Release 4.0.0

acme/setup.py

@@ -1,7 +1,7 @@
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     'cryptography>=43.0.0',

certbot-apache/setup.py

@@ -1,7 +1,7 @@
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     # We specify the minimum acme and certbot version as the current plugin

certbot-compatibility-test/setup.py

@@ -1,7 +1,7 @@
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     'certbot',

certbot-dns-cloudflare/setup.py

@@ -4,7 +4,7 @@ import sys
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     # for now, do not upgrade to cloudflare>=2.20 to avoid deprecation warnings and the breaking

certbot-dns-digitalocean/setup.py

@@ -4,7 +4,7 @@ import sys
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     'python-digitalocean>=1.11', # 1.15.0 or newer is recommended for TTL support

certbot-dns-dnsimple/setup.py

@@ -4,7 +4,7 @@ import sys
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     # This version of lexicon is required to address the problem described in

certbot-dns-dnsmadeeasy/setup.py

@@ -4,7 +4,7 @@ import sys
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',

certbot-dns-gehirn/setup.py

@@ -4,7 +4,7 @@ import sys
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',

certbot-dns-google/setup.py

@@ -4,7 +4,7 @@ import sys
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     'google-api-python-client>=1.6.5',

certbot-dns-linode/setup.py

@@ -4,7 +4,7 @@ import sys
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',

certbot-dns-luadns/setup.py

@@ -4,7 +4,7 @@ import sys
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',

certbot-dns-nsone/setup.py

@@ -4,7 +4,7 @@ import sys
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',

certbot-dns-ovh/setup.py

@@ -4,7 +4,7 @@ import sys
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     'dns-lexicon>=3.15.1',

certbot-dns-rfc2136/setup.py

@@ -4,7 +4,7 @@ import sys
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     # This version was chosen because it is the version packaged in RHEL 9 and Debian unstable. It

certbot-dns-route53/setup.py

@@ -4,7 +4,7 @@ import sys
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     'boto3>=1.15.15',

certbot-dns-sakuracloud/setup.py

@@ -4,7 +4,7 @@ import sys
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',

certbot-nginx/setup.py

@@ -1,7 +1,7 @@
 from setuptools import find_packages
 from setuptools import setup
 
-version = '4.0.0.dev0'
+version = '4.0.0'
 
 install_requires = [
     # We specify the minimum acme and certbot version as the current plugin

certbot/certbot/__init__.py

@@ -1,4 +1,4 @@
 """Certbot client."""
 
 # version number like 1.2.3a0, must have at least 2 parts, like 1.2
-__version__ = '4.0.0.dev0'
+__version__ = '4.0.0'

certbot/docs/cli-help.txt

@@ -96,6 +96,23 @@ optional arguments:
                         before submitting to CA. When used in combination with
                         the `-v` option, the challenge URLs or FQDNs and their
                         expected return values are shown. (default: False)
+  --required-profile REQUIRED_PROFILE
+                        Request the given profile name from the ACME server.
+                        If the ACME server returns an error, issuance (or
+                        renewal) will fail. For long-term reliability, setting
+                        preferred_profile instead may be preferable because it
+                        allows fallback to a default. Use this setting when
+                        renewal failure is preferable to fallback. (default:
+                        None)
+  --preferred-profile PREFERRED_PROFILE
+                        Request the given profile name from the ACME server,
+                        or fallback to default. If the given profile name
+                        exists in the ACME directory, use it to request a a
+                        certificate. Otherwise, fall back to requesting a
+                        certificate without a profile (which means the CA will
+                        use its default profile). This allows renewals to
+                        succeed even if the CA deprecates and removes a given
+                        profile. (default: None)
   --preferred-chain PREFERRED_CHAIN
                         Set the preferred certificate chain. If the CA offers
                         multiple certificate chains, prefer the chain whose
@@ -122,7 +139,7 @@ optional arguments:
                         case, and to know when to deprecate support for past
                         Python versions and flags. If you wish to hide this
                         information from the Let's Encrypt server, set this to
-                        "". (default: CertbotACMEClient/3.3.0 (certbot;
+                        "". (default: CertbotACMEClient/4.0.0 (certbot;
                         OS_NAME OS_VERSION) Authenticator/XXX Installer/YYY
                         (SUBCOMMAND; flags: FLAGS) Py/major.minor.patchlevel).
                         The flags encoded in the user agent are: --duplicate,

packages/SHA256SUMS

@@ -0,0 +1,17 @@
+972d6e0b160000ae833aaa9619901896336e5dc7ca82003fa6ff465bafcbdf52  acme-4.0.0.tar.gz
+a867bfbb5126516c12d4c8a93909ef1e4d5309fc4e9f5b97b2d987b0ffd4bbe3  certbot-4.0.0.tar.gz
+507f9a336bd95c25548f449d8307eead6f875186a13049de173d6833371910a2  certbot_apache-4.0.0.tar.gz
+3cc9752b1fbca8e16de8ccd23675d345505a529737855398db655b3413e711f8  certbot_dns_cloudflare-4.0.0.tar.gz
+00ce5b7c6fdcf360ab65558ec0e9c9a7247ddeb7ac8355bca3f5ca43496b0b87  certbot_dns_digitalocean-4.0.0.tar.gz
+3dbe24c0cd5ada5c833d6de174c7ced9fd2a215547d18ad569ee4fe45aafb41b  certbot_dns_dnsimple-4.0.0.tar.gz
+bd42dc87844d764c80e27221b81371670ccce65e564119fe1c99fafe7b0b441e  certbot_dns_dnsmadeeasy-4.0.0.tar.gz
+554c35ab3582b37d3fa628cd0c8186f0801b2925bf21fcb08c9db502b276471f  certbot_dns_gehirn-4.0.0.tar.gz
+07f78292c7e9b76552a9eed5152c46b285acf3231338850195e895eb3a62a6d3  certbot_dns_google-4.0.0.tar.gz
+a8487117a2c57606e9e554bf967058c598f6f559fdddd13a4c763c97416c999b  certbot_dns_linode-4.0.0.tar.gz
+2fb5bcd8eeada94f9ad9a5a213d0d90480071a5b5411c326e279fa352bc42ea6  certbot_dns_luadns-4.0.0.tar.gz
+c0bdd769e88147e7b45371c4892c68404a014aa9c4aa48a505f011a94b5e18eb  certbot_dns_nsone-4.0.0.tar.gz
+54b1637572d2ac5bbe78bddc180966ad9c7d90bb6baf820c4e7da4c02e6f21ab  certbot_dns_ovh-4.0.0.tar.gz
+9d403198294c6e2e4bc9df6a5e82a4ed35ab3ffef534307f732e967fec3292d7  certbot_dns_rfc2136-4.0.0.tar.gz
+9b6397d5a0b3a23242346238cdf423b111b16114e59798638b47d1be9a84fc2e  certbot_dns_route53-4.0.0.tar.gz
+b658870de64ffab5f302575f391b8b37774a1cd5d294e8dbbe6db46a794bdd36  certbot_dns_sakuracloud-4.0.0.tar.gz
+4478c3e13e04b49f95675d83adaacdcf1356f8fac0824e236f893f2f5a1d991c  certbot_nginx-4.0.0.tar.gz

packages/SHA256SUMS.asc

@@ -0,0 +1,14 @@
+-----BEGIN PGP SIGNATURE-----
+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+=vDlD
+-----END PGP SIGNATURE-----