From ed0b8e4af529958d33a5bd1f8ee5284fb1ab444b Mon Sep 17 00:00:00 2001
From: Adrien Ferrand <adferrand@users.noreply.github.com>
Date: Wed, 4 Sep 2019 01:30:13 +0200
Subject: [PATCH] [Windows] Create an installer for Certbot (#7324)

This PR is the first step to create an official distribution channel of Certbot for Windows. It consists essentially in creating a proper Certbot Windows installer.

Usually distributing an application requires, in a way or another, to stabilize the application logic and its dependencies around a given version. On Windows, this usually takes the form of a freezed application, that vendors its dependencies into a single executable.

There are two well-known solutions to create an executable shipping a Python application on Windows: [py2exe](http://www.py2exe.org/) and [pyinstaller](https://www.pyinstaller.org/). However these solutions create self-executable `.EXE` files: you run the `.EXE` file that launches immediately the software.

This is not a end-user solution. Indeed when a Windows user wants to install a piece of software, he expects to find and download an installer. When run the installer would interface with Windows to setup configuration entries in the Registry, update the environment variable, add shortcuts in the Start Menu, and declare a uninstaller entry into the Uninstaller Manager. Quite similarly, this is what you would get from a `.deb` or `.rpm` package.

A solution that builds proper installers is [pynsis](https://pynsist.readthedocs.io/en/latest/). It is a Python project that constructs installers for Python software using [NSIS](https://sourceforge.net/projects/nsis/), the most known free Windows installer builder solution.

This PR uses pynsist to build a Windows installer. The Python script to launch the installer build is `.\windows-installer\construct.py`. Once finished, the installer is located in `.\windows-installer\build\nsis`.

This installer will do the following operations during the installation:
* copy in the install path a full python distribution used exclusively for Certbot
* copy all Python requirements gathered from the `setup.py` of relevant certbot projects
* copy `certbot` and `acme`
* pre-build python binary assets
* register the existence of the application correctly in Windows Registry
* prepare a procedure to uninstall Certbot
* and of course, expose `certbot` executable to the Windows command line, like on Linux, to be able to launch it as any CLI application from Batch or Powershell

This installer support updates: downloading a new version of it and running it on a Windows with existing installation of Certbot will replace it with the new version.

Future capabilities not included in this PR:
* auto-update of Certbot when a new release is available
* online documentation for Windows
* register a scheduled task for certificate renewal
* installer distribution (continuous deployment + distribution channels)
* method to check the downloaded installer is untampered

* Setup config

* Fix shortcut

* Various improvments

* Update windows-installer/construct.py

Co-Authored-By: Brad Warren <bmw@users.noreply.github.com>

* Split into several method

* Change installer name

* Remove DNS plugins for now

* Add a comment about administrator privileges

* Update welcome

* Control python version

* Control bitness

* Update windows-installer/construct.py

Co-Authored-By: Brad Warren <bmw@users.noreply.github.com>

* Update windows-installer/construct.py

Co-Authored-By: Brad Warren <bmw@users.noreply.github.com>

* Update windows-installer/construct.py

Co-Authored-By: Brad Warren <bmw@users.noreply.github.com>
---
 windows-installer/.gitignore   |   2 +
 windows-installer/certbot.ico  | Bin 0 -> 183198 bytes
 windows-installer/construct.py | 137 +++++++++++++++++++++++++++++++++
 windows-installer/run.bat      |  31 ++++++++
 4 files changed, 170 insertions(+)
 create mode 100644 windows-installer/.gitignore
 create mode 100644 windows-installer/certbot.ico
 create mode 100644 windows-installer/construct.py
 create mode 100644 windows-installer/run.bat

diff --git a/windows-installer/.gitignore b/windows-installer/.gitignore
new file mode 100644
index 000000000..a1a48d6b8
--- /dev/null
+++ b/windows-installer/.gitignore
@@ -0,0 +1,2 @@
+build
+build.*
diff --git a/windows-installer/certbot.ico b/windows-installer/certbot.ico
new file mode 100644
index 0000000000000000000000000000000000000000..364c32098ecf32457010a7170f4d068249847104
GIT binary patch
literal 183198
zcmeHQ2YeJo7f&S#H4q>qgx-5EN>e~3fC#9d0xEn6f*=x<A{`V_dItdu%??sTQRzhl
zlwK61_av9z%lqD&&D?G7cCX}ilaQPD``yj%?9~6fH}%boo143vx0}De8=95f-t=;F
z>*MC;R<4}%KHJaDZ4cU2t}MNOjqaW<?&j9Gan^ecH#b8?H@BllrFY+tJlvLdc5|zZ
zVW3kCQL;zF%?-mbCs3fw%uHsRk&(en{;uFOn^k(c<bKz#U!Z-vuCRXnPtdMyDD2wx
zGjo@oo}SIU`Ab%`U@#;=Xy;?_>56FR(&<l#iAi8i`FC@F{GES~jm?Awp8#yz0x<t$
zfP{D{Km0p)uWV*QQW8MJI%}bRy&ll0-bzSKQFdu=o0cZ!Z_Ad=fH;GXcPKMAY*^2n
zrlqRqUrJj#+`a|Syy-CJuTt=QW;SX#0PfzQAksl858UqZzbWui?@Z_(x)D4*-N3``
zRdDxkgDy|4h5>y5u3eQf!rfDd^qiVXPk?wQ!0ulG9z6UHI(2#q1`qBBPdw2PZr!>7
zzx)KSW~EdP@?s?a{C(Z$iE#W+jOY4Ac>nz=EX+xhro#F2$KmK<fKBTYnOzDdgZvPC
z-My0mi{~f8t(zI}$Kgb{a9&E|oH<ir{(@;RYu5YdCk@V>O@#ydB>!1#$--LuX%d`2
zmj=rhr$M*SnJ{wrE;zIwV9WQ>Fme2T`0krX_C9j>ZxH&-G&ry~9e)2c6@L9W1^zmo
z24AdAf|Gxx!~9QT;j4`&;m02g@ar!r@Y}8wmge7gNp2~;Et^lnJ8wlo^$-ID6b^^|
zdsE@z!wguxG70{>B9*NiTSS+ok^Z>-nbT=7uzxIce<~UxBQuTm5{?-XE`*KQkMK%Q
zm)w(E`H#Nw@Qo3wJjk&lC+78mqwiGDU{&RY)e)<|n18IZ%t<9Vxn_Oo(k0}>^Kj+L
zCAfY2I$XMR9!{S=gLRF8rNQ1h&OE`qP8&adJd@Qf&%6v9*6(7^K|y6PzW<mPUYDBt
zxAkr+*L0{_{wTcs!b3Q5jLPi<eE;oD=AHN=r^LgLjL3i`3o>Bix&-*`mpGXHK?>~o
zox;sza_VgOak1$zYIr;>oC|RH06_m2)38pF<eB)_Ig;|<xb|IWRCf)GerFcq^DFG!
zE(PpN_?$0p-n<WiWgD<^_44v!=9sW)EZMx>%Sj$mQlvBv8S*9zvuKf)P`>P1_KXq*
z$B!Rp!Sc4nkvKB4_~OR(bf{3FE(_Dwrva4l|Ae&*D5Eg;JuDEU^z<~l>kx9!`R1EV
zNf1;j4#RH4!Y^L57gP>90v_1zV1)qgZmVEGUqCsN8X4}7!mvhEPyO;!3bbw#4im-z
zjD2@K3*XbDI`|dp&z`GSuLUcY8K7;87?|*096Y!$^*`*5WAgZTSdVQM(fRWipjx%+
z@MOofP``dfXxg+Xy!>)M_U*>?6c{!*4*vWjjlG-Kq0AEh$UY67@b+}*z*uZwr0|a)
zKM7sCc7=ln55e{8w_x_{+3?CMuQ0DkN$K$9<58wIM9KyamYI|%o-c}nXzKg1uycnL
z{>6*`K$k9EAUQdiecQ5S3-syJhdpOtV>0;FXzW`^yvD;}A7y`M&!oYMC5dqFu9Se~
zi!(9LQXN3fLPNX5gb9=3&p%JVV~@3kwQIk~@|_MdCTC(>D9ItEPyQoZZr;d%5kunO
z^VLZ(VrVS$H*d~9*thp|Rv6e%ONfLSGe*HH{X*fVpEfXi3F}mNH|$5m?LM>PGHLXP
z51(N_VB?ok-ltE>gdv0e0B`R$P`B1nSiUF?=6xKG{fuN-_Zh$!YXH-c33EP*gJp}-
z;hhneke^<JmMw>1A14Ft5@7X;B=`)|x^QkH96gc>Ut&Lj`U*so$7i6Q<FIt`e*7K*
zE0@Ni+hp{c2&<OI!KcgP*>BCNMD&vib7tSgZ;|lvN8ho$Km9~BR4x|@MLome*=M5R
z>XmeO_#gvDz8MD#<|M+zvGFXP%uFf=smz##>R%?xujKB>A5!4$VR6u~rU8n0gu}E+
zQlE{yUcZ(OUvEr?xHzdy)6&Qv$-eEM#B-U9H+JnzffstjK*u&w3?~X(&Yx=hMedv-
z3YXIAO!(wi;wk6CaWo(1{UNR2sUKDue^20##*vI@0BA;zq&p1@oqnlUp;7;Ze)P=k
z9SQ4Eam(wLn3x!tG-(n{pFRV|jT-~ow{L;1TYq5BWH)i*M2L=#X4&F?w8|q7uXpd>
ztewLmgbf>hh84@V8sB^N?4?z7R>H}IPVEnax7!6c_6K0U5O7R+0eXZUK|iLki<JPJ
z`jnQI0k6N3hILsyj{TBh`_?3=S1k^P52m^<!>M|}TEck!Lha=@n-by7sTA0^I|;{z
ziE#R43VgE>$E!Ce4f@t0RM!pY8wCw(#lqo(nb@Drfcn*AVaUKJYsuH}TLyINoB@U0
zuEUZ=dtlZFzhU`b!8rzMmz*0H*iNL>2Wi`SIr4l-)}Lg3O1GlWq3uV^JC_sNVL9f4
zx25aWtuxA-pKntr;@2MBu}@3#IB(uO7ASY?SPbf}DNn?Isi|pDt5z*z{AEkdgP?#7
zS?}%;7#QgE*ws806femf(ZK_!SX}Pz(paZd@o`YP#7t)A=~;-GJGTGE+@|8Z7MB@j
zk%K?-FNKkTeKUYsRSso~KcK`E9JkEQvh!wU&B|M0(>jU_<Huy@G!5KeOiU(>#J*`E
zw{Qq3@({c{v+&0<uT<_2s1kg^SpJ?Kfl$)#8u+>yVEmXk?7LzHka$?^#g0Gj{`Rd5
z>_;X-o90n46y<y0Zh#Lz_=4q=_|3OaWAOE9Zj682*txKO55VjFqS)AB&8j4a$3K)j
z-WNK5HVr<QmcaV|G#(*3ckUec`T0SWDpkPC%M)eL9V%C@jL%+h<OsC^fNfwJELoTc
zGp8iL<$rTlCvps$)-%AY8Ps2uusnJ46jZ8I3I6{3Z`ikQKkVOs5a(=8L)EHPaZVX0
zDj8+MyQAXav8Ga;$ivF|sA^EY=|}FlpRS#w+4zLVf9A{?s9n1@EMLAH4jnqg@L0NZ
zDb%f77sn?!A<8HN=MEEDf0$l5p3*nvf4Liarh1;JZ?71fx0J>(^nUZ^O$ZJShC6rI
z<S$vV@g3PwdL+tZX@30`X-vh#%KB(w@Vs8UkPb%<r2-E7jcF#n`+b)*p5${%ZQ8Vf
zzJ2>*8l^;z9z7bz$<^3959^0-6L4Ns>I>P5pAz)Lx5?1CT{QIU8UthAj>}48CXQ!;
z&25oIaxwygbnWVO#JeFBE9MWSN|k}~<txF76MwUBNlB8MJy;FRoI+Na=uc%VgZZTN
z(%f@sr)aovPRdW$PEl|W=Zn+QA40RHJz&a|Ni1wBZxSC;xEC%ShBIgO;WrFOa$&@6
z%9QEQxKS6lckjCNg#(l2Qf?6DysXIni?#9abbEkyZD{`Id7Rsr3xfvSM?4eQc<`+^
zV&JVIu`uD?OnCo2!1^g3hNInxp>Z&3SOU%^--p6JbJ1@<s9(1qj2jK`-a9e)i-$?$
z;@Mb|%;7kHL37VEhcVzKiB~B8Pglf4k7qLBwE?qW>cq1UHu4UP8Fd$CO;5%#eLT!S
zxh8Yk#8~!|+mRb`8}{}sl-ujj_r)pj&hQLqQa6H)4U2n+L)qdHP^MS}j0=lra{v@)
zH=O%EbU>O9da8XCt{G5Sq+;2mKx$eHmJ`RATw5n{o0=Mn?G}ZX0_V?Wz~I+nS-L|4
zBCx+?fciBIY<+=;bO7h=pTRMBXvb)nJ6qy+J{IQkD4)Nu_DuXve)ycvslTQ9{jsCt
z!4KP!@|cF;QV|w);{zP;U;anpK`ZRSlWez{n3xGshD<hB(K9p#`;W1#ylH-c6Q!5O
zNzZvf6u(|^Q`kIwibJn>@&Y$!<HWv1o)XPd&|1;!_%qH^RL2)HayFljx__E$p*Gk2
zN8<x?J9;Pgf}BTyk10=`It9CT@5X-TKG?f=FYMWabJf@fH5ek%Jiy+`p1zYi>MIg)
z|IVi*XCcts91*QAph&U4x`&4cdv4OC3F|-BtXY%2lRaO{nm&Cx^T++Ompu66_$4ML
zLa$!Eq&#@jn7bUzn7W&#XvDCe*}E6BcY~fid*b*@n&;;J^C0QjqNMhR`i)(m+J)oR
z^$=L%8e99s)`<1v%K2Z1fa2@nr59)%LvyRyyyy9g)c?<b{(aJ*q;D#e@{7W8j?`Bl
zKPCqC9}G~UP%4ZbL4BAE?0>Ng=Xtt$0wnwaUhEMC{a!Rc(|VD(rY-SE*ob&&*(egn
zTLu`2<7cA$gg;MvIO>+rnh??9gQ;wsNzc@`q<1132k`Ye?vH)Q!#|#mq@+w7%fw>;
zJ`FzkFabWsA5qxIIMmBZgkwk3VCbM&NWwlV5%<Sl^7xPQL!X|+>kpxr*FCm|NXZ%(
z7KgllAN+kDuytXwqj5lfBA))2dK;ipU_68bkWQR5Mj98E1QkkWK!q}iIJT6=?WAv%
zpGZo7I?66U>0(ErWU;p)IH(2GtW^a{2Q&fyVsAhR-(5IPCf<?srt(+%B|y78Mf2Cb
zl0F3Lb5NU1KM&N;BeUx>lUcI!Q~!<nlSE&B`6WxEySoR@JJS50FBI|)0#A=(XzzjV
z(%kTj88euB?vK6X(I0RBZ{NNHWy+M1u=bGVi~W3BLyZcFP@>4|S@|M+sSm{UZ1TDs
zXx^V_*|KFUjZ*(i>c9CGY6-O~0TlInj(u};^ECF~!otFszr5_fk<4;ErQW@tXKD2G
z^kf(lulsm6f|?c6!Oy3?G5x%6O8PcL6h=ly?)N2l{g<4aiF4rTP@;G%mPX=x;t@)J
zA+MTHBP0gr;+tlrpX5T4X`e#nVfm5>%s=Hq@3k?CLn3N3+0+-lp2hjS&`yz1wpemD
z9^vWtEz}D6KLLvPKAn|*Q{H?FHNknhD4df;eU$$s`KNI8Zj*Vtx##y(<c&ydryf9^
zDj86!*aDVDY5hsUzkHb=p-yFhih<JF5S0mEpDJE>6#C1=xwiYzxQ+q-{!5Z0-VSoS
zv@$s^wC=NHK_a%X(mY>CKseN`8Vju&Uxp%ugJgMdgAzsGK>TBY*3zW36aL6og?ylC
z{ln-l5kg8ogdqP2s8uNvK3|iB<28NyMjV&P6XKcf)R5O>p?Q4+{Iop<=Sro%<*HR{
zSo%CYy`*uZrw8g(mBF@)>K*z?_3GrwQy8o_Z=}N3%_&e1=Ui#NciEyu_-Llo=i~CF
z75+S&H*l^u0(DoZe@Sr@(Rw7&(W8H`^ix_1XY(H)`)=R9ow?__m}^j<n{>ZO4yb=k
z#PMP;8vJp-C%pZA!r58~1xxn44n1+=1WPlmxzHL^j~+dsdGi)bkMNUEKEbt$DeODx
z`Vpn1NIIOvlkHnYL7Acv@C)i{5%Kugiw1uj51Q{TUMM_UKbY&o(pnv1zHs3}7GrpL
zI5SCahUWS=Z<h8+@bpvL#pUYxXJa4`*A6b8m&%gIr$N$L5Ij6u_bllfZq&IWoOmDL
z?Afy{{VP_iKwZ$6*^fNa+zQR5P`W99-+uco3zO2%!yWu;ESvWyy+<N$&t5e6<KbPq
znvV5-glrwdl>Q4BF0k|wuTa`J{-oO!7Z(THwrykIzxwJcmLhV)`GnTxDg{OY>4g*V
za$zqH{E<HjlT1o8Pd5*bbapG0i2z!^Cc-43TdB^Y^b)?qhYx4ph-WB`T*r0Ek|pf>
z!Gj0ccj|xAdL|LAN7t?rnd5bN3WJit(@F1~<o2}Ji0bOi-%0DX96z3icJ11+x|8-E
z5b-{8L_`EzOQ$|6l?4&`;r^-ar1fxfyqH5f{&>1+J!lHn@oif~!E>R}#(4u?AJaN(
z<2nyz>%LOpTn4CL?CtFh{{H?<A8yyKT`*_P9JU5eWwU<0w6}@pi>H767xD0TGm>|S
zf9yzdHYYs&gK)15@!_1065z$>Vj!qw1e;GF$I={CCR;!K1NRppf<|5=|GXYLeE2Zb
zsZ)pX3h!?Q29|?On<T!^z<q1vo_@rC6wZ%7;5u<fdM2J#-gm?O$W6(I^iOM?C9rP%
z6X!WN_39P_U2xrz;vl+o=^|9AI05F(-NfE0EICO!z?8O3)VVkepMU-t&OPtO`cvXJ
z{+;{b{PMxfZ=q7iIMkOo!9L}rPdy&n@NTFRL6nShIYisHra;x;a9m>qT<^YxdPq_q
zhj?M`TuCR2w_oI*@<Z?D@l$@tp1$)R_qTY_VpdkPf1pT_qCk2eMASZ0`4ErMdMiB}
zfA~&$r?5Ct+G!n}i1(3cuB>j=htQ${K;;VWfwyN%DCd6(0{v0HC+Gt5Y&7mUFfe@*
z(kW@(Bnta-^fREJ2xwM69Gauqs*xefo`09zJk}%{b%ieAy7v(b_cHi;_kh6CFF~7T
z03BLKuy*<JW>L_oZ4_H0Cmm|~bwYgz>bLgp9%I~Z*aLOLxqbv+UnV`Fnw1_x=#v0X
zv|WgEB3)qU>wr9U6B^V!3a`9Cx+u|1R!Cmx*T>G^i|CL1H>h<K#}T(+*dTyvRR%)S
z#_z&wFQHCW<%iG!*U~BN)JLsYHj>rd6|w#fDIEdbpN@v96BCSU;Zz4d@t8EfN_rPW
z-+i47)yhXeYz#nLd=z~5-FM9X^5u)j-+S3JuY1^w1ApA#pT`cs)vK48&mB9q!HpZY
z+4E~J$H4z^K61yl6xKJYgY5&2Ip|kCBoas`hKS1$^$n<R_U$G~)~GMuu4R-_e}m6?
z8~F}-kDi_VQ5uMkdAK|t+BZn)-}Yk)>ZeI#1WGskss=}*?t>})<d<mH^aNH1(L5{h
zas%8KKzlBUNG3UEB#-==eRSfF!lCep=$WUV=2A(=iTb>x7gD#H0eLEtwVyRASmMuu
zz+kA(AwHgndMx+uNomgt-icJ&@0DY@XddqGSe69ef0GPeZVw?C+ak&b{ir<7;r<yS
z?%w>F-YMO=nRbek6HgcIdwmP{;!xd4x^rXRj%Uwm`=_YBrTzjlv-paKnVTl1pXVVr
z<JCGYDu2S#{FhgJp>_U5cme@u5y1YWpgcr?^t6uRZ=t(PPiwS?MT(p)XW?HUAP^7;
z2m}NI0s(=5KtLcM5D*9m1Ox&C0fB%(Kp-Fx5C{ka1Ofs9fq+0jARrJB2nYlO0s;Yn
zfIvVXAP^7;2m}NI0s(=5KtLcM5D*9m1Ox&C0c{bWyYlF)13iE7@zQ=>N;#b|uV-9;
z{DGI62oeZrgaDmS5fTz2?On(H@VHq<(_g)M^|I~JU9(0ypGWI>czAUGi6DW1mI&~B
zQaO)lX)ai>AX`$YEuphZw2Xs?<>TXHJclM*q~b*&-~<BKu3a;pDad(E3zOs^GBVO4
zWzCy6*F`=afBbQaxP*m3Knn!u9$hVDLLLU4@1{ia=g-$XE{d1VE)ygW&;tQFD^kwe
zT0C#uxKS~wbVj1DZ*fiID_OE6T)cQuF+O1_5O5X&I+Lnx+qRnVY`wZKSWVK<!P~J<
zr_DHo?qd}5R#xE_A2mRL&ggB?qJ`5kQrNd6yg$}*+#yfmJiH5}T)-C?mvqi|PTMOw
zYktR$9rB>Xvp_&M1n7>c5hF(AaJ=pT{zZr5S(p#l`MlN=N%BEwJeDoF6z@)Gmm`@B
z3JL<XKAg3<#W#U~vk1@~dF|WtJ3nl%i4^hcig!F5U_4KJPv=)#BQ780wp#i7?0yAL
zkCJxDNs%H&*m>6cOmS=Rh;IS`JrS5YcLCn5R9cm9y*xv(4OnE93*vW2<%9dFTK)zU
zFWevFQob95#w)E_b&%aNu4m3g*a89D2qfZFGSx%y-h`m@5K{Ix2rm5{{=UcO-FSBU
zKNfPqdEJrrgZtrTweokMV!1z|e3_jX*EeWxg9?EMv7NbVyeG+a%7qJofc^+b@*%Ye
zoPX^xoskb~;q!aM^v}77K_Flo0U;l@F%m9Z7Xcw3u3PpZ=e7|L@?jez;lgzh5c1)=
zWiN7W8v!97wlNYeTo(Z$AFf;WBImXd$QSZa-ZZ}~=67wEnQ)PN2&l;i-Ot_-@4Z!9
zt8ixhqh9q$yc5|Z6Y@BOeB@r)i<oR9KzE<Z`LhY$H@<99BE-btg|tZVahWiAe0(-H
z<US|z(HieeKYS1`WzVAHf2Og!&*kxdy+OKHo4XOFKp-y>pnKIhe>SUcfE(8>FS|~|
zE51h!i!-{*iG1|x8Ux|smSK||4(J<e4Eu@4qYA`**Lhi{B5v&v7(LR&_v=1OQVp2y
zHJ>vp0qSGl$Wi%tx<eGi$4l*zQUuA^WORQz+9)H(j+)vSCHKNkAdp)KbnRr~%iFgs
z>vwrNNJdCLYE*Ene>HO|DnZ(yxw8|D@?lL*Z3H7e3j{Pppna<-BVSsp<9VcQnnyvC
zdIr14A2lmR!jc7v+`Fo|W@VBw9m^NncCQ+c_#hC_5P{C^O!5)_(0coUTiBr)%0}I4
z_O~C@)_j8fGFwD4#K%EvRtovBg_roAI|vNyXBr#t{x!vFq<el#g?cC(j*dV2_ldC@
zE`1#QnkgN-ezu+tn}G=j0s)N>_yETSyxz7pXPcOi385XMp?=o7g*CU7H2MD8x>X~=
z+Sn!n=d~KvGOe{-xr_rHK>~q%fWTiT(v0#^2l;r$lmxa$k(emWHzi?LXXlO-=+xHK
z4|BBrAondB8eq;x3EB1s-ngC)i{>Q)jcK@yjvXBjnd(zr`2aDI1Xn^pZT-A<<w$5;
z+f=7>{^h14?FaY6%?7wGFK;inJ(*(t+?BX5|L0XrKIA;B^z4j$D22!EgnZ<Go^hoV
z3i)uQ(iVAj6agV0jv^-9yAlFIK3u7^MP406K*)!qhza+ugn*C_S1N6hS4R;L^5H0A
z!o4dYAmqc9N?YXBQ3P@-ACtyKvpZ{6ty%^1=FNjilP1B`sZ-gx>l-#~fN}4h!t-?R
z8P~=6`i3o2tbaIKg2KI?2sk1iRf4ZTK#3Vp$h!`Bc-X!h%H7Qi3i~{PcN<K^v#u}N
zB`ZQc^ek-=wxbAGlaDIF|3Of|S5Umj>)_>C3GXFvSG@<pp8KJ^JcFTF;ePC1sVYI2
z6y-(8hodDZ-0O*entYTkxfrPaw}<a@=EfaL`_HnF5g{LXmbM7nQ3TB8gT@R2C8ns}
zVUsgiP`jVX9oweYpla|nqnrr&aI^%4dp!{_$wvf~@t=d^3V$8j3}rd-a4!M@#i!tS
z{-My{)w8fg*bXB=@<I1D1(sR~-d<I6T{d`o<mDNJ@;MLAosD)l55j{$KraNs!{flm
zyJ4Qm1(y$QR;W+~A|fL6%B~1kAm9)J)22<&H?qNHBrGh<p*#r30s*ZNpu3Y7ELZ@3
zet!8*KD@oX*?MDaY^>JV7U2m5>_VVhw{H1PE_nOF&F0OULmC}!Do7xZiwGP%crf3~
z2A7eYJ9p+HG9oHhM<5*!32oc9ttRr}<J|~K6dj`YD^|FVCUG=s)Cdw1Y@aXZ>g6i(
zuMGk-X3WrpZ>fIwFZ!l&UC&(aFr@5G&Egq4bf`9&7oi9QtRQgh+BHqb<0Xm=Qk9RO
zfDM|-hlhs;96NT*O3uV5fq-)eBqb#Qjdyv!UJJ8W;g?k9qqP4=n#NVFS~a}0$M!j;
z&Y>iHyD9=S&ecLD<Y5%`drnn8{ELmyJif2K`pQ*{Pvl!?1hgD?a2YA$8>%WF#f!YG
zxqOIqL!Ft#g@bR?rj6$O>gUrzRX+TD+G!qN{rdG?xCBMk^+JI9?KH;a^}bf7Z=sf|
z^5N}OMf3P5-T(aak6ti|a9tFEZQHi#!mB>sjaB8t!=tz^ajsag!bM9_WLqx;diU<F
z3$J>6)l!s?s=;@3iI3Wk7A;!n1(OKZ1rf-^%QT7>EvgH@dU;k*ln>flu2mmSDIB5y
z?t+Z0Q<iVuyr~<ndU^yZ%15PgCv}UH<mK?;!#bfQf^{_nwrts=8?U;%7gLmv3T5}{
z7AMKa;>C+ytr$gqbwGgbD<AsCVjX$aOHn?`m(gcFfcLfDeRsSLXo(<Q34wInHu26|
zad;NVG#%x`4fn3!w~&$G(%<MBXSvdY;lweqFT|DjS*yIB{3{LK9Tf+y8cTNv(%FT)
z-qpjb9CX1#J_1Xv)-}%JMP7w^)gxi#&^XxqT{0xZiwixq;-7*V4sEkrwJZs0Rg&%}
z=lbS!W{)0n!NaT=c+f&V=o}LMT@SNlv3Ih?`NDHCK=)4z5(p?E@bEzfJQo_1jc2%g
z1eRK%E3bx>{n;Yk(j`97HO_z%lPuzV^6@A*awt^^9%1LA2*ku>!q*#<p?xdU{o!0L
zxLKj>9$k5r_IdEQxLLB;dpgIt-XcyO_k?%jAR;`&ML9xbn<KDmX9_f{r+z;<=a=ds
z;o$DB&lx4O{!yviUlzQocmJwN@IMxDn(`Y7^{X4;i#16cDq*@90tfe}TICNpuh6qz
z=f9OJ^@U10!hyyJdW=0hJpxqX%s%d-eE<4Oii>fEYiHMB$bi)=aUWm<d)f^XzvwX@
z2q-Zb=XS%b@@inIH7FyVn#zfP(cxC(l-CW7>lk3^qC^OPDEeCkU2^W<&%ilb^>K!r
zFU+5-;yoVD-rXT@3kv%_VK<NZ7HXlXd{hiPVt3peheovxaN{~ImI^Ac2)zGZyu*CK
z`GZX9ejDZU)8)Kx&vU8b@7tXgt<L$Oba{A`v^!pT-sySN@VElY8?KzO%m1XavaM0U
z)L$|$dwbsL4k&wg-yS#R0=~4HPm32Bs9C&4{d(ISuM#H1{uc{pPKkB*f+A1<TuO&p
zm7S9d&L=?un>6E78hh|?ZJ9;<p4BW~x`V-1e73&VtQZOB&IlPP2r@E$Oq|pF!1;yl
z64dIxG~Yta>`qr9uiBc)N9A&-?T(k{TgeoCtw&orqM|b3;|~)obVZcP+7Y|5B^MyC
zYBQfiXT#CGI%@G(EB}DqTWe2$%^o+UijP-~ODzp*_SA+<otOZmcOdA|Kp+E)YWt5V
z@a)skn(=`Wf0Qg9rdfTi#<Nv}Zvvg&U=QEh<Hp)KbV_-2#4faBG|c`W0Z89jQ2s<9
z9Q7f(Kc&4~G{$+&7kb3N@WF8~c61y}8W#^?BO{<tp%NPLt{1KYz6}-29W}~y<)Bkg
z*!L-o!gm8t&qAoDe}$!e<ePEOr)LbbX&wd6&R3Yr(9=&u!<o}UNb;M6kPg)g&zfX|
z%Dq)11GH#p{~BP!S_T-@KNdcknE*SsCd0otu8)q+1l)SANb~2<*NlI8{qKQ$3EkZb
zYaZ^jY10(*fXAi6m4DOW(1BD~xiks>_i8M(ZDIfV5UsJ&9ss$V)yBDyZCjER;}e#7
zg8<cuye=c%^nH6wI;dN|Pd0wzZp_WTy<*_z4ae5LGO#n(v13Qgd6~<KRwkVXmzrwA
z!=4h__+_%qaoabWOfqofU@E-!vPt*3W1A>@q7iO#0f8IWGqTlRwAaU+sBdg86ZGD>
zT{NpZ&E4Dk9vvO6=~?bt$pjCF?tP>4=5s<cf7`p8iRb0`O&T9>5#*K2>DkKR{8`89
z8;byig(e8h`N+ikGp8!w0YiJp2V&oemvK#OV^%Ir1hRLQ=uC9ZkNM4{``?@)n(tV<
zDiNs9#Id8cR;@W&G%wNUZp!<XGUQBJgx{PYK>Nda+3nb>u4}qrj;ZXr<NTIZ`x|Q2
zs+Di$qi4^aIRjPZD+={FUwqCqwwp0oxeg*P`}dl3q6ZBS_kzk`%(KU_qfI(h>poZC
zuP}Ln$=&J|>h2uPNWFUX@~wPy@7~?f>?pdY{bRfiqWVaUwrxo<x*PUCb$4q1g}wF&
ztXN`d7kYJ#QJimzkIRIXIG@GK`1fDc+Zjhw*q}j!d@CPax^!_gJBsfA{3FeX9qI8J
zB9$lg{)cS_$M}<3>g|kTB*Ib`1ZdrZ_D%D0>Gxs`oX*mpqq*5X4yQubPNx2Wwf=KX
z64<0k6IJ<ecXwC)mK$T0PMtdCBuf^4XdE)IpNaRMY9GbsHOQXm;)OI=vcObNkqq6w
zo%K<2BL4Fbfr}T?vyCB1R_awVSlC&s`*NCmI_p`D*B35asLP!Q^7!6-^G((G+qZ9@
z(`;Gzqc+%lFEZ(UHmG50mw6pUYp8<q7XtD%5MEB^=2RW#R9dxarOKaacwo@EbLXIc
z|Ngj!t&PqW$p*DcJ$m$jqeqXzl`B_N<EQ(4w4@KGo8}75vE}cyR(SrbSVPwmcP+v?
zWXFE;YyW95p=*}d#~*)Ol|Pe{O=~eXZrp&iYuCc)(W9Y5hYsNH@2~1l-agQCNJt2~
zZ++y*k+5{>Qn+~WqA?Y;zG3d3zqf4J(&$c$hr4$&jQv<H59a0@uZejpEwI))jI+3&
zWnNb1@1!rHHBldi^P{<$n3!lax`c!T`0cmffOJ)6&YTIOMva28W5>eu>C<85%9U{Z
z_;H)}&63=i$IIVoY@{V6VRp<htzO==HbUQ~PZHyDEiu<BtbZ=1Tb3P`m%Kbl-$-kE
z^2sMv`7=IV|9<$bTeno>Z`iP*rrD+OxLnstjxB$t^;$vs4}t5~tjkBeYLSX_zs}~Q
zbLY;g{Fxhfjo-PWe$P~$I(3}Qo`rvYCNY->b941d>ush*fWjhI5V(KOdf&K1YkhR)
zXpMpQXUt85!JvEI@87?#8h`cb)isZwbPvpBLjL~!H>NR{=8=m4bBsV_gmwAo(Iq;^
zVO#UqwQE;Z{)~)_wD5ZA(k1x$=busc%l^3nk~6yRY46^>kdl&pZS&#7hpO>csZzxv
zerGNEy=Ynok;?^t{&`3C^f?=!@UIO5)Ya!@q-4_Ct{z15tmf?oe<$AMM0YATZQ9i6
zHYg|vXkUgcIU$*#`70h~nKETy=gyrxSfG0Z`8RWu{Ao?^;2A$k_;Nd1j}?^v5TLOm
zFC!&${1|=4%GU0+y?5`P5vYk1mG2NaefqS~jrjxZ+bCA7m<9ibhK3rQMny$geCKi!
z7#L`Dr`3b4H4s{>6_h^_s9QDre3e{IKANG=yvhqNyr9aTG<N1ReE4uhcl-A3<4!Eh
zyLay@`f1&|wb3o@LE-XXZk8@x+UQQJhouWmdL(ju`SY!tSWyYemk2!8)Kb@hmz!Sm
zDt-I*Rpn2bd*$@$r=ME5BmN~BP$TMlDUJV!4jpRr5*r(95iXaL;>C*_-D&k8*X8Bd
z%FQ^TwyPD?nujCTLzI^pJ#XEt&$zK)zkaIxdHwozV;)J@WXO;qOgDu1w|VpCKw}bH
zME+=vp6fc2K0VD@aiTRwE)V8r;lhQvGtJCBznS)Um}5-(Sc38|0(8!Zd71I|y}R`p
zH@^DntE&8Y_3Bj%u>Sq`U)Z&4m(6jx+#}6j9XWCY_V3?sv6nmv7d_48g1`It_{f9N
z<eBdD<d~Y9q`xRA{~|!=Z<v=Ef7k0g%z*>d&&Iuc`Lga{(R?qL2XoWI!$b4<=?r&{
zskzyytv+i^nrFgA103_V`rM;l=ll&DHcXX2FI>2wdr4U9U-|m_Y94=5Ql_eWJpXKr
z=JAODwL?I@ht|AqOHS5aH<404VZsDe`8ajzly;d@3CY^}2k8jwL2C1aufD9$8j~J*
zaK$j^&Q{)^&;;*5(u-EDTBRx<KmGKRUeOxEJ$dq^YW&TbH8Z-?@_}@9%<CU|7iU&$
ziL&-#(Y<L(<@OAod#M+lJ$qJ_Kj+S!t5>wfaM!P2uNuF69@ywXg9o*F5Iy#vX^>nI
zL>2;Htv8*sA(xXEpVO~jOygrOFE2$NedCQcbT1pVb$J@A(|#;HNPZ539A|MRgC1yW
z7v|3Grt@Xw<@VMa`u2<EdR6i{qzV-(0F9sZqD(x1qEVwpin2*#^YHL+U7{WrraTYw
z=?bCSt_$EA1$r3IftAYzf1ZZ-ROm@>zx}o%kCLp=o<O~5%^JGfR{1_eT2s`E=6|fL
zWAfeCLbqKn%(V#j)ZfZ$SMxv7w_c-uj2fTPxeT;VR%?3j-~p5^TUIq*y~ZAt54CX~
zwcmpBF9O%DDz9Cw|3Zh2wK5n;Pq$>rlB&E)-{`Cnt%%kgYt*Qr8Xw8(@4x@9Rdg2N
z{P=_NIPb_IeRLEo5+E#cgg}%*dF^V~PW|h(&p!LiD!<ZRCDOIkg4(rfXEm<2ZQE)Q
zjcOQb{n(4=g>JhlXeuA*?i$(~e*0FsCg-KAM8m9UYaJhR$j#iS*XTZw#~ypkD&Nvs
zq|U6V(^!ANfB{zHp#I$7fB$U_Ca1rVu8tgE{(SR>&~3K{E}eUSU|%Xwf1mE~YFIP7
zzIh$opFwL&bjC5=6R3yIM}r!cdqC)pq}(9VtF_hd@%Hux(n&dX?3l$~S+z7CI&_Gg
z|3mulYU3QTFIu!{w!MXF;W=yn0Pp1FG9fo(VuXBH!}i@#%JY754CT*sR*cqtpZ2XR
z*LJB5%Pso$+i$J%u$;e1|D5zw&YU>|^0VY9t+cQ3{rBI8+O_S!+j;!>@wt*s+N)`P
z&QA@z&sLB!0;JnCdW2)L!R4eS-Vvx}yWHi;?B{DxIZ}D%7SW#A4jnq!EhAiBNY^$v
zI2g*8FVETmZf~zivL@e;rFVYmyd++RWYW7JO9W1zOoR3<E$eJKcDA0WPc(gUJjBO4
zU(eI|?DF^;*3A8Kqqcy~0WDRkl*4jjuRL&fw02K(xpWS1Zj$-kr%lD)4@LN`?b(y_
zsXfnhKbNyKbYS*&?6IbKw<lri)~&kB2c1ir7xctq+3Q5QFIrG`1U9Wxo(Jc$KzeL+
ze+}J7vlZ_adUH@5&>l?w-Q1*h2)C0uMdtlHD#yH}AAa~jmv)5q+tPkrNAIT93JcQt
zl$Rgf!6L|n0NrIKzqe726^#MtE;=QmvGOb{=j78pEY6Ilr%y87qef}!+F6@52c^8&
zYZr%y7LYD)-MV#+`^b6!$WfEdzX}Tr13H&FFR53z?DEm2W8UMOmw3qIwzkKT?%}ZK
zXuu74$F^Li<j=zg=ll?ig>$p(2KCWVcUO*yz0WjGc=p+69qM<{oG_i|Kx^W(&XOOf
zf1m8*yk1>}eDHE1Jv2E#^XKOE4M6t{*-O^;`{i_Pgznzt=^?X!U;T93?ail>J6gk|
z`=w~Ei*#+x+Y!=9p|eXTO_~IxPeSLI<R>!U>rd-lf+PgwcZth+(NR4oYG+=-`vT=*
z@aHeq=1ga5>Ef#pQsx&33iyisp6&80&>0{3o#-4ZI<J@Z%hJ6Fq`RJ<Y3QK;pnRF_
z4CCO^-$SSNJMhlI+xa=kxstXxY#(Y>vK(X69@d<&;f`&}do~93cWloFt;;FZ!&EQR
zSeEpk=xk^~&LKei6={ve%}x34(IQ2Pz>Xa|oQvcU_Dy;rypETfbbo11C<4!2H(!gT
zaA_UfURu3+wO#l7l`B_{)z9{ZE8JyAfaa3T`+-XDG+x@gd2@EpF7h^NSoZY=;^msC
zTX64g&c}@}^|tI|k<3Kk-OaX$<~WtgNX?GwH`3=2<QM`64jizn4&t~|n@##Lu0(Xl
zhPlom$;Xrl&Yg`;_s^4z$=f4(ra5G5G;7u@hh&479qG9K_19n4f)?Mh5TG-FKm72+
z9M4NHTC~Vzu-x*!^1Rhm4eo{Q-QBVcdHogZV-Pw&lk>czW}iNNT&CQd$tblOj$$i!
zPdde}LUcZbc^yw@g=sO>LVLu`!){p1pt@E_^Pci@aP&DKARyn(ndV16nlfdIQ#ez(
ztXQ!kKW0tyG!5u$dA@C^M(d`u-fk`*^xnFO0S4o_x^KKL`@LoWKfmB?<yNZ1OHd_b
znbluN;A)(Y++_Uq?tU$Mxbiq0ea3sgUwx_I{TkId0Kug<vtPM@FQIbz6*hmRO1zw{
zY>E}Fg4h_W;?oc3`AN4lzx_y`<NR6s)}Gq7$gYz{{HxXa+k^Ycdv26uCZz1nZ1__h
zRmOjwqI@a&7j~9oJuNYzvM_JYL(2a8$d=FI`S#7tHm;q0KOkXB>!?~#VxsciaiwxA
z7x1|S{z5+V<$0xYP_t8#kD!2ckF0#yt5>e1k2qpT&UK~C<*H5<`^vbC|9l}ISU0Kh
zXI|SY$w%3ei}P)IZQ*6Fd^D(G*?zn^NSpS9#`sF>gi2`-F8za$k4H>C%9q(%;N_!v
z155d^H3w_nMyS1$PP>vUDA`pF{tx9NyMBY{U*(_n#IpVHfU3dQ?Ji%XGS5ppd&eKW
zx>>GK&^`by==?e5Gh@_nDN!{0y19^#{3{>+Mc>M?Y*3$@_O{#Gw@~93d+a;6ivrrm
zBLC4Izms?_r#&<-Ec@Ogij&$DEojZE?0V@uKSKt_!atYN*%=OWjsyQ)xtxgl4&KIo
z)_d=LX#B?An4517oeADvmD#UV%icEKoBMag_vOpB8Zq<rsb&{uVPP|j<>Kw_1J|ym
zs`@*9Dh+6jfS0%2l=s~a9Z;VCm%Df7+1@t78n3VY)RKouu1TlYSu)=jOL?XF0Bd^*
zyLIbkEQb$1_`qfoXx|;5cl`L{k8Qda4gm3wF`k`DXF=FQ)2B~2;@rD;Z<}70F3P^A
zjq^G28z<WSqNIbw-8yS(aX;l{JZDX*owKDU#q+3UhNB*0Gu&Hco<}-Q%NmiMVdct|
zSy|XCAEX0M_j1sF3qkfFK>GrofBtzOy<B^U%SW9$b>QN~i#EM{zQ(fNC0;P!Ph{=v
z0(0JR^qu-BT2OC=F-Xfs21vKBi>8<awe#|i9knmeciwpiX3w6j7`EJU&YU@Rm6zO)
zcs3z0cI;Twi<KwRXCxW1mkN@6(Al9%vZ;0+gFP5^YHQj5Bt2n!_ObKu6BBK(apu)o
zA3TkZx@j+d_LPMji-IH{qz6*Jy5(F6?PrRPvb|qJjtf2S-L1Ueigd07xds9SNj|8=
zNM}o_4WaX}9Hn9ZQx0q6I@8$9(J+PkM+<?1CLastDEF~Q_tFuf`BL+9T)Es`Ja6CF
z!;$!e+x&?@L6eWGSJGAan$}3}+_v7&q9dHP;dzQ}npx@tlYC4ZOXqjw&$1M$(jI|=
zCLe^5wX;R*RWraDT=!9<&lJ{Cc)KCS9cri*T>FA3AJhgYovXn4yd9pUOXu#U$gVcK
zeJcZKF1NOdo-XZ0BsYRw3xR?tA5?;LR^s!|TIytR86lI_z*{#q0IiY8?UkNCU2c1h
z*0ngtHF8@}<%3F(&Sp^B7ox=f*6b#YckT=n*WjdrnahGKA5>z8QFn~aPqfDW*1pY{
zl8~!+JQYkXdvtSE(B*?lhR#8xbFl2)14#1nRQqVyf_G^Pa%}`$K|Xj1M@D3_`)ixj
zRc}w8>k<to|5Bgd;$aEXH4yk|yRr_&uRqHscMyt4K|j&n5~KSGzFMCQGbSg%n78AA
zba9t0PGt8#r)JN#y+I0h1r&iKoR*n6H38`E82+0*Ga=jDCuO}L$wvV#N|CKRL_o+#
z9)d5T&i4oi`N;Q0Bodg12+&=`*5*NT`i=G_(jGlQ0)a;vf&WnNkM7T-^Qg4?EnS!h
zf1eO@MUOIHh_nj?1Ofs9fq+0jARrJB2nYlO0s;YnfIvVXAP^7;2m}NI0s(=5KtLcM
z5D*9m1Ox&C0fB%(Kp-Fx5C{ka1Ofs9fq+0jARrJB2nYlO0s;YnfIvVXAP^7;2m}NI
z0s(=5KtLcM5D*9m1Ox&C0fB%(Kp-Fx5C{ka1Ofs9fq+0jARrJB2nYlO0s;YnfIvVX
ypp1Z<Ac25DKp-Fx5C{ka1Ofs9fq+0jARrJB2nYlO0s;YnfIvVXAP{&Y5%@p5Yrq!(

literal 0
HcmV?d00001

diff --git a/windows-installer/construct.py b/windows-installer/construct.py
new file mode 100644
index 000000000..15296d559
--- /dev/null
+++ b/windows-installer/construct.py
@@ -0,0 +1,137 @@
+#!/usr/bin/env python3
+import ctypes
+import struct
+import subprocess
+import os
+import sys
+import shutil
+import time
+
+
+PYTHON_VERSION = (3, 7, 4)
+PYTHON_BITNESS = 32
+
+
+def main():
+    build_path, repo_path, venv_path, venv_python = _prepare_environment()
+
+    _copy_assets(build_path, repo_path)
+
+    installer_cfg_path = _generate_pynsist_config(repo_path, build_path)
+
+    _prepare_build_tools(venv_path, venv_python)
+    _compile_wheels(repo_path, build_path, venv_python)
+    _build_installer(installer_cfg_path, venv_path)
+
+    print('Done')
+
+
+def _build_installer(installer_cfg_path, venv_path):
+    print('Build the installer')
+    subprocess.check_call([os.path.join(venv_path, 'Scripts', 'pynsist.exe'), installer_cfg_path])
+
+
+def _compile_wheels(repo_path, build_path, venv_python):
+    print('Compile wheels')
+
+    wheels_path = os.path.join(build_path, 'wheels')
+    os.makedirs(wheels_path)
+
+    certbot_packages = ['acme', '.']
+    # Uncomment following line to include all DNS plugins in the installer
+    # certbot_packages.extend([name for name in os.listdir(repo_path) if name.startswith('certbot-dns-')])
+    wheels_project = [os.path.join(repo_path, package) for package in certbot_packages]
+
+    command = [venv_python, '-m', 'pip', 'wheel', '-w', wheels_path]
+    command.extend(wheels_project)
+    subprocess.check_call(command)
+
+
+def _prepare_build_tools(venv_path, venv_python):
+    print('Prepare build tools')
+    subprocess.check_call([sys.executable, '-m', 'venv', venv_path])
+    subprocess.check_call(['choco', 'upgrade', '-y', 'nsis'])
+    subprocess.check_call([venv_python, '-m', 'pip', 'install', '--upgrade', 'pip'])
+    subprocess.check_call([venv_python, '-m', 'pip', 'install', 'wheel', 'pynsist'])
+
+
+def _copy_assets(build_path, repo_path):
+    print('Copy assets')
+    if os.path.exists(build_path):
+        os.rename(build_path, '{0}.{1}.bak'.format(build_path, int(time.time())))
+    os.makedirs(build_path)
+    shutil.copy(os.path.join(repo_path, 'windows-installer', 'certbot.ico'), build_path)
+    shutil.copy(os.path.join(repo_path, 'windows-installer', 'run.bat'), build_path)
+
+
+def _generate_pynsist_config(repo_path, build_path):
+    print('Generate pynsist configuration')
+
+    installer_cfg_path = os.path.join(build_path, 'installer.cfg')
+
+    certbot_version = subprocess.check_output([sys.executable, '-c', 'import certbot; print(certbot.__version__)'],
+                                              universal_newlines=True, cwd=repo_path).strip()
+
+    with open(os.path.join(installer_cfg_path), 'w') as file_h:
+        file_h.write("""\
+[Application]
+name=Certbot
+version={certbot_version}
+icon=certbot.ico
+publisher=Electronic Frontier Foundation
+target=$INSTDIR\\run.bat
+
+[Build]
+directory=nsis
+installer_name=certbot-{certbot_version}-installer-{installer_suffix}.exe
+
+[Python]
+version={python_version}
+bitness={python_bitness}
+
+[Include]
+local_wheels=wheels\\*.whl
+files=run.bat
+
+[Command certbot]
+entry_point=certbot.main:main
+""".format(certbot_version=certbot_version,
+           installer_suffix='win_amd64' if PYTHON_BITNESS == 64 else 'win32',
+           python_bitness=PYTHON_BITNESS,
+           python_version='.'.join([str(item) for item in PYTHON_VERSION])))
+
+        return installer_cfg_path
+
+
+def _prepare_environment():
+    print('Prepare environment')
+    try:
+        subprocess.check_output(['choco', '--version'])
+    except subprocess.CalledProcessError:
+        raise RuntimeError('Error: Chocolatey (https://chocolatey.org/) needs '
+                           'to be installed to run this script.')
+    script_path = os.path.realpath(__file__)
+    repo_path = os.path.dirname(os.path.dirname(script_path))
+    build_path = os.path.join(repo_path, 'windows-installer', 'build')
+    venv_path = os.path.join(build_path, 'venv-config')
+    venv_python = os.path.join(venv_path, 'Scripts', 'python.exe')
+
+    return build_path, repo_path, venv_path, venv_python
+
+
+if __name__ == '__main__':
+    if not os.name == 'nt':
+        raise RuntimeError('This script must be run under Windows.')
+
+    if ctypes.windll.shell32.IsUserAnAdmin() == 0:
+        # Administrator privileges are required to properly install NSIS through Chocolatey
+        raise RuntimeError('This script must be run with administrator privileges.')
+
+    if sys.version_info[:2] != PYTHON_VERSION[:2]:
+        raise RuntimeError('This script must be run with Python {0}'
+                           .format('.'.join([str(item) for item in PYTHON_VERSION[0:2]])))
+
+    if struct.calcsize('P') * 8 != PYTHON_BITNESS:
+        raise RuntimeError('This script must be run with a {0} bit version of Python.'
+                           .format(PYTHON_BITNESS))
+    main()
diff --git a/windows-installer/run.bat b/windows-installer/run.bat
new file mode 100644
index 000000000..efba28800
--- /dev/null
+++ b/windows-installer/run.bat
@@ -0,0 +1,31 @@
+@echo off
+
+:: BatchGotAdmin
+:-------------------------------------
+REM  --> Check for permissions
+    IF "%PROCESSOR_ARCHITECTURE%" EQU "amd64" (
+>nul 2>&1 "%SYSTEMROOT%\SysWOW64\cacls.exe" "%SYSTEMROOT%\SysWOW64\config\system"
+) ELSE (
+>nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system"
+)
+
+REM --> If error flag set, we do not have admin.
+if '%errorlevel%' NEQ '0' (
+    echo Requesting administrative privileges...
+    goto UACPrompt
+) else ( goto gotAdmin )
+
+:UACPrompt
+    echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
+    set params= %*
+    echo UAC.ShellExecute "cmd.exe", "/c ""%~s0"" %params:"=""%", "", "runas", 1 >> "%temp%\getadmin.vbs"
+
+    "%temp%\getadmin.vbs"
+    del "%temp%\getadmin.vbs"
+    exit /B
+
+:gotAdmin
+    pushd "%CD%"
+    CD /D "%~dp0"
+:--------------------------------------    
+cmd.exe /k echo You can run 'certbot' commands here. Type 'certbot --help' for more information.