Changelog for python310-certbot-2.11.0-1.86.noarch.rpm :

* Thu Jun 06 2024 ecsos - Update to 2.11.0
* Thu Apr 04 2024 ecsos - Update to 2.10.0
* Added - The Python source packages which we upload to PyPI are now also being uploaded to our releases on GitHub where we now also include a SHA256SUMS checksum file and a PGP signature for that file.
* Fri Feb 09 2024 ecsos - Update to 2.9.0
* Added - Support for Python 3.12 was added.
* Fixed - Updates joinpath syntax to only use one addition per call, because the multiple inputs version was causing mypy errors on Python 3.10. - Makes the reconfigure verb actually use the staging server for the dry run to check the new configuration.
* Wed Dec 06 2023 ecsos - Update to 2.8.0
* Added - Added support for Alpine Linux distribution when is used the apache plugin
* Changed - Support for Python 3.7 was removed.
* Fixed - Stop using the deprecated pkg_resources API included in setuptools.
* Wed Nov 01 2023 ecsos - Update to 2.7.4
* Wed Oct 25 2023 ecsos - Update to 2.7.3
* Fri Oct 20 2023 ecsos - Update to 2.7.2
* Tue Oct 10 2023 ecsos - Update to 2.7.1
* Wed Oct 04 2023 ecsos - Update to 2.7.0
* Mon Jun 12 2023 ecsos - Update to 2.6.0
* Thu Sep 01 2022 ecsos - Add requires python-charset-normalizer >= 2.0.0 and < 2.1.0
* Wed Feb 09 2022 ecsos - Update to 1.23.0
* Added - Added show_account subcommand, which will fetch the account information from the ACME server and show the account details (account URL and, if applicable, email address or addresses) - We deprecated support for Python 3.6 in Certbot and its ACME library. Support for Python 3.6 will be removed in the next major release of Certbot.
* Fixed - GCP Permission list for certbot-dns-google in plugin documentation - dns-digitalocean used the SOA TTL for newly created records, rather than 30 seconds. - Revoking a certificate based on an ECDSA key can now be done with --key-path. See GH #8569.
* Wed Dec 08 2021 ecsos - Update to 1.22.0
* Added - Support for Python 3.10 was added to Certbot and all of its components. - The function certbot.util.parse_loose_version was added to parse version strings in the same way as the now deprecated distutils.version.LooseVersion class from the Python standard library. - Added --issuance-timeout. This option specifies how long (in seconds) Certbot will wait for the server to issue a certificate.
* Changed - The function certbot.util.get_strict_version was deprecated and will be removed in a future release.
* Fixed - Fixed an issue on Windows where the web.config created by Certbot would sometimes conflict with preexisting configurations (#9088). - Fixed an issue on Windows where the webroot plugin would crash when multiple domains had the same webroot. This affected Certbot 1.21.0.
* Thu Nov 04 2021 ecsos - Update to 1.21.0
* Added - Certbot will generate a web.config file on Windows in the challenge path when the webroot plugin is used, if one does not exist. This web.config file lets IIS serve challenge files while they do not have an extension.
* Changed - We changed the PGP key used to sign the packages we upload to PyPI. Going forward, releases will be signed with one of three different keys. All of these keys are available on major key servers and signed by our previous PGP key. The fingerprints of these new keys are: o BF6BCFC89E90747B9A680FD7B6029E8500F7DB16 o 86379B4F0AF371B50CD9E5FF3402831161D1D280 o 20F201346BF8F3F455A73F9A780CC99432A28621
* Tue Oct 05 2021 ecsos - Update to 1.20.0
* Added - Added --no-reuse-key. This remains the default behavior, but the flag may be useful to unset the --reuse-key option on existing certificates.
* Fixed - The certbot-dns-rfc2136 plugin in Certbot 1.19.0 inadvertently had an implicit dependency on dnspython>=2.0. This has been relaxed to dnspython>=1.15.0.
* Wed Sep 08 2021 ecsos - Update to 1.19.0
* Added - The certbot-dns-rfc2136 plugin always assumed the use of an IP address as the target server, but this was never checked. Until now. The plugin raises an error if the configured target server is not a valid IPv4 or IPv6 address. - Our acme library now supports requesting certificates for IP addresses. This feature is still unsupported by Certbot and Let\'s Encrypt.
* Changed - Several attributes in certbot.display.util module are deprecated and will be removed in a future release of Certbot. Any import of these attributes will emit a warning to prepare the transition for developers. - zope based interfaces in certbot.interfaces module are deprecated and will be removed in a future release of Certbot. Any import of these interfaces will emit a warning to prepare the transition for developers. - We removed the dependency on chardet from our acme library. Except for when downloading a certificate in an alternate format, our acme library now assumes all server responses are UTF-8 encoded which is required by RFC 8555.
* Fixed - Fixed parsing of Defined values in the Apache plugin to allow for = in the value. - Fixed a relatively harmless crash when issuing a certificate with --quiet/-q.- Drop certbot-repoze.sphinx.autointerface.patch because now in upstream.
* Wed Aug 04 2021 ecsos - Update to 1.18.0
* Added - New functions that Certbot plugins can use to interact with the user have been added to certbot.display.util. We plan to deprecate using IDisplay with zope in favor of these new functions in the future. - The Plugin, Authenticator and Installer classes are added to certbot.interfaces module as alternatives to Certbot\'s current zope based plugin interfaces. The API of these interfaces is identical, but they are based on Python\'s abc module instead of zope. Certbot will continue to detect plugins that implement either interface, but we plan to drop support for zope based interfaces in a future version of Certbot. - The class certbot.configuration.NamespaceConfig is added to the Certbot\'s public API.
* Changed - When self-validating HTTP-01 challenges using acme.challenges.HTTP01Response.simple_verify, we now assume that the response is composed of only ASCII characters. Previously we were relying on the default behavior of the requests library which tries to guess the encoding of the response which was error prone. - acme: the .client.Client and .client.BackwardsCompatibleClientV2 classes are now deprecated in favor of .client.ClientV2. - The certbot.tests.patch_get_utility
* functions have been deprecated. Plugins should now patch certbot.display.util themselves in their tests or use certbot.tests.util.patch_display_util as a temporary workaround. - In order to simplify the transition to Certbot\'s new plugin interfaces, the classes Plugin and Installer in certbot.plugins.common module and certbot.plugins.dns_common.DNSAuthenticator now implement Certbot\'s new plugin interfaces. The Certbot plugins based on these classes are now automatically detected as implementing these interfaces. - We added a dependency on chardet to our acme library so that it will be used over charset_normalizer in newer versions of requests.
* Fixed - The Apache authenticator no longer crashes with \"Unable to insert label\" when encountering a completely empty vhost. This issue affected Certbot 1.17.0. - Users of the Certbot snap on Debian 9 (Stretch) should no longer encounter an \"access denied\" error when installing DNS plugins.
* Tue Jul 06 2021 ecsos - Update to 1.17.0
* Added - Add Void Linux overrides for certbot-apache.
* Changed - We changed how dependencies are specified between Certbot packages. For this and future releases, higher level Certbot components will require that lower level components are the same version or newer. More specifically, version X of the Certbot package will now always require acme>=X and version Y of a plugin package will always require acme>=Y and certbot=>Y. Specifying dependencies in this way simplifies testing and development. - The Apache authenticator now always configures virtual hosts which do not have an explicit ServerName. This should make it work more reliably with the default Apache configuration in Debian-based environments.
* Fixed - When we increased the logging level on our nginx \"Could not parse file\" message, it caused a previously-existing inability to parse empty files to become more visible. We have now added the ability to correctly parse empty files, so that message should only show for more significant errors.- Add certbot-repoze.sphinx.autointerface.patch to fix docs and man build error for certbot itself. Think there is an error with python-repoze.sphinx.autointerface package.
* Tue Jun 01 2021 ecsos - Update to 1.16.0
* Changed - DNS plugins based on lexicon now require dns-lexicon >= v3.1.0 - Use UTF-8 encoding for renewal configuration files - Windows installer now cleans up old Certbot dependency packages before installing the new ones to avoid version conflicts. - This release contains a substantial command-line UX overhaul, based on previous user research. The main goal was to streamline and clarify output. If you would like to see more verbose output, use the -v or -vv flags. UX improvements are an iterative process and the Certbot team welcomes constructive feedback. - Functions certbot.crypto_util.init_save_key and certbot.crypto_util.init_save_csr, whose behaviors rely on the global Certbot config singleton, are deprecated and will be removed in a future release. Please use certbot.crypto_util.generate_key and certbot.crypto_util.generate_csr instead.
* Fixed - Fix TypeError due to incompatibility with lexicon >= v3.6.0 - Installers (e.g. nginx, Apache) were being restarted unnecessarily after dry-run renewals. - Colors and bold text should properly render in all supported versions of Windows.
* Wed May 05 2021 ecsos - Update to 1.15.0
* Wed Apr 07 2021 ecsos - Update to 1.14.0
* Changed - certbot-auto no longer checks for updates on any operating system. - The module acme.magic_typing is deprecated and will be removed in a future release. Please use the built-in module typing instead. - The DigitalOcean plugin now creates TXT records for the DNS-01 challenge with a lower 30s TTL.
* Fixed Don\'t output an empty line for a hidden certificate when certbot certificates is being used in combination with - -cert-name or -d.
* Thu Mar 04 2021 ecsos - Update to 1.13.0
* Changed - CLI flags --os-packages-only, --no-self-upgrade, --no-bootstrap and --no-permissions-check, which are related to certbot-auto, are deprecated and will be removed in a future release. - Certbot no longer conditionally depends on an external mock module. Certbot\'s test API will continue to use it if it is available for backwards compatibility, however, this behavior has been deprecated and will be removed in a future release. - The acme library no longer depends on the security extras from requests which was needed to support SNI in TLS requests when using old versions of Python 2. - Certbot and all of its components no longer depend on the library six. - The update of certbot-auto itself is now disabled on all RHEL-like systems. - When revoking a certificate by --cert-name, it is no longer necessary to specify the --server if the certificate was obtained from a non-default ACME server. - The nginx authenticator now configures all matching HTTP and HTTPS vhosts for the HTTP-01 challenge. It is now compatible with external HTTPS redirection by a CDN or load balancer.
* Wed Feb 03 2021 ecsos - Update to 1.12.0
* Changed - The --preferred-chain flag now only checks the Issuer Common Name of the topmost (closest to the root) certificate in the chain, instead of checking every certificate in the chain. See #8577. - Support for Python 2 has been removed. - In previous releases, we caused certbot-auto to stop updating its Certbot installation. In this release, we are beginning to disable updates to the certbot-auto script itself. This release includes Amazon Linux users, and all other systems that are not based on Debian or RHEL. We plan to make this change to the certbot-auto script for all users in the coming months.
* Fixed - Fixed the apache component on openSUSE Tumbleweed which no longer provides an apache2ctl symlink and uses apachectl instead. - Fixed a typo in certbot/crypto_util.py causing an error upon attempting secp521r1 key generation More details about these changes can be found on our GitHub repo.
* Wed Jan 06 2021 ecsos - Update to 1.11.0
* Changed - We deprecated support for Python 2 in Certbot and its ACME library. Support for Python 2 will be removed in the next planned release of Certbot. - certbot-auto was deprecated on all systems. For more information about this change, see https://community.letsencrypt.org/t/certbot-auto-no-longer-works-on-debian-based-systems/139702/7. - We deprecated support for Apache 2.2 in the certbot-apache plugin and it will be removed in a future release of Certbot.
* Fixed - The Certbot snap no longer loads packages installed via pip install --user. This was unintended and DNS plugins should be installed via snap instead. - certbot-dns-google would sometimes crash with HTTP 409/412 errors when used with very large zones. See #6036. - certbot-dns-google would sometimes crash with an HTTP 412 error if preexisting records had an unexpected TTL, i.e.: different than Certbot\'s default TTL for this plugin. See #8551. More details about these changes can be found on our GitHub repo.