Commit graph

10297 commits

Author SHA1 Message Date
Brad Warren
4c87fff29a Merge branch 'master' into repin-oldest 2021-07-16 16:35:12 -07:00
Brad Warren
6b256aad82 try and clarify poetry behavior 2021-07-16 16:34:49 -07:00
Brad Warren
ab500ea14e mention need to update setup.py 2021-07-16 16:34:49 -07:00
Brad Warren
1ffc69be8d script improvements 2021-07-16 16:34:49 -07:00
Brad Warren
e65ffb24bb no dummies 2021-07-16 16:34:49 -07:00
Brad Warren
7dfeac9106 rename normal to current 2021-07-16 16:34:49 -07:00
Brad Warren
6f0cb19456
Update tools/pinning/DESIGN.md
Co-authored-by: ohemorange <erica@eff.org>
2021-07-16 15:09:11 -07:00
Brad Warren
03f64fc16a
Update tools/pinning/DESIGN.md
Co-authored-by: ohemorange <erica@eff.org>
2021-07-16 15:08:40 -07:00
Brad Warren
7e09eb8e23
Update tools/pinning/DESIGN.md
Co-authored-by: ohemorange <erica@eff.org>
2021-07-16 15:08:27 -07:00
Brad Warren
9fc4ac0b4e
Update tools/pinning/DESIGN.md
Co-authored-by: ohemorange <erica@eff.org>
2021-07-16 15:07:59 -07:00
alexzorin
bebd399488
acme: deprecate ACMEv1 client classes (#8931)
* acme: deprecate ACMEv1 client classes

Adds pending deprecations to:
- acme.client.Client
- acme.client.BackwardsCompatibleClientV2

Adds a warning to Certbot when a v1 server is detected.

* move thsi change from 1.17 to 1.18

* revert some whitespace changes
2021-07-16 08:50:16 +10:00
alexzorin
a105b587ac
apache: fix crash when authenticating empty vhosts (#8941)
Fixes #8940.
2021-07-15 11:12:14 -07:00
alexzorin
8e29063ba7
pylint: upgrade pinned verson and fix new lints (#8936)
While bumping pinned packages in #8928, we came across a new version of pylint (2.9.3). Upgrading to this version requires some changes to Certbot's code, which is what this change is about.

* pylint: upgrade pinned verson and fix new lints

* maxsplit should be 1, not -1, for rsplit
2021-07-15 11:03:39 -07:00
Brad Warren
117791b582
Remove unneeded certbot-auto files (#8938) 2021-07-14 14:34:54 -07:00
Brad Warren
2ab7857fa5
Do not guess HTTP-01 response encoding (#8942)
* fix http-01 encoding

* improve comment
2021-07-14 14:11:50 -07:00
Brad Warren
590a2b1f05 Add design doc 2021-07-07 11:20:36 -07:00
ohemorange
7ede5c3487
Merge pull request #8933 from certbot/candidate-1.17.0
Update files from 1.17.0 release
2021-07-06 12:38:04 -07:00
Brad Warren
915459258b Bump version to 1.18.0 2021-07-06 08:42:52 -07:00
Brad Warren
d94cf0e1d6 Add contents to certbot/CHANGELOG.md for next version 2021-07-06 08:42:51 -07:00
Brad Warren
952a296e20
Release 1.17.0 2021-07-06 08:42:49 -07:00
Brad Warren
d9a1850eaa Update changelog for 1.17.0 release 2021-07-06 08:41:16 -07:00
alexzorin
667750f3ff
docs: explain the situation with --manual renewal (#8911)
* docs: explain the situation with --manual renewal

* note that the non-hook command can't be cronned

* add xref to #renewing-certificates

* update manual description in the plugins table

* redirect manual users towards other plugins

* refer to authentication hook scripts in table
2021-06-28 16:40:24 -07:00
Brad Warren
fdc19c037a update contributing 2021-06-25 16:15:47 -04:00
Rene Luria
8b610239bf
Adds Infonaniak 3rd party plugin (#8923) 2021-06-25 14:46:37 -04:00
Brad Warren
2b61a1025a remove pipstrap extra 2021-06-23 08:18:42 -04:00
Brad Warren
76cd98fb50 simplify pinning scripts 2021-06-23 08:06:59 -04:00
Brad Warren
df5d832690 add pipstrap extra 2021-06-22 16:38:40 -04:00
Brad Warren
8bf6be271d add pip comment 2021-06-22 16:24:08 -04:00
Brad Warren
edff305b5f Add oldest script. 2021-06-22 16:20:54 -04:00
Brad Warren
451e2202de refactor pinning script 2021-06-22 16:16:33 -04:00
ohemorange
62426caa5a
Merge pull request #8919 from alexzorin/standalone-error-ux
Improve standalone errors
2021-06-21 16:54:36 -07:00
Alex Zorin
f137d8424e acme.standalone: expose original socket.error 2021-06-22 09:24:53 +10:00
Alex Zorin
e5c41e76c5 standalone: add an auth_hint 2021-06-22 09:24:44 +10:00
alexzorin
1e114b4ef8
apache: configure nameless vhosts during auth (#8898)
In the apache2 package on Debian-based distros, the default
000-default.conf virtual host does not include a ServerName.

Depending on the FQDN hostname of the machine and DNS setup, Apache
assigns a name to this unnamed vhost at runtime. As a result, the
Apache config end up with vhosts that have duplicative names.

Previously, Certbot did not identify that the nameless vhost could be
a match for the requested identifier, which would, depending on
configuration load order, cause the authenticator to fail.

This change causes Certbot to include all unnamed vhosts on top of
matched vhosts, during authentication. If no vhosts matched, the
existing behavior remains the same.

* apache: configure nameless vhosts during auth

* vhost is only unnamed if ServerName is not set

* also fix test to only match ServerName

Co-authored-by: Brad Warren <bmw@users.noreply.github.com>
2021-06-21 07:18:29 -04:00
alexzorin
bc7c953bcc
cli: vary renewal advice for hookless manual certs (#8914)
* cli: vary renewal advice for hookless manual certs

1. Don't print that the certificate will be automatically renewed,
because it won't be.
2. Add a "NEXT STEP" telling the user that they will need to manually
re-issue the certificate in order to renew it.

* kill superfluous comma

Co-authored-by: ohemorange <ebportnoy@gmail.com>

* clarify wording of the next step

* fix the test

Co-authored-by: ohemorange <ebportnoy@gmail.com>
2021-06-17 16:36:54 -07:00
Brad Warren
02777c0534 pin back wheel 2021-06-16 13:15:53 -04:00
Brad Warren
57823cd1f7 fix zope import warning 2021-06-16 12:09:04 -04:00
alexzorin
60a91eb688
certonly: hide "NEXT STEPS" for dry-runs (#8901)
* certonly: hide "NEXT STEPS" for dry-runs

* add a test
2021-06-14 14:25:43 -07:00
chaptergy
1b025e84e8
Adds njalla, DuckDNS and Porkbun 3rd party plugins (#8907) 2021-06-14 13:23:35 -07:00
kartikynwa
d3555623ba
certbot-apache: Add Void Linux overrides (#8891)
* certbot-apache: Add Void Linux overrides

* certbot-apache: Correct distro name to Void Linux
2021-06-12 17:02:16 +10:00
Brad Warren
f35889af74 bump min dns-lexicon dependency 2021-06-11 13:54:52 -07:00
Brad Warren
d634b0bede fix typo 2021-06-11 13:34:02 -07:00
Brad Warren
82589cbaf1 simplify pip_install.py 2021-06-11 13:34:02 -07:00
Brad Warren
3d89671dd4 make conditional right 2021-06-11 13:34:02 -07:00
Brad Warren
dfaf0d64e6 remove unused import 2021-06-11 13:34:02 -07:00
Brad Warren
2651001983 remove unused merge_requirements.py 2021-06-11 13:34:02 -07:00
Brad Warren
90790511d1 make single oldest_constraints.txt file 2021-06-11 13:34:02 -07:00
Brad Warren
ce2271c786 add oldest pyproject.toml file that works 2021-06-11 13:34:01 -07:00
Brad Warren
18ea72faf1
Split out testing extras (#8893)
* split out test extras

* update extras and regenerate pinnings

* pin back mypy
2021-06-11 13:17:50 -07:00
ohemorange
c8255dded5
Add --verbose-level flag and fix logging level calculations (#8900)
Also, update `dev-cli.ini` example to use new flag.

Although https://github.com/bw2/ConfigArgParse/pull/216 allowed setting a `count` action value in a config file, our default detection system won't let us use that functionality. While we should eventually fix that, for now, let developers have a cli.ini with a higher logging level by adding this flag.

Note that this flag is intended to work the same way adding `-vvv`s does; that is, as a modifier to the pre-set level, rather than setting the absolute level. The number it is set to is equivalent to the number of `v`s that would otherwise have been passed, with "2" as the current maximum effective number of levels (warning --> info --> debug).

* Add --verbose-level flag for devs to set in cli.ini

* Update dev-cli.ini to use new flag
2021-06-10 16:45:07 -07:00