Markéta Machová
e690f26957
- Update to 2.6.0
* Support for Python 3.11 was added to Certbot and all of its components.
* The default key type for new certificates is now ECDSA secp256r1 (P-256). It was
previously RSA 2048-bit. Existing certificates are not affected.
* acme and Certbot no longer support versions of ACME from before the RFC 8555 standard.
* acme and Certbot no longer support the old urn:acme:error: ACME error prefix.
* Removed the deprecated certbot-dns-cloudxns plugin.
* Certbot will now error if a certificate has --reuse-key set and a conflicting --key-type,
--key-size or --elliptic-curve is requested on the CLI. Use --new-key to change the key
while preserving --reuse-key.
* The zope based interfaces in certbot.interfaces have been removed in favor of the abc
based interfaces found in the same module.
* Certbot no longer depends on zope.
* Removed some deprecated functions and attributes from certbot(.display)?.(crypto_)?util
* Removed deprecated functions certbot.tests.util.patch_get_utility*. Plugins should now patch
certbot.display.util themselves in their tests or use certbot.tests.util.patch_display_util
as a temporary workaround.
* Fixes a bug where the certbot working directory has unusably restrictive permissions on
systems with stricter default umasks.
* Requests to subscribe to the EFF mailing list now time out after 60 seconds.
* Certbot will no longer respect very long challenge polling intervals, which may be suggested
by some ACME servers. Certbot will continue to wait up to 90 seconds by default, or up to
a total of 30 minutes if requested by the server via Retry-After.
* Allow a user to modify the configuration of a certificate without renewing it using the new
reconfigure subcommand. See certbot help reconfigure for details.
* certbot show_account now displays the ACME Account Thumbprint.
* Certbot will no longer save previous CSRs and certificate private keys to /etc/letsencrypt/csr
and /etc/letsencrypt/keys, respectively. These directories may be safely deleted.
* Certbot will now only keep the current and 5 previous certificates in the /etc/letsencrypt/archive
directory for each certificate lineage. Any prior certificates will be automatically deleted upon
OBS-URL: https://build.opensuse.org/request/show/1091312
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:certbot/python-certbot?expand=0&rev=102
96 lines
3.1 KiB
RPMSpec
96 lines
3.1 KiB
RPMSpec
#
|
|
# spec file for package python-certbot
|
|
#
|
|
# Copyright (c) 2023 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
%{?!python_module:%define python_module() python-%{**} python3-%{**}}
|
|
%define skip_python2 1
|
|
Name: python-certbot
|
|
Version: 2.6.0
|
|
Release: 0
|
|
Summary: ACME client
|
|
License: Apache-2.0
|
|
URL: https://github.com/certbot/certbot
|
|
Source0: https://files.pythonhosted.org/packages/source/c/certbot/certbot-%{version}.tar.gz
|
|
BuildRequires: %{python_module acme >= %{version}}
|
|
BuildRequires: %{python_module configargparse >= 0.9.3}
|
|
BuildRequires: %{python_module configobj >= 5.0.6}
|
|
BuildRequires: %{python_module cryptography >= 3.2.1}
|
|
BuildRequires: %{python_module distro >= 1.0.1}
|
|
BuildRequires: %{python_module josepy >= 1.13.0}
|
|
BuildRequires: %{python_module parsedatetime >= 2.4}
|
|
BuildRequires: %{python_module pyRFC3339}
|
|
BuildRequires: %{python_module pytest}
|
|
BuildRequires: %{python_module pytz >= 2019.3}
|
|
BuildRequires: %{python_module setuptools >= 41.6.0}
|
|
BuildRequires: fdupes
|
|
BuildRequires: python-rpm-macros
|
|
Requires: python-acme >= %{version}
|
|
Requires: python-configargparse >= 0.9.3
|
|
Requires: python-configobj >= 5.0.6
|
|
Requires: python-cryptography >= 3.2.1
|
|
Requires: python-distro >= 1.0.1
|
|
Requires: python-josepy >= 1.9.0
|
|
Requires: python-parsedatetime >= 2.4
|
|
Requires: python-pyRFC3339
|
|
Requires: python-pytz >= 2019.3
|
|
Requires: python-setuptools >= 41.6.0
|
|
Requires(post): update-alternatives
|
|
Requires(postun):update-alternatives
|
|
Provides: certbot = %{version}
|
|
Obsoletes: certbot < %{version}
|
|
BuildArch: noarch
|
|
%python_subpackages
|
|
|
|
%description
|
|
certbot is a free, automated certificate authority that aims
|
|
to lower the barriers to entry for encrypting all HTTP traffic on the internet.
|
|
|
|
%prep
|
|
%setup -q -n certbot-%{version}
|
|
|
|
%build
|
|
%python_build
|
|
|
|
%install
|
|
%python_install
|
|
%python_clone -a %{buildroot}%{_bindir}/certbot
|
|
%python_expand %fdupes %{buildroot}%{$python_sitelib}
|
|
|
|
%check
|
|
%pytest
|
|
|
|
%post
|
|
%python_install_alternative certbot
|
|
# migrate from old certbot to new certbot
|
|
if test ! -h %{_sysconfdir}/certbot -a -e %{_sysconfdir}/certbot; then
|
|
echo "Migrating %{_sysconfdir}/certbot to %{_sysconfdir}/letsencrypt..."
|
|
mv %{_sysconfdir}/letsencrypt %{_sysconfdir}/letsencrypt.empty
|
|
mv %{_sysconfdir}/certbot %{_sysconfdir}/letsencrypt
|
|
cd %{_sysconfdir} ; ln -s letsencrypt certbot
|
|
fi
|
|
|
|
%postun
|
|
%python_uninstall_alternative certbot
|
|
|
|
%files %{python_files}
|
|
%license LICENSE.txt
|
|
%doc README.rst
|
|
%{python_sitelib}/*
|
|
%python_alternative %{_bindir}/certbot
|
|
|
|
%changelog
|