- update to 1.29.0:
* --allow-subset-of-names will now additionally retry in cases where domains
are rejected while creating or finalizing orders. This requires subproblem
support from the ACME server
* The show_account subcommand now uses the "newAccount" ACME endpoint to
fetch the account data, so it doesn't rely on the locally stored account URL.
This fixes situations where Certbot
would use old ACMEv1 registration info with non-functional account URLs.
* The generated Certificate Signing Requests are now generated as version 1
instead of version 3. This resolves situations in where strict enforcement
of PKCS#10 meant that CSRs that were generated as version 3 were rejected
OBS-URL: https://build.opensuse.org/request/show/988382
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-acme?expand=0&rev=60
* --allow-subset-of-names will now additionally retry in cases where domains
are rejected while creating or finalizing orders. This requires subproblem
support from the ACME server
* The show_account subcommand now uses the "newAccount" ACME endpoint to
fetch the account data, so it doesn't rely on the locally stored account URL.
This fixes situations where Certbot
would use old ACMEv1 registration info with non-functional account URLs.
* The generated Certificate Signing Requests are now generated as version 1
instead of version 3. This resolves situations in where strict enforcement
of PKCS#10 meant that CSRs that were generated as version 3 were rejected
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:certbot/python-acme?expand=0&rev=87
- Update to version 1.26.0
* Added show_account subcommand, which will fetch the account information from
the ACME server and show the account details (account URL and, if applicable,
email address or addresses)
* The acme library now requires requests>=2.20.0.
* Certbot and its acme library now require pytz>=2019.3.
* Certbot and its acme module now depend on josepy>=1.13.0 due to better type annotation support.
* Previously, when Certbot was in the process of registering a new ACME account
and the ACME server did not present any Terms of Service, the user was asked
to agree with a non-existent Terms of Service ("None"). This bug is now fixed,
so that if an ACME server does not provide any Terms of Service to agree with,
the user is not asked to agree to a non-existent Terms of Service any longer.
* If account registration fails, Certbot did not relay the error from the ACME
server back to the user. This is now fixed: the error message from the ACME
server is now presented to the user when account registration fails.
OBS-URL: https://build.opensuse.org/request/show/967759
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-acme?expand=0&rev=57
- Update to version 1.26.0
* Added show_account subcommand, which will fetch the account information from
the ACME server and show the account details (account URL and, if applicable,
email address or addresses)
* The acme library now requires requests>=2.20.0.
* Certbot and its acme library now require pytz>=2019.3.
* Certbot and its acme module now depend on josepy>=1.13.0 due to better type annotation support.
* Previously, when Certbot was in the process of registering a new ACME account
and the ACME server did not present any Terms of Service, the user was asked
to agree with a non-existent Terms of Service ("None"). This bug is now fixed,
so that if an ACME server does not provide any Terms of Service to agree with,
the user is not asked to agree to a non-existent Terms of Service any longer.
* If account registration fails, Certbot did not relay the error from the ACME
server back to the user. This is now fixed: the error message from the ACME
server is now presented to the user when account registration fails.
OBS-URL: https://build.opensuse.org/request/show/967673
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:certbot/python-acme?expand=0&rev=80
- update to version 1.13.0
* Support for Python 2 has been removed.
* The acme library no longer depends on the security extras from
requests which was needed to support SNI in TLS requests when
using old versions of Python 2.
* When revoking a certificate by --cert-name, it is no longer
necessary to specify the --server if the certificate was
obtained from a non-default ACME server.
OBS-URL: https://build.opensuse.org/request/show/877591
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-acme?expand=0&rev=49
* Support for Python 2 has been removed.
* The acme library no longer depends on the security extras from
requests which was needed to support SNI in TLS requests when
using old versions of Python 2.
* When revoking a certificate by --cert-name, it is no longer
necessary to specify the --server if the certificate was
obtained from a non-default ACME server.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:certbot/python-acme?expand=0&rev=67
- update to version 1.4.0
* Added TLS-ALPN-01 challenge support in the acme library. Support of this
challenge in the Certbot client is planned to be added in a future release.
* mock dependency is now conditional on Python 2 in all of our packages.
* When using an RFC 8555 compliant endpoint, the acme library no longer sends the
resource field in any requests or the type field when responding to challenges.
OBS-URL: https://build.opensuse.org/request/show/805531
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-acme?expand=0&rev=43
* Added TLS-ALPN-01 challenge support in the acme library. Support of this
challenge in the Certbot client is planned to be added in a future release.
* mock dependency is now conditional on Python 2 in all of our packages.
* When using an RFC 8555 compliant endpoint, the acme library no longer sends the
resource field in any requests or the type field when responding to challenges.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:certbot/python-acme?expand=0&rev=54
* Removed the fallback introduced with 0.34.0 in acme to retry a POST-as-GET
request as a GET request when the targeted ACME CA server seems to not support
POST-as-GET requests.
* Support for Python 3.4 in Certbot and its ACME library is deprecated and will be
removed in the next release of Certbot.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:certbot/python-acme?expand=0&rev=48