upstream/certbot
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-04-15 22:20:28 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Release 5.1.0 (#10473)

Browse source
This commit is contained in:
Brad Warren 2025-10-07 11:00:17 -07:00 committed by GitHub
commit d7ae612841
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
25 changed files with 56 additions and 37 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
acme/setup.py
View file

@ -1,6 +1,6 @@
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
setup(
version=version,

2
certbot-apache/setup.py
View file

@ -1,6 +1,6 @@
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
install_requires = [
# We specify the minimum acme and certbot version as the current plugin

2
certbot-ci/setup.py
View file

@ -1,6 +1,6 @@
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
setup(
version=version,

2
certbot-compatibility-test/setup.py
View file

@ -1,6 +1,6 @@
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
setup(
version=version,

2
certbot-dns-cloudflare/setup.py
View file

@ -2,7 +2,7 @@ import os
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
install_requires = [
# for now, do not upgrade to cloudflare>=2.20 to avoid deprecation warnings and the breaking

2
certbot-dns-digitalocean/setup.py
View file

@ -2,7 +2,7 @@ import os
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
install_requires = [
'python-digitalocean>=1.15.0', # 1.15.0 or newer is recommended for TTL support

2
certbot-dns-dnsimple/setup.py
View file

@ -2,7 +2,7 @@ import os
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
install_requires = [
# This version of lexicon is required to address the problem described in

2
certbot-dns-dnsmadeeasy/setup.py
View file

@ -2,7 +2,7 @@ import os
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
install_requires = [
'dns-lexicon>=3.14.1',

2
certbot-dns-gehirn/setup.py
View file

@ -2,7 +2,7 @@ import os
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
install_requires = [
'dns-lexicon>=3.14.1',

2
certbot-dns-google/setup.py
View file

@ -2,7 +2,7 @@ import os
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
install_requires = [
'google-api-python-client>=1.6.5',

2
certbot-dns-linode/setup.py
View file

@ -2,7 +2,7 @@ import os
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
install_requires = [
'dns-lexicon>=3.14.1',

2
certbot-dns-luadns/setup.py
View file

@ -2,7 +2,7 @@ import os
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
install_requires = [
'dns-lexicon>=3.14.1',

2
certbot-dns-nsone/setup.py
View file

@ -2,7 +2,7 @@ import os
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
install_requires = [
'dns-lexicon>=3.14.1',

2
certbot-dns-ovh/setup.py
View file

@ -2,7 +2,7 @@ import os
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
install_requires = [
'dns-lexicon>=3.15.1',

2
certbot-dns-rfc2136/setup.py
View file

@ -2,7 +2,7 @@ import os
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
install_requires = [
# This version was chosen because it is the version packaged in RHEL 9 and Debian unstable. It

2
certbot-dns-route53/setup.py
View file

@ -2,7 +2,7 @@ import os
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
install_requires = [
'boto3>=1.20.34',

2
certbot-dns-sakuracloud/setup.py
View file

@ -2,7 +2,7 @@ import os
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
install_requires = [
'dns-lexicon>=3.14.1',

2
certbot-nginx/setup.py
View file

@ -1,6 +1,6 @@
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
install_requires = [
# We specify the minimum acme and certbot version as the current plugin

21
certbot/CHANGELOG.md
View file

@ -4,6 +4,27 @@ Certbot adheres to [Semantic Versioning](https://semver.org/).
<!-- towncrier release notes start -->
## 5.1.0 - 2025-10-07
### Changed
- certbot-nginx no longer creates and uses self-signed certificates as an
intermediate step when installing certificates. The certificates the user
requested Certbot install are now always used instead.
([#10465](https://github.com/certbot/certbot/issues/10465))
- The function `acme.crypto_util.make_self_signed_cert` was deprecated and will
be removed in a future release.
([#10466](https://github.com/certbot/certbot/issues/10466))
### Fixed
- Fixed a bug in certbot-nginx that'd leave nginx configured with self-signed
certificates if a user ran `certbot enhance` and they didn't have matching
SSL server blocks. `certbot enhance` now requires the user to have a matching
SSL server block to enable HSTS or OCSP stapling enhancements.
([#10455](https://github.com/certbot/certbot/issues/10455))
## 5.0.0 - 2025-09-02
### Added

29
certbot/docs/cli-help.txt
View file

@ -142,7 +142,7 @@ options:
case, and to know when to deprecate support for past
Python versions and flags. If you wish to hide this
information from the Let's Encrypt server, set this to
"". (default: CertbotACMEClient/5.0.0 (certbot;
"". (default: CertbotACMEClient/5.1.0 (certbot;
OS_NAME OS_VERSION) Authenticator/XXX Installer/YYY
(SUBCOMMAND; flags: FLAGS) Py/major.minor.patchlevel).
The flags encoded in the user agent are: --duplicate,
@ -324,6 +324,20 @@ run:
certonly:
Options for modifying how a certificate is obtained
--deploy-hook DEPLOY_HOOK
Command to be run in a shell once for each
successfully issued certificate, including on
subsequent renewals. Unless --disable-hook-validation
is used, the command’s first word must be the absolute
pathname of an executable or one found via the PATH
environment variable. For this command, the shell
variable $RENEWED_LINEAGE will point to the config
live subdirectory (for example,
"/etc/letsencrypt/live/example.com") containing the
new certificates and keys; the shell variable
$RENEWED_DOMAINS will contain a space-delimited list
of renewed certificate domains (for example,
"example.com www.example.com") (default: None)
--csr CSR Path to a Certificate Signing Request (CSR) in DER or
PEM format. Currently --csr only works with the
'certonly' subcommand. (default: None)
@ -360,19 +374,6 @@ renew:
an attempt was made to obtain/renew a certificate. If
multiple renewed certificates have identical post-
hooks, only one will be run. (default: None)
--deploy-hook DEPLOY_HOOK
Command to be run in a shell once for each
successfully issued certificate. Unless --disable-
hook-validation is used, the command’s first word must
be the absolute pathname of an executable or one found
via the PATH environment variable. For this command,
the shell variable $RENEWED_LINEAGE will point to the
config live subdirectory (for example,
"/etc/letsencrypt/live/example.com") containing the
new certificates and keys; the shell variable
$RENEWED_DOMAINS will contain a space-delimited list
of renewed certificate domains (for example,
"example.com www.example.com") (default: None)
--disable-hook-validation
Ordinarily the commands specified for --pre-
hook/--post-hook/--deploy-hook will be checked for

2
certbot/src/certbot/__init__.py
View file

@ -1,4 +1,4 @@
"""Certbot client."""
# version number like 1.2.3a0, must have at least 2 parts, like 1.2
__version__ = '5.1.0.dev0'
__version__ = '5.2.0.dev0'

2
letstest/setup.py
View file

@ -1,6 +1,6 @@
from setuptools import setup
version = '5.1.0.dev0'
version = '5.2.0.dev0'
setup(
version=version,

1
newsfragments/10455.fixed
View file

@ -1 +0,0 @@
Fixed a bug in certbot-nginx that'd leave nginx configured with self-signed certificates if a user ran `certbot enhance` and they didn't have matching SSL server blocks. `certbot enhance` now requires the user to have a matching SSL server block to enable HSTS or OCSP stapling enhancements.

1
newsfragments/10465.changed
View file

@ -1 +0,0 @@
certbot-nginx no longer creates and uses self-signed certificates as an intermediate step when installing certificates. The certificates the user requested Certbot install are now always used instead.

1
newsfragments/10466.changed
View file

@ -1 +0,0 @@
The function `acme.crypto_util.make_self_signed_cert` was deprecated and will be removed in a future release.