starred/certbot-certbot-2
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-08-03 08:03:10 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update changelog for 5.0.0 release

Browse Source
This commit is contained in:
Brad Warren
2025-09-02 08:46:14 -07:00
parent 8556a9c427
commit 6f8a357147
14 changed files with 61 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
newsfragments/10079.changed
-3
View File
@@ -1,3 +0,0 @@
Removed final instances of pyopenssl x509 and PKey objects
* Removed `acme.crypto_util.SSLSocket`
* Removed `acme.crypto_util.probe_sni`
newsfragments/10274.changed
-5
View File
@@ -1,5 +0,0 @@
Removed a number of deprecated classes/interfaces
* Removed `acme.challenges.TLSALPN01Response`
* Removed `acme.challenges.TLSALPN01`
* Removed `acme.standalone.TLSServer`
* Removed `acme.standalone.TLSALPN01Server`
newsfragments/10291.changed
-1
View File
@@ -1 +0,0 @@
certbot.ocsp.RevocationChecker.__init__ no longer accepts the parameter `enforce_openssl_binary_usage` and always uses the cryptography Python library for OCSP checking.
newsfragments/10377.added
-1
View File
@@ -1 +0,0 @@
Certbot now stores the Retry-After value given by ACME Renewal Info (ARI) so the value can be respected across multiple Certbot runs.
newsfragments/10381.changed
-3
View File
@@ -1,3 +0,0 @@
Removed final instances of pyopenssl x509 and PKey objects
* Removed `acme.crypto_util.SSLSocket`
* Removed `acme.crypto_util.probe_sni`
newsfragments/10389.changed
-1
View File
@@ -1 +0,0 @@
Python 3.9 support was removed.
newsfragments/10402.changed
-1
View File
@@ -1 +0,0 @@
Migrated most functionality from `certbot/setup.py` to `certbot/pyproject.toml`
newsfragments/10417.changed
-1
View File
@@ -1 +0,0 @@
Migrated most functionality from `setup.py` to `pyproject.toml` for acme, certbot-apache, and certbot-nginx.
newsfragments/10425.changed
-1
View File
@@ -1 +0,0 @@
Migrated most functionality from `setup.py` to `pyproject.toml` for certbot dns plugins.
newsfragments/10428.added
-1
View File
@@ -1 +0,0 @@
Added `uv` as a test dependency, and switched most `pip` invocations to `uv pip` for faster installs.
newsfragments/10443.changed
-3
View File
@@ -1,3 +0,0 @@
Updated apache TLS configuration options based on changes to Mozilla's intermediate configuration recommendations.
* Added `DHE-RSA-CHACHA20-POLY1305` to `SSLCipherSuite` list for better compliance
* Configured curves using `SSLOpenSSLConfCmd` so FFDH won't be used with OpenSSL 3.0
newsfragments/10444.fixed
-1
View File
@@ -1 +0,0 @@
certbot-apache no longer prints a warning claiming the version of OpenSSL used by Apache is too old when we were unable determine the OpenSSL version.
newsfragments/10447.fixed
-1
View File
@@ -1 +0,0 @@
certbot-nginx no longer uses socket.gethostname when generating self-signed certificates for use as a temporary step of installing certificates as it would sometimes result in strings that are too long to be used in the common name of a certificate. The static domain "temp-certbot-nginx.invalid" is now used instead.