upstream/certbot
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-05-28 04:34:11 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Update changelog for 4.2.0 release

Browse source
This commit is contained in:
Erica Portnoy 2025-08-05 08:57:49 -07:00
parent e9cf7e8a9b
commit 1b209c9bd3
10 changed files with 39 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

39
certbot/CHANGELOG.md
View file

@ -3,6 +3,45 @@
Certbot adheres to [Semantic Versioning](https://semver.org/).
<!-- towncrier release notes start -->
## 4.2.0 - 2025-08-05
### Added
- Added `--eab-hmac-alg` parameter to support custom HMAC algorithm for
External Account Binding.
([#10281](https://github.com/certbot/certbot/issues/10281))
### Changed
- Catches and ignores errors during the directory fetch for ARI checking so
that these errors do not hinder the actual certificate issuance.
([#10342](https://github.com/certbot/certbot/issues/10342))
- Removed the dependency on `pytz`.
([#10350](https://github.com/certbot/certbot/issues/10350))
- Deprecated `acme.crypto_util.probe_sni`
([#10386](https://github.com/certbot/certbot/issues/10386))
- Support for Python 3.9 was deprecated and will be removed in our next planned
release. ([#10390](https://github.com/certbot/certbot/issues/10390))
### Fixed
- The Certbot snap no longer sets the environment variable PYTHONPATH stopping
it from picking up Python files in the current directory and polluting the
environment for Certbot hooks written in Python.
([#10176](https://github.com/certbot/certbot/issues/10176),
[#10257](https://github.com/certbot/certbot/issues/10257))
- Previously, we claimed to set FAILED_DOMAINS and RENEWED_DOMAINS env
variables for use by post-hooks when certificate renewals fail, but we were
not actually setting them. Now, we are.
([#10259](https://github.com/certbot/certbot/issues/10259))
- Certbot now always uses the server value from the renewal configuration file
for ARI checks instead of the server value from the current invocation of
Certbot. This helps prevent ARI requests from going to the wrong server if
the user changes CAs.
([#10339](https://github.com/certbot/certbot/issues/10339))
## 4.1.1 - 2025-06-12
### Fixed

1
newsfragments/10176.fixed
View file

@ -1 +0,0 @@
The Certbot snap no longer sets the environment variable PYTHONPATH stopping it from picking up Python files in the current directory and polluting the environment for Certbot hooks written in Python.

1
newsfragments/10257.fixed
View file

@ -1 +0,0 @@
The Certbot snap no longer sets the environment variable PYTHONPATH stopping it from picking up Python files in the current directory and polluting the environment for Certbot hooks written in Python.

1
newsfragments/10259.fixed
View file

@ -1 +0,0 @@
Previously, we claimed to set FAILED_DOMAINS and RENEWED_DOMAINS env variables for use by post-hooks when certificate renewals fail, but we were not actually setting them. Now, we are.

1
newsfragments/10281.added
View file

@ -1 +0,0 @@
Added `--eab-hmac-alg` parameter to support custom HMAC algorithm for External Account Binding.

1
newsfragments/10339.fixed
View file

@ -1 +0,0 @@
Certbot now always uses the server value from the renewal configuration file for ARI checks instead of the server value from the current invocation of Certbot. This helps prevent ARI requests from going to the wrong server if the user changes CAs.

1
newsfragments/10342.changed
View file

@ -1 +0,0 @@
Catches and ignores errors during the directory fetch for ARI checking so that these errors do not hinder the actual certificate issuance.

1
newsfragments/10350.changed
View file

@ -1 +0,0 @@
Removed the dependency on `pytz`.

1
newsfragments/10386.changed
View file

@ -1 +0,0 @@
Deprecated `acme.crypto_util.probe_sni`

1
newsfragments/10390.changed
View file

@ -1 +0,0 @@
Support for Python 3.9 was deprecated and will be removed in our next planned release.