatives to Certbot's current zope based plugin interfaces. The \ 
API of these interfaces is identical, but they are based on Python's abc module \ 
instead of zope. Certbot will continue to detect plugins that implement either \ 
interface, but we plan to drop support for zope based interfaces in a future \ 
version of Certbot.
The class certbot.configuration.NamespaceConfig is added to the Certbot's public API.

Changed

When self-validating HTTP-01 challenges using \ 
acme.challenges.HTTP01Response.simple_verify, we now assume that the response is \ 
composed of only ASCII characters. Previously we were relying on the default \ 
behavior of the requests library which tries to guess the encoding of the \ 
response which was error prone.
acme: the .client.Client and .client.BackwardsCompatibleClientV2 classes are now \ 
deprecated in favor of .client.ClientV2.
The certbot.tests.patch_get_utility* functions have been deprecated. Plugins \ 
should now patch certbot.display.util themselves in their tests or use \ 
certbot.tests.util.patch_display_util as a temporary workaround.
In order to simplify the transition to Certbot's new plugin interfaces, the \ 
classes Plugin and Installer in certbot.plugins.common module and \ 
certbot.plugins.dns_common.DNSAuthenticator now implement Certbot's new plugin \ 
interfaces. The Certbot plugins based on these classes are now automatically \ 
detected as implementing these interfaces.
We added a dependency on chardet to our acme library so that it will be used \ 
over charset_normalizer in newer versions of requests.

Fixed

The Apache authenticator no longer crashes with "Unable to insert \ 
label" when encountering a completely empty vhost. This issue affected \ 
Certbot 1.17.0.
Users of the Certbot snap on Debian 9 (Stretch) should no longer encounter an \ 
"access denied" error when installing DNS plugins.
   2021-07-23 09:26:45 by Adam Ciarcinski | Files touched by this commit (18) | Package updated
Log message:
py-acme, py-certbot*: updated to 1.17.0

Certbot 1.17.0

Added

Add Void Linux overrides for certbot-apache.

Changed

We changed how dependencies are specified between Certbot packages. For this
and future releases, higher level Certbot components will require that lower
level components are the same version or newer. More specifically, version X
of the Certbot package will now always require acme>=X and version Y of a
plugin package will always require acme>=Y and certbot=>Y. Specifying
dependencies in this way simplifies testing and development.
The Apache authenticator now always configures virtual hosts which do not have
an explicit ServerName. This should make it work more reliably with the
default Apache configuration in Debian-based environments.

Fixed

When we increased the logging level on our nginx "Could not parse \ 
file" message,
it caused a previously-existing inability to parse empty files to become more
visible. We have now added the ability to correctly parse empty files, so that
message should only show for more significant errors.
   2021-06-14 14:15:41 by Adam Ciarcinski | Files touched by this commit (24) | Package updated
Log message:
py-acme py-certbot*: updated to 1.16.0

Certbot 1.16.0

Changed

DNS plugins based on lexicon now require dns-lexicon >= v3.1.0
Use UTF-8 encoding for renewal configuration files
Windows installer now cleans up old Certbot dependency packages
before installing the new ones to avoid version conflicts.
This release contains a substantial command-line UX overhaul,
based on previous user research. The main goal was to streamline
and clarify output. If you would like to see more verbose output, use
the -v or -vv flags. UX improvements are an iterative process and
the Certbot team welcomes constructive feedback.
Functions certbot.crypto_util.init_save_key and certbot.crypto_util.init_save_csr,
whose behaviors rely on the global Certbot config singleton, are deprecated and will
be removed in a future release. Please use certbot.crypto_util.generate_key and
certbot.crypto_util.generate_csr instead.

Fixed

Fix TypeError due to incompatibility with lexicon >= v3.6.0
Installers (e.g. nginx, Apache) were being restarted unnecessarily after dry-run \ 
renewals.
Colors and bold text should properly render in all supported versions of Windows.
   2021-05-14 10:24:08 by Adam Ciarcinski | Files touched by this commit (17) | Package updated
Log message:
py-acme py-certbot*: updated to 1.15.0

1.15.0 - 2021-05-04
More details about these changes can be found on our GitHub repo.
   2021-04-15 07:16:37 by Adam Ciarcinski | Files touched by this commit (18) | Package updated
Log message:
py-acme py-certbot*: updated to 1.14.0

Certbot 1.14.0

Changed

certbot-auto no longer checks for updates on any operating system.
The module acme.magic_typing is deprecated and will be removed in a future release.
Please use the built-in module typing instead.
The DigitalOcean plugin now creates TXT records for the DNS-01 challenge with a \ 
lower 30s TTL.

Fixed

Don't output an empty line for a hidden certificate when certbot certificates is \ 
being used
in combination with --cert-name or -d.