Navigation:
Browse pkgsrc
(this page) 2021-10-10 20:43:13 by Adam Ciarcinski | Files touched by this commit (18) |  |
Log message: py-acme py-certbot: updated to 1.20.0 1.20.0 Added * Added `--no-reuse-key`. This remains the default behavior, but the flag may be useful to unset the `--reuse-key` option on existing certificates. Fixed * The certbot-dns-rfc2136 plugin in Certbot 1.19.0 inadvertently had an implicit dependency on `dnspython>=2.0`. This has been relaxed to `dnspython>=1.15.0`. |
| 2021-10-07 16:54:50 by Nia Alarie | Files touched by this commit (606) |
Log message: security: Remove SHA1 hashes for distfiles |
| 2021-09-15 14:05:16 by Adam Ciarcinski | Files touched by this commit (18) | |
Log message: py-acme py-certbot*: updated to 1.19.0 Certbot 1.19.0 Added The certbot-dns-rfc2136 plugin always assumed the use of an IP address as the target server, but this was never checked. Until now. The plugin raises an error if the configured target server is not a valid IPv4 or IPv6 address. Our acme library now supports requesting certificates for IP addresses. This feature is still unsupported by Certbot and Let's Encrypt. Changed Several attributes in certbot.display.util module are deprecated and will be removed in a future release of Certbot. Any import of these attributes will emit a warning to prepare the transition for developers. zope based interfaces in certbot.interfaces module are deprecated and will be removed in a future release of Certbot. Any import of these interfaces will emit a warning to prepare the transition for developers. We removed the dependency on chardet from our acme library. Except for when downloading a certificate in an alternate format, our acme library now assumes all server responses are UTF-8 encoded which is required by RFC 8555. Fixed Fixed parsing of Defined values in the Apache plugin to allow for = in the value. Fixed a relatively harmless crash when issuing a certificate with --quiet/-q. |
| 2021-08-05 12:52:01 by Adam Ciarcinski | Files touched by this commit (33) | |
Log message: py-acme py-certbot*: updated to 1.18.0 1.18.0 Added New functions that Certbot plugins can use to interact with the user have been \ added to certbot.display.util. We plan to deprecate using IDisplay with zope in \ favor of these new functions in the future. The Plugin, Authenticator and Installer classes are added to certbot.interfaces \ module as alternatives to Certbot's current zope based plugin interfaces. The \ API of these interfaces is identical, but they are based on Python's abc module \ instead of zope. Certbot will continue to detect plugins that implement either \ interface, but we plan to drop support for zope based interfaces in a future \ version of Certbot. The class certbot.configuration.NamespaceConfig is added to the Certbot's public API. Changed When self-validating HTTP-01 challenges using \ acme.challenges.HTTP01Response.simple_verify, we now assume that the response is \ composed of only ASCII characters. Previously we were relying on the default \ behavior of the requests library which tries to guess the encoding of the \ response which was error prone. acme: the .client.Client and .client.BackwardsCompatibleClientV2 classes are now \ deprecated in favor of .client.ClientV2. The certbot.tests.patch_get_utility* functions have been deprecated. Plugins \ should now patch certbot.display.util themselves in their tests or use \ certbot.tests.util.patch_display_util as a temporary workaround. In order to simplify the transition to Certbot's new plugin interfaces, the \ classes Plugin and Installer in certbot.plugins.common module and \ certbot.plugins.dns_common.DNSAuthenticator now implement Certbot's new plugin \ interfaces. The Certbot plugins based on these classes are now automatically \ detected as implementing these interfaces. We added a dependency on chardet to our acme library so that it will be used \ over charset_normalizer in newer versions of requests. Fixed The Apache authenticator no longer crashes with "Unable to insert \ label" when encountering a completely empty vhost. This issue affected \ Certbot 1.17.0. Users of the Certbot snap on Debian 9 (Stretch) should no longer encounter an \ "access denied" error when installing DNS plugins. |
| 2021-07-23 09:26:45 by Adam Ciarcinski | Files touched by this commit (18) | |
Log message: py-acme, py-certbot*: updated to 1.17.0 Certbot 1.17.0 Added Add Void Linux overrides for certbot-apache. Changed We changed how dependencies are specified between Certbot packages. For this and future releases, higher level Certbot components will require that lower level components are the same version or newer. More specifically, version X of the Certbot package will now always require acme>=X and version Y of a plugin package will always require acme>=Y and certbot=>Y. Specifying dependencies in this way simplifies testing and development. The Apache authenticator now always configures virtual hosts which do not have an explicit ServerName. This should make it work more reliably with the default Apache configuration in Debian-based environments. Fixed When we increased the logging level on our nginx "Could not parse \ file" message, it caused a previously-existing inability to parse empty files to become more visible. We have now added the ability to correctly parse empty files, so that message should only show for more significant errors. |
| 2021-06-14 14:15:41 by Adam Ciarcinski | Files touched by this commit (24) | |
Log message: py-acme py-certbot*: updated to 1.16.0 Certbot 1.16.0 Changed DNS plugins based on lexicon now require dns-lexicon >= v3.1.0 Use UTF-8 encoding for renewal configuration files Windows installer now cleans up old Certbot dependency packages before installing the new ones to avoid version conflicts. This release contains a substantial command-line UX overhaul, based on previous user research. The main goal was to streamline and clarify output. If you would like to see more verbose output, use the -v or -vv flags. UX improvements are an iterative process and the Certbot team welcomes constructive feedback. Functions certbot.crypto_util.init_save_key and certbot.crypto_util.init_save_csr, whose behaviors rely on the global Certbot config singleton, are deprecated and will be removed in a future release. Please use certbot.crypto_util.generate_key and certbot.crypto_util.generate_csr instead. Fixed Fix TypeError due to incompatibility with lexicon >= v3.6.0 Installers (e.g. nginx, Apache) were being restarted unnecessarily after dry-run \ renewals. Colors and bold text should properly render in all supported versions of Windows. |
| 2021-05-14 10:24:08 by Adam Ciarcinski | Files touched by this commit (17) | |
Log message: py-acme py-certbot*: updated to 1.15.0 1.15.0 - 2021-05-04 More details about these changes can be found on our GitHub repo. |
| 2021-04-15 07:16:37 by Adam Ciarcinski | Files touched by this commit (18) | |
Log message: py-acme py-certbot*: updated to 1.14.0 Certbot 1.14.0 Changed certbot-auto no longer checks for updates on any operating system. The module acme.magic_typing is deprecated and will be removed in a future release. Please use the built-in module typing instead. The DigitalOcean plugin now creates TXT records for the DNS-01 challenge with a \ lower 30s TTL. Fixed Don't output an empty line for a hidden certificate when certbot certificates is \ being used in combination with --cert-name or -d. |
| 2021-03-06 14:34:25 by Adam Ciarcinski | Files touched by this commit (17) | |
Log message: py-acme py-certbot*: updated to 1.13.0 Certbot 1.13.0 Changed CLI flags --os-packages-only, --no-self-upgrade, --no-bootstrap and \ --no-permissions-check, which are related to certbot-auto, are deprecated and will be removed in a \ future release. Certbot no longer conditionally depends on an external mock module. Certbot's test API will continue to use it if it is available for backwards compatibility, however, this behavior has been deprecated and will be removed in a future release. The acme library no longer depends on the security extras from requests which was needed to support SNI in TLS requests when using old versions of Python 2. Certbot and all of its components no longer depend on the library six. The update of certbot-auto itself is now disabled on all RHEL-like systems. When revoking a certificate by --cert-name, it is no longer necessary to specify \ the --server if the certificate was obtained from a non-default ACME server. The nginx authenticator now configures all matching HTTP and HTTPS vhosts for \ the HTTP-01 challenge. It is now compatible with external HTTPS redirection by a CDN or load \ balancer. |
| 2021-02-09 11:06:43 by Adam Ciarcinski | Files touched by this commit (34) | |
Log message: py-acme py-certbot*: updated to 1.12.0 1.12.0 Changed The --preferred-chain flag now only checks the Issuer Common Name of the topmost \ (closest to the root) certificate in the chain, instead of checking every \ certificate in the chain. Support for Python 2 has been removed. In previous releases, we caused certbot-auto to stop updating its Certbot \ installation. In this release, we are beginning to disable updates to the \ certbot-auto script itself. This release includes Amazon Linux users, and all \ other systems that are not based on Debian or RHEL. We plan to make this change \ to the certbot-auto script for all users in the coming months. Fixed Fixed the apache component on openSUSE Tumbleweed which no longer provides an \ apache2ctl symlink and uses apachectl instead. Fixed a typo in certbot/crypto_util.py causing an error upon attempting \ secp521r1 key generation |
New packages: