From 1d32888ac40d25c15ed30aa70119c8d722801844 Mon Sep 17 00:00:00 2001 From: Erica Portnoy Date: Tue, 7 Oct 2025 09:42:00 -0700 Subject: [PATCH] Update changelog for 5.1.0 release --- certbot/CHANGELOG.md | 21 +++++++++++++++++++++ newsfragments/10455.fixed | 1 - newsfragments/10465.changed | 1 - newsfragments/10466.changed | 1 - 4 files changed, 21 insertions(+), 3 deletions(-) delete mode 100644 newsfragments/10455.fixed delete mode 100644 newsfragments/10465.changed delete mode 100644 newsfragments/10466.changed diff --git a/certbot/CHANGELOG.md b/certbot/CHANGELOG.md index b48cf17fe..e2b172716 100644 --- a/certbot/CHANGELOG.md +++ b/certbot/CHANGELOG.md @@ -4,6 +4,27 @@ Certbot adheres to [Semantic Versioning](https://semver.org/). +## 5.1.0 - 2025-10-07 + +### Changed + +- certbot-nginx no longer creates and uses self-signed certificates as an + intermediate step when installing certificates. The certificates the user + requested Certbot install are now always used instead. + ([#10465](https://github.com/certbot/certbot/issues/10465)) +- The function `acme.crypto_util.make_self_signed_cert` was deprecated and will + be removed in a future release. + ([#10466](https://github.com/certbot/certbot/issues/10466)) + +### Fixed + +- Fixed a bug in certbot-nginx that'd leave nginx configured with self-signed + certificates if a user ran `certbot enhance` and they didn't have matching + SSL server blocks. `certbot enhance` now requires the user to have a matching + SSL server block to enable HSTS or OCSP stapling enhancements. + ([#10455](https://github.com/certbot/certbot/issues/10455)) + + ## 5.0.0 - 2025-09-02 ### Added diff --git a/newsfragments/10455.fixed b/newsfragments/10455.fixed deleted file mode 100644 index 96e1bfa59..000000000 --- a/newsfragments/10455.fixed +++ /dev/null @@ -1 +0,0 @@ -Fixed a bug in certbot-nginx that'd leave nginx configured with self-signed certificates if a user ran `certbot enhance` and they didn't have matching SSL server blocks. `certbot enhance` now requires the user to have a matching SSL server block to enable HSTS or OCSP stapling enhancements. diff --git a/newsfragments/10465.changed b/newsfragments/10465.changed deleted file mode 100644 index dc2531d47..000000000 --- a/newsfragments/10465.changed +++ /dev/null @@ -1 +0,0 @@ -certbot-nginx no longer creates and uses self-signed certificates as an intermediate step when installing certificates. The certificates the user requested Certbot install are now always used instead. diff --git a/newsfragments/10466.changed b/newsfragments/10466.changed deleted file mode 100644 index 69f579707..000000000 --- a/newsfragments/10466.changed +++ /dev/null @@ -1 +0,0 @@ -The function `acme.crypto_util.make_self_signed_cert` was deprecated and will be removed in a future release.