./security/py-certbot, Client for the Lets Encrypt CA

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 1.30.0, Package name: py310-certbot-1.30.0, Maintainer: adam

Certbot, previously the Let's Encrypt Client, is EFF's tool to
obtain certs from Let's Encrypt, and (optionally) autoenable HTTPS
on your server. It can also act as a client for any other CA that
uses the ACME protocol.


Required to run:
[devel/py-setuptools] [devel/py-ZopeInterface] [time/py-pytz] [time/py-parsedatetime] [devel/py-mock] [security/py-cryptography] [devel/py-ZopeComponent] [devel/py-configobj] [devel/py-configargparse] [time/py-rfc3339] [security/py-acme] [security/py-josepy] [lang/python37] [devel/py-distro]

Required to build:
[pkgtools/cwrappers]

Master sites:

Filesize: 415.98 KB

Version history: (Expand)


CVS history: (Expand)


   2022-09-08 17:12:57 by Adam Ciarcinski | Files touched by this commit (17) | Package updated
Log message:
py-acme py-certbot*: updated to 1.30.0

Changes 1.30.0

acme.client.ClientBase, acme.messages.Authorization.resolved_combinations,
acme.messages.Authorization.combinations, acme.mixins, acme.fields.resource,
and acme.fields.Resource are deprecated and will be removed in a future release.
acme.messages.OLD_ERROR_PREFIX (urn:acme:error:) is deprecated and support for
the old ACME error prefix in Certbot will be removed in the next major release of
Certbot.
acme.messages.Directory.register is deprecated and will be removed in the next
major release of Certbot. Furthermore, .Directory will only support lookups
by the exact resource name string in the ACME directory (e.g. directory['newOrder']).
The certbot-dns-cloudxns plugin is now deprecated and will be removed in the
next major release of Certbot.
The source_address argument for acme.client.ClientNetwork is deprecated
and support for it will be removed in the next major release.
Add UI text suggesting users create certs for multiple domains, when possible
   2022-07-12 07:44:00 by Adam Ciarcinski | Files touched by this commit (18) | Package updated
Log message:
py-acme py-certbot*: updated to 1.29.0

Certbot 1.29.0

Added

Updated Windows installer to be signed and trusted in Windows

Changed

--allow-subset-of-names will now additionally retry in cases where domains are \ 
rejected while creating or finalizing orders. This requires subproblem support \ 
from the ACME server.

Fixed

The show_account subcommand now uses the "newAccount" ACME endpoint to \ 
fetch the account
data, so it doesn't rely on the locally stored account URL. This fixes \ 
situations where Certbot
would use old ACMEv1 registration info with non-functional account URLs.

The generated Certificate Signing Requests are now generated as version 1 \ 
instead of version 3. This resolves situations in where strict enforcement of \ 
PKCS#10 meant that CSRs that were generated as version 3 were rejected.
   2022-06-08 14:00:02 by Adam Ciarcinski | Files touched by this commit (17) | Package updated
Log message:
py-acme py-certbot*: updated to 1.28.0

1.28.0

Added

Updated Apache/NGINX TLS configs to document contents are based on \ 
ssl-config.mozilla.org

Changed

A change to order finalization has been made to the acme module and Certbot:
An order's certificate field will only be processed if the order's status is valid.
An order's error field will only be processed if the order's status is invalid.
   2022-05-04 13:27:11 by Adam Ciarcinski | Files touched by this commit (17) | Package updated
Log message:
py-acme py-certbot: updated to 1.27.0

Certbot 1.27.0

Added

Added support for RFC8555 subproblems to our acme library.

Changed

The PGP key F2871B4152AE13C49519111F447BF683AA3B26C3 was added as an
additional trusted key to sign our PyPI packages
When certonly is run with an installer specified (e.g. --nginx),
certonly will now also run restart for that installer
   2022-04-08 20:00:28 by Adam Ciarcinski | Files touched by this commit (17) | Package updated
Log message:
py-acme py-certbot*: updated to 1.26.0

Certbot 1.26.0

Added

Added --new-key. When renewing or replacing a certificate that has --reuse-key
set, it will force a new private key to be generated, one time.

As before, --reuse-key and --no-reuse-key can be used to enable and disable key
reuse.

Changed

The default propagation timeout for the OVH DNS plugin \ 
(--dns-ovh-propagation-seconds)
has been increased from 30 seconds to 120 seconds, based on user feedback.

Fixed

Certbot for Windows has been upgraded to use Python 3.9.11, in response to
https://www.openssl.org/news/secadv/20220315.txt.
Previously, when Certbot was in the process of registering a new ACME account
and the ACME server did not present any Terms of Service, the user was asked to
agree with a non-existent Terms of Service ("None"). This bug is now \ 
fixed, so
that if an ACME server does not provide any Terms of Service to agree with, the
user is not asked to agree to a non-existent Terms of Service any longer.
If account registration fails, Certbot did not relay the error from the ACME server
back to the user. This is now fixed: the error message from the ACME server is now
presented to the user when account registration fails.
   2022-03-17 13:23:33 by Adam Ciarcinski | Files touched by this commit (34) | Package updated
Log message:
py-acme py-certbot: updated to 1.25.0

Certbot 1.25.0

Changed

Dropped 32 bit support for the Windows beta installer
Windows beta installer is now distributed as \ 
"certbot-beta-installer-win_amd64.exe".
Users of the Windows beta should uninstall the old version before running this.
Added a check whether OCSP stapling is supported by the installer when requesting a
certificate with the run subcommand in combination with the --must-staple option.
If the installer does not support OCSP and the --must-staple option is used, Certbot
will raise an error and quit.
Certbot and its acme module now depend on josepy>=1.13.0 due to better type \ 
annotation
support.

Fixed

Updated dependencies to use new version of cryptography that uses OpenSSL 1.1.1n, in
response to https://www.openssl.org/news/secadv/20220315.txt.

Certbot 1.24.0

Added

When the --debug-challenges option is used in combination with -v, Certbot
now displays the challenge URLs (for http-01 challenges) or FQDNs (for
dns-01 challenges) and their expected return values.

Changed

Support for Python 3.6 was removed.
All Certbot components now require setuptools>=41.6.0.
The acme library now requires requests>=2.20.0.
Certbot and its acme library now require pytz>=2019.3.
certbot-nginx now requires pyparsing>=2.2.1.
certbot-dns-route53 now requires boto3>=1.15.15.

Fixed

Nginx plugin now checks included files for the singleton \ 
server_names_hash_bucket_size directive.
   2022-02-10 22:23:34 by Adam Ciarcinski | Files touched by this commit (49) | Package updated
Log message:
py-acme py-certbot*: updated to 1.23.0

Certbot 1.23.0

Added

Added show_account subcommand, which will fetch the account information
from the ACME server and show the account details (account URL and, if
applicable, email address or addresses)
We deprecated support for Python 3.6 in Certbot and its ACME library.
Support for Python 3.6 will be removed in the next major release of Certbot.

Fixed

GCP Permission list for certbot-dns-google in plugin documentation
dns-digitalocean used the SOA TTL for newly created records, rather than 30 seconds.
Revoking a certificate based on an ECDSA key can now be done with --key-path.
   2022-01-05 16:41:32 by Thomas Klausner | Files touched by this commit (289)
Log message:
python: egg.mk: add USE_PKG_RESOURCES flag

This flag should be set for packages that import pkg_resources
and thus need setuptools after the build step.

Set this flag for packages that need it and bump PKGREVISION.