* certbot-nginx no longer creates and uses self-signed certificates as an
intermediate step when installing certificates.
* Fixed a bug in certbot-nginx that'd leave nginx configured with self-signed
certificates if a user ran certbot enhance and they didn't have matching SSL
server blocks.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:certbot/python-certbot-nginx?expand=0&rev=104
398 lines
16 KiB
Plaintext
398 lines
16 KiB
Plaintext
-------------------------------------------------------------------
|
|
Tue Oct 14 08:05:27 UTC 2025 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 5.1.0
|
|
* certbot-nginx no longer creates and uses self-signed certificates as an
|
|
intermediate step when installing certificates.
|
|
* Fixed a bug in certbot-nginx that'd leave nginx configured with self-signed
|
|
certificates if a user ran certbot enhance and they didn't have matching SSL
|
|
server blocks.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Sep 3 12:26:27 UTC 2025 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 5.0.0
|
|
* Python 3.9 support was removed
|
|
* Migrated most functionality from setup.py to pyproject.toml
|
|
* certbot-nginx no longer uses socket.gethostname when generating self-signed
|
|
certificates for use as a temporary step of installing certificates as it
|
|
would sometimes result in strings that are too long to be used in the common
|
|
name of a certificate. The static domain "temp-certbot-nginx.invalid" is now
|
|
used instead
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Aug 12 16:04:44 UTC 2025 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 4.2.0
|
|
* sync with the main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jun 13 14:52:37 UTC 2025 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 4.1.1
|
|
* Switched to src-layout from flat-layout to accommodate PEP 517 pip
|
|
editable installs
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Apr 22 03:45:48 UTC 2025 - Steve Kowalik <steven.kowalik@suse.com>
|
|
|
|
- Update to 4.0.0:
|
|
* Added
|
|
+ The --preferred-profile and --required-profile flags allow requesting
|
|
a profile.
|
|
* Changed
|
|
+ Certificates now renew with 1/3rd of lifetime left (or 1/2 of lifetime
|
|
left, if the lifetime is shorter than 10 days).
|
|
+ removed acme.crypto_util._pyopenssl_cert_or_req_all_names
|
|
+ removed acme.crypto_util._pyopenssl_cert_or_req_san
|
|
+ removed acme.crypto_util.dump_pyopenssl_chain
|
|
+ removed acme.crypto_util.gen_ss_cert
|
|
+ removed certbot.crypto_util.dump_pyopenssl_chain
|
|
+ removed certbot.crypto_util.pyopenssl_load_certificate
|
|
* Fixed
|
|
+ Moved RewriteEngine on directive added during apache http01
|
|
authentication to the end of the virtual host, so that it overwrites
|
|
any RewriteEngine off directives that already exist and allows
|
|
redirection to the challenge URL.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Mar 21 12:31:08 UTC 2025 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 3.3.0
|
|
* certbot-nginx now requires pyOpenSSL>=25.0.0.
|
|
* certbot-nginx now requires pyparsing>=2.4.7.
|
|
* Allow nginx plugin to parse non-breaking spaces in nginx
|
|
configuration files.
|
|
* When adding ssl listen directives in nginx server blocks,
|
|
IP addresses are now preserved.
|
|
* Nginx configurations can now have the http block in files other
|
|
than the root (nginx.conf)
|
|
* Nginx server_name directives with internal comments now ignore
|
|
commented names
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jan 27 14:40:24 UTC 2025 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 3.1.0
|
|
* sync with the main certbot package
|
|
- convert to pip-based build
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Dec 3 14:53:05 UTC 2024 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 3.0.1
|
|
* sync with the main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jun 25 12:23:46 UTC 2024 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 2.11.0
|
|
* sync with the main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Mar 14 09:55:54 UTC 2024 - Dirk Müller <dmueller@suse.com>
|
|
|
|
- update to 2.9.0:
|
|
* sync with the main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Feb 7 12:43:04 UTC 2024 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- Add %{?sle15_python_module_pythons}
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Dec 7 10:47:14 UTC 2023 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 2.8.0
|
|
* sync with the main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Nov 16 13:01:57 UTC 2023 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 2.7.4
|
|
* sync with the main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Oct 31 08:14:31 UTC 2023 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 2.7.3
|
|
* sync with the main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jun 7 16:06:07 UTC 2023 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 2.6.0
|
|
* Support for Python 3.11 was added to Certbot and all of its components.
|
|
* All Certbot components now require pytest to run tests.
|
|
* Packaged tests for all Certbot components besides josepy were moved inside the _internal/tests module.
|
|
* There is now a new Other annotated challenge object to allow plugins to support entirely novel challenges.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 27 08:22:40 UTC 2022 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 1.31.0
|
|
* sync with the main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Sep 21 17:57:47 UTC 2022 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 1.30.0
|
|
* sync with the main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jul 11 13:07:42 UTC 2022 - Dirk Müller <dmueller@suse.com>
|
|
|
|
- update to 1.29.0:
|
|
* --allow-subset-of-names will now additionally retry in cases where domains
|
|
are rejected while creating or finalizing orders. This requires subproblem
|
|
support from the ACME server
|
|
* The show_account subcommand now uses the "newAccount" ACME endpoint to
|
|
fetch the account data, so it doesn't rely on the locally stored account URL.
|
|
This fixes situations where Certbot
|
|
would use old ACMEv1 registration info with non-functional account URLs.
|
|
* The generated Certificate Signing Requests are now generated as version 1
|
|
instead of version 3. This resolves situations in where strict enforcement
|
|
of PKCS#10 meant that CSRs that were generated as version 3 were rejected
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jun 24 19:24:23 UTC 2022 - Dirk Müller <dmueller@suse.com>
|
|
|
|
- update to 1.28.0:
|
|
* Updated Apache/NGINX TLS configs to document contents are based on ssl-config.mozilla.org
|
|
* A change to order finalization has been made to the `acme` module and Certbot:
|
|
- An order's `certificate` field will only be processed if the order's `status` is `valid`.
|
|
- An order's `error` field will only be processed if the order's `status` is `invalid`.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon May 30 09:22:49 UTC 2022 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 1.27.0
|
|
* sync with the main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Apr 8 11:15:59 UTC 2022 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 1.26.0
|
|
* certbot-nginx now requires pyparsing>=2.2.1.
|
|
* Nginx plugin now checks included files for the singleton server_names_hash_bucket_size directive.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Dec 21 19:25:52 UTC 2021 - Danilo Spinella <danilo.spinella@suse.com>
|
|
|
|
- update to version 1.22.0
|
|
* sync with the main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Dec 13 17:46:02 UTC 2021 - Ferdinand Thiessen <rpm@fthiessen.de>
|
|
|
|
- update to version 1.20.0
|
|
* sync with the main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Aug 10 14:42:52 UTC 2021 - Danilo Spinella <danilo.spinella@suse.com>
|
|
|
|
- update to version 1.18.0
|
|
* sync with the main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jul 30 08:46:18 UTC 2021 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 1.17.0
|
|
* When we increased the logging level on our nginx "Could not parse file" message,
|
|
it caused a previously-existing inability to parse empty files to become more
|
|
visible. We have now added the ability to correctly parse empty files, so that
|
|
message should only show for more significant errors.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jun 24 09:30:29 UTC 2021 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 1.16.0
|
|
* Require the latest certbot and acme plugins for simplicity
|
|
|
|
-------------------------------------------------------------------
|
|
Wed May 12 12:08:17 UTC 2021 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 1.15.0
|
|
* sync with the main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Apr 14 15:18:22 UTC 2021 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 1.14.0
|
|
* sync with the main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 8 08:42:04 UTC 2021 - Markéta Machová <mmachova@suse.com>
|
|
|
|
- update to version 1.13.0
|
|
* Support for Python 2 has been removed.
|
|
* The nginx authenticator now configures all matching HTTP and HTTPS vhosts for the HTTP-01
|
|
challenge. It is now compatible with external HTTPS redirection by a CDN or load balancer.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jan 8 10:19:34 UTC 2021 - Antonio Larrosa <alarrosa@suse.com>
|
|
|
|
- update to version 1.11.0
|
|
* sync with the main certbot package
|
|
|
|
- update to version 1.10.1
|
|
* sync with the main certbot package
|
|
|
|
- update to version 1.10.0
|
|
* Support for Python 3.9 was added to Certbot and all of its
|
|
components.
|
|
* Fixed a Unicode-related crash in the nginx plugin when running
|
|
under Python 2.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Oct 7 08:46:57 UTC 2020 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 1.9.0
|
|
* Reduced CLI logging when reloading nginx, if it is not running.
|
|
* Fixed server_name case-sensitivity in the nginx plugin.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Aug 21 08:44:19 UTC 2020 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 1.7.0
|
|
* Added --nginx-sleep-seconds (default 1) for environments where nginx takes a long time to reload.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jul 13 08:40:59 UTC 2020 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 1.6.0
|
|
* Sync with main certbot package.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jun 11 12:14:55 UTC 2020 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 1.5.0
|
|
* Sync with main certbot package.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu May 14 08:51:38 UTC 2020 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 1.4.0
|
|
* Fix nginx plugin crash when non-ASCII configuration file is being read (instead,
|
|
the user will be warned that UTF-8 must be used).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Mar 11 13:45:50 UTC 2020 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 1.3.0
|
|
* Sync with main certbot package.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Feb 21 15:35:40 UTC 2020 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 1.2.0
|
|
* Added support for $hostname in nginx server_name directive
|
|
* Remove ECDHE-RSA-AES128-SHA from NGINX ciphers list
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jan 21 09:43:23 UTC 2020 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 1.1.0
|
|
* Sync with main certbot package.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jan 3 13:25:59 UTC 2020 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 1.0.0 (boo#1160066)
|
|
* The docs extras for the certbot-apache and certbot-nginx
|
|
packages have been removed.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Nov 14 11:59:14 UTC 2019 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 0.40.1
|
|
* Sync with main certbot package.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 17 11:22:40 UTC 2019 - Richard Brown <rbrown@suse.com>
|
|
|
|
- Remove obsolete Groups tag (fate#326485)
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Oct 2 10:14:04 UTC 2019 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 0.39.0
|
|
* Support for Python 3.8 was added to Certbot and all of its components.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Sep 11 12:31:27 UTC 2019 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 0.38.0
|
|
* Disable session tickets for Nginx users when appropriate.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Aug 26 10:43:03 UTC 2019 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 0.37.2
|
|
* Follow updated Mozilla recommendations for Nginx ssl_protocols,
|
|
ssl_ciphers, and ssl_prefer_server_ciphers
|
|
* Stop disabling TLS session tickets in Nginx as it caused TLS
|
|
failures on some systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jul 17 13:38:07 UTC 2019 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 0.36.0 (bsc#1141928)
|
|
* Turn off session tickets for nginx plugin by default
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jun 18 10:28:18 UTC 2019 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 0.35.1
|
|
* sync with main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Sat May 18 23:11:25 UTC 2019 - Dirk Mueller <dmueller@suse.com>
|
|
|
|
- update to 0.34.0
|
|
* update for main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 18 12:06:47 UTC 2019 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 0.32.0
|
|
* Tests execution now relies on pytest.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Feb 8 11:11:59 UTC 2019 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 0.31.0
|
|
* sync with main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jan 29 12:05:46 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
|
|
|
|
- Update to version 0.30.2:
|
|
* lockstep update with the main package
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Nov 16 17:53:06 UTC 2018 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 0.28.0
|
|
* Stop preferring TLS-SNI.
|
|
* Match Nginx parser update in allowing variable names to start
|
|
with ${.
|
|
* Fix ranking of vhosts in Nginx so that all port-matching
|
|
vhosts come first.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Sep 14 09:00:23 UTC 2018 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- update to version 0.27.1
|
|
* sync with main certbot package
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 3 12:35:14 UTC 2018 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
- Launch tests and update runtime requirements
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Aug 29 10:47:07 UTC 2018 - mcalabkova@suse.com
|
|
|
|
- Split the module from the main certboot package
|