July 2021 - openSUSE Commits - openSUSE Mailing Lists

commit python-certbot-dns-dnsimple for openSUSE:Factory
by Source-Sync 30 Jul '21

30 Jul '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-certbot-dns-dnsimple for openSUSE:Factory checked in at 2021-07-30 23:22:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-certbot-dns-dnsimple (Old) and /work/SRC/openSUSE:Factory/.python-certbot-dns-dnsimple.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python-certbot-dns-dnsimple" Fri Jul 30 23:22:10 2021 rev:30 rq:909354 version:1.17.0 Changes: -------- --- /work/SRC/openSUSE:Factory/python-certbot-dns-dnsimple/python-certbot-dns-dnsimple.changes 2021-07-26 17:38:39.558053534 +0200 +++ /work/SRC/openSUSE:Factory/.python-certbot-dns-dnsimple.new.1899/python-certbot-dns-dnsimple.changes 2021-07-30 23:22:36.127608365 +0200 @@ -1,0 +2,6 @@ +Fri Jul 30 08:44:50 UTC 2021 - Mark��ta Machov�� <mmachova(a)suse.com> + +- update to version 1.17.0 + * sync with the main certbot package + +------------------------------------------------------------------- Old: ---- certbot-dns-dnsimple-1.16.0.tar.gz New: ---- certbot-dns-dnsimple-1.17.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-certbot-dns-dnsimple.spec ++++++ --- /var/tmp/diff_new_pack.LDLLQ4/_old 2021-07-30 23:22:36.579607868 +0200 +++ /var/tmp/diff_new_pack.LDLLQ4/_new 2021-07-30 23:22:36.579607868 +0200 @@ -20,7 +20,7 @@ %define skip_python2 1 %define skip_python36 1 Name: python-certbot-dns-dnsimple -Version: 1.16.0 +Version: 1.17.0 Release: 0 Summary: DNSimple Authenticator plugin for Certbot License: Apache-2.0 ++++++ certbot-dns-dnsimple-1.16.0.tar.gz -> certbot-dns-dnsimple-1.17.0.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-dns-dnsimple-1.16.0/PKG-INFO new/certbot-dns-dnsimple-1.17.0/PKG-INFO --- old/certbot-dns-dnsimple-1.16.0/PKG-INFO 2021-06-01 19:50:19.808168000 +0200 +++ new/certbot-dns-dnsimple-1.17.0/PKG-INFO 2021-07-06 17:41:39.239916600 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 2.1 Name: certbot-dns-dnsimple -Version: 1.16.0 +Version: 1.17.0 Summary: DNSimple DNS Authenticator plugin for Certbot Home-page: https://github.com/certbot/certbot Author: Certbot Project diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-dns-dnsimple-1.16.0/certbot_dns_dnsimple.egg-info/PKG-INFO new/certbot-dns-dnsimple-1.17.0/certbot_dns_dnsimple.egg-info/PKG-INFO --- old/certbot-dns-dnsimple-1.16.0/certbot_dns_dnsimple.egg-info/PKG-INFO 2021-06-01 19:50:19.000000000 +0200 +++ new/certbot-dns-dnsimple-1.17.0/certbot_dns_dnsimple.egg-info/PKG-INFO 2021-07-06 17:41:39.000000000 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 2.1 Name: certbot-dns-dnsimple -Version: 1.16.0 +Version: 1.17.0 Summary: DNSimple DNS Authenticator plugin for Certbot Home-page: https://github.com/certbot/certbot Author: Certbot Project diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-dns-dnsimple-1.16.0/certbot_dns_dnsimple.egg-info/requires.txt new/certbot-dns-dnsimple-1.17.0/certbot_dns_dnsimple.egg-info/requires.txt --- old/certbot-dns-dnsimple-1.16.0/certbot_dns_dnsimple.egg-info/requires.txt 2021-06-01 19:50:19.000000000 +0200 +++ new/certbot-dns-dnsimple-1.17.0/certbot_dns_dnsimple.egg-info/requires.txt 2021-07-06 17:41:39.000000000 +0200 @@ -1,7 +1,7 @@ setuptools>=39.0.1 zope.interface -acme>=0.31.0 -certbot>=1.1.0 +acme>=1.17.0 +certbot>=1.17.0 dns-lexicon>=3.2.1 [docs] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-dns-dnsimple-1.16.0/setup.py new/certbot-dns-dnsimple-1.17.0/setup.py --- old/certbot-dns-dnsimple-1.16.0/setup.py 2021-06-01 19:49:18.000000000 +0200 +++ new/certbot-dns-dnsimple-1.17.0/setup.py 2021-07-06 17:41:17.000000000 +0200 @@ -4,10 +4,8 @@ from setuptools import find_packages from setuptools import setup -version = '1.16.0' +version = '1.17.0' -# Remember to update local-oldest-requirements.txt when changing the minimum -# acme/certbot version. install_requires = [ 'setuptools>=39.0.1', 'zope.interface', @@ -15,8 +13,11 @@ if not os.environ.get('SNAP_BUILD'): install_requires.extend([ - 'acme>=0.31.0', - 'certbot>=1.1.0', + # We specify the minimum acme and certbot version as the current plugin + # version for simplicity. See + # https://github.com/certbot/certbot/issues/8761 for more info. + f'acme>={version}', + f'certbot>={version}', ]) elif 'bdist_wheel' in sys.argv[1:]: raise RuntimeError('Unset SNAP_BUILD when building wheels '

1 0

commit python-certbot-dns-digitalocean for openSUSE:Factory
by Source-Sync 30 Jul '21

30 Jul '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-certbot-dns-digitalocean for openSUSE:Factory checked in at 2021-07-30 23:22:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-certbot-dns-digitalocean (Old) and /work/SRC/openSUSE:Factory/.python-certbot-dns-digitalocean.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python-certbot-dns-digitalocean" Fri Jul 30 23:22:09 2021 rev:28 rq:909353 version:1.17.0 Changes: -------- --- /work/SRC/openSUSE:Factory/python-certbot-dns-digitalocean/python-certbot-dns-digitalocean.changes 2021-06-24 18:23:07.296952653 +0200 +++ /work/SRC/openSUSE:Factory/.python-certbot-dns-digitalocean.new.1899/python-certbot-dns-digitalocean.changes 2021-07-30 23:22:34.831609788 +0200 @@ -1,0 +2,6 @@ +Fri Jul 30 08:44:40 UTC 2021 - Mark��ta Machov�� <mmachova(a)suse.com> + +- update to version 1.17.0 + * sync with the main certbot package + +------------------------------------------------------------------- Old: ---- certbot-dns-digitalocean-1.16.0.tar.gz New: ---- certbot-dns-digitalocean-1.17.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-certbot-dns-digitalocean.spec ++++++ --- /var/tmp/diff_new_pack.sSpraC/_old 2021-07-30 23:22:35.287609287 +0200 +++ /var/tmp/diff_new_pack.sSpraC/_new 2021-07-30 23:22:35.291609283 +0200 @@ -19,7 +19,7 @@ %{?!python_module:%define python_module() python-%{**} python3-%{**}} %define skip_python2 1 Name: python-certbot-dns-digitalocean -Version: 1.16.0 +Version: 1.17.0 Release: 0 Summary: DigitalOcean Authenticator plugin for Certbot License: Apache-2.0 ++++++ certbot-dns-digitalocean-1.16.0.tar.gz -> certbot-dns-digitalocean-1.17.0.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-dns-digitalocean-1.16.0/PKG-INFO new/certbot-dns-digitalocean-1.17.0/PKG-INFO --- old/certbot-dns-digitalocean-1.16.0/PKG-INFO 2021-06-01 19:50:11.227569300 +0200 +++ new/certbot-dns-digitalocean-1.17.0/PKG-INFO 2021-07-06 17:41:36.745971000 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 2.1 Name: certbot-dns-digitalocean -Version: 1.16.0 +Version: 1.17.0 Summary: DigitalOcean DNS Authenticator plugin for Certbot Home-page: https://github.com/certbot/certbot Author: Certbot Project diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-dns-digitalocean-1.16.0/certbot_dns_digitalocean.egg-info/PKG-INFO new/certbot-dns-digitalocean-1.17.0/certbot_dns_digitalocean.egg-info/PKG-INFO --- old/certbot-dns-digitalocean-1.16.0/certbot_dns_digitalocean.egg-info/PKG-INFO 2021-06-01 19:50:11.000000000 +0200 +++ new/certbot-dns-digitalocean-1.17.0/certbot_dns_digitalocean.egg-info/PKG-INFO 2021-07-06 17:41:36.000000000 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 2.1 Name: certbot-dns-digitalocean -Version: 1.16.0 +Version: 1.17.0 Summary: DigitalOcean DNS Authenticator plugin for Certbot Home-page: https://github.com/certbot/certbot Author: Certbot Project diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-dns-digitalocean-1.16.0/certbot_dns_digitalocean.egg-info/requires.txt new/certbot-dns-digitalocean-1.17.0/certbot_dns_digitalocean.egg-info/requires.txt --- old/certbot-dns-digitalocean-1.16.0/certbot_dns_digitalocean.egg-info/requires.txt 2021-06-01 19:50:11.000000000 +0200 +++ new/certbot-dns-digitalocean-1.17.0/certbot_dns_digitalocean.egg-info/requires.txt 2021-07-06 17:41:36.000000000 +0200 @@ -1,8 +1,8 @@ python-digitalocean>=1.11 setuptools>=39.0.1 zope.interface -acme>=0.29.0 -certbot>=1.1.0 +acme>=1.17.0 +certbot>=1.17.0 [docs] Sphinx>=1.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-dns-digitalocean-1.16.0/setup.py new/certbot-dns-digitalocean-1.17.0/setup.py --- old/certbot-dns-digitalocean-1.16.0/setup.py 2021-06-01 19:49:18.000000000 +0200 +++ new/certbot-dns-digitalocean-1.17.0/setup.py 2021-07-06 17:41:17.000000000 +0200 @@ -4,10 +4,8 @@ from setuptools import find_packages from setuptools import setup -version = '1.16.0' +version = '1.17.0' -# Remember to update local-oldest-requirements.txt when changing the minimum -# acme/certbot version. install_requires = [ 'python-digitalocean>=1.11', # 1.15.0 or newer is recommended for TTL support 'setuptools>=39.0.1', @@ -16,8 +14,11 @@ if not os.environ.get('SNAP_BUILD'): install_requires.extend([ - 'acme>=0.29.0', - 'certbot>=1.1.0', + # We specify the minimum acme and certbot version as the current plugin + # version for simplicity. See + # https://github.com/certbot/certbot/issues/8761 for more info. + f'acme>={version}', + f'certbot>={version}', ]) elif 'bdist_wheel' in sys.argv[1:]: raise RuntimeError('Unset SNAP_BUILD when building wheels '

1 0

commit python-certbot-dns-cloudxns for openSUSE:Factory
by Source-Sync 30 Jul '21

30 Jul '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-certbot-dns-cloudxns for openSUSE:Factory checked in at 2021-07-30 23:22:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-certbot-dns-cloudxns (Old) and /work/SRC/openSUSE:Factory/.python-certbot-dns-cloudxns.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python-certbot-dns-cloudxns" Fri Jul 30 23:22:09 2021 rev:30 rq:909352 version:1.17.0 Changes: -------- --- /work/SRC/openSUSE:Factory/python-certbot-dns-cloudxns/python-certbot-dns-cloudxns.changes 2021-07-26 17:38:38.926054293 +0200 +++ /work/SRC/openSUSE:Factory/.python-certbot-dns-cloudxns.new.1899/python-certbot-dns-cloudxns.changes 2021-07-30 23:22:33.667611067 +0200 @@ -1,0 +2,6 @@ +Fri Jul 30 08:44:32 UTC 2021 - Mark��ta Machov�� <mmachova(a)suse.com> + +- update to version 1.17.0 + * sync with the main certbot package + +------------------------------------------------------------------- Old: ---- certbot-dns-cloudxns-1.16.0.tar.gz New: ---- certbot-dns-cloudxns-1.17.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-certbot-dns-cloudxns.spec ++++++ --- /var/tmp/diff_new_pack.IkkP04/_old 2021-07-30 23:22:34.131610557 +0200 +++ /var/tmp/diff_new_pack.IkkP04/_new 2021-07-30 23:22:34.131610557 +0200 @@ -20,7 +20,7 @@ %define skip_python2 1 %define skip_python36 1 Name: python-certbot-dns-cloudxns -Version: 1.16.0 +Version: 1.17.0 Release: 0 Summary: CloudXNS Authenticator plugin for Certbot License: Apache-2.0 ++++++ certbot-dns-cloudxns-1.16.0.tar.gz -> certbot-dns-cloudxns-1.17.0.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-dns-cloudxns-1.16.0/PKG-INFO new/certbot-dns-cloudxns-1.17.0/PKG-INFO --- old/certbot-dns-cloudxns-1.16.0/PKG-INFO 2021-06-01 19:50:02.610950200 +0200 +++ new/certbot-dns-cloudxns-1.17.0/PKG-INFO 2021-07-06 17:41:34.229039700 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 2.1 Name: certbot-dns-cloudxns -Version: 1.16.0 +Version: 1.17.0 Summary: CloudXNS DNS Authenticator plugin for Certbot Home-page: https://github.com/certbot/certbot Author: Certbot Project diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-dns-cloudxns-1.16.0/certbot_dns_cloudxns.egg-info/PKG-INFO new/certbot-dns-cloudxns-1.17.0/certbot_dns_cloudxns.egg-info/PKG-INFO --- old/certbot-dns-cloudxns-1.16.0/certbot_dns_cloudxns.egg-info/PKG-INFO 2021-06-01 19:50:02.000000000 +0200 +++ new/certbot-dns-cloudxns-1.17.0/certbot_dns_cloudxns.egg-info/PKG-INFO 2021-07-06 17:41:34.000000000 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 2.1 Name: certbot-dns-cloudxns -Version: 1.16.0 +Version: 1.17.0 Summary: CloudXNS DNS Authenticator plugin for Certbot Home-page: https://github.com/certbot/certbot Author: Certbot Project diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-dns-cloudxns-1.16.0/certbot_dns_cloudxns.egg-info/requires.txt new/certbot-dns-cloudxns-1.17.0/certbot_dns_cloudxns.egg-info/requires.txt --- old/certbot-dns-cloudxns-1.16.0/certbot_dns_cloudxns.egg-info/requires.txt 2021-06-01 19:50:02.000000000 +0200 +++ new/certbot-dns-cloudxns-1.17.0/certbot_dns_cloudxns.egg-info/requires.txt 2021-07-06 17:41:34.000000000 +0200 @@ -1,8 +1,8 @@ dns-lexicon>=3.1.0 setuptools>=39.0.1 zope.interface -acme>=0.31.0 -certbot>=1.1.0 +acme>=1.17.0 +certbot>=1.17.0 [docs] Sphinx>=1.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-dns-cloudxns-1.16.0/setup.py new/certbot-dns-cloudxns-1.17.0/setup.py --- old/certbot-dns-cloudxns-1.16.0/setup.py 2021-06-01 19:49:18.000000000 +0200 +++ new/certbot-dns-cloudxns-1.17.0/setup.py 2021-07-06 17:41:17.000000000 +0200 @@ -4,10 +4,8 @@ from setuptools import find_packages from setuptools import setup -version = '1.16.0' +version = '1.17.0' -# Remember to update local-oldest-requirements.txt when changing the minimum -# acme/certbot version. install_requires = [ 'dns-lexicon>=3.1.0', # Changed `rtype` parameter name 'setuptools>=39.0.1', @@ -16,8 +14,11 @@ if not os.environ.get('SNAP_BUILD'): install_requires.extend([ - 'acme>=0.31.0', - 'certbot>=1.1.0', + # We specify the minimum acme and certbot version as the current plugin + # version for simplicity. See + # https://github.com/certbot/certbot/issues/8761 for more info. + f'acme>={version}', + f'certbot>={version}', ]) elif 'bdist_wheel' in sys.argv[1:]: raise RuntimeError('Unset SNAP_BUILD when building wheels '

1 0

commit gnome-autoar for openSUSE:Factory
by Source-Sync 30 Jul '21

30 Jul '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gnome-autoar for openSUSE:Factory checked in at 2021-07-30 23:22:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gnome-autoar (Old) and /work/SRC/openSUSE:Factory/.gnome-autoar.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "gnome-autoar" Fri Jul 30 23:22:09 2021 rev:10 rq:909316 version:0.3.3 Changes: -------- --- /work/SRC/openSUSE:Factory/gnome-autoar/gnome-autoar.changes 2021-06-09 21:51:46.190417820 +0200 +++ /work/SRC/openSUSE:Factory/.gnome-autoar.new.1899/gnome-autoar.changes 2021-07-30 23:22:34.323610347 +0200 @@ -32,0 +33,9 @@ +- Drop gnome-autoar-CVE-2020-36241.patch: fixed upstream. + +------------------------------------------------------------------- +Mon Feb 11 06:43:29 UTC 2021 - Alynx Zhou <alynx.zhou(a)suse.com> + +- Add gnome-autoar-CVE-2020-36241.patch: Skip problematic files + that might be extracted outside of the destination dir to prevent + potential security threat. (bsc#1181930, + glgo#GNOME/gnome-autoar#7) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------

1 0

commit glib2 for openSUSE:Factory
by Source-Sync 30 Jul '21

30 Jul '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package glib2 for openSUSE:Factory checked in at 2021-07-30 23:22:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/glib2 (Old) and /work/SRC/openSUSE:Factory/.glib2.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "glib2" Fri Jul 30 23:22:08 2021 rev:240 rq:909315 version:2.68.3 Changes: -------- --- /work/SRC/openSUSE:Factory/glib2/glib2.changes 2021-07-21 19:06:54.819347122 +0200 +++ /work/SRC/openSUSE:Factory/.glib2.new.1899/glib2.changes 2021-07-30 23:22:32.783612038 +0200 @@ -160,0 +161,2 @@ +- Drop glib2-fix-6-days-until-the-end-of-the-month.patch: fixed + upstream. @@ -175,0 +178,2 @@ +- Drop glib2-CVE-2021-27218.patch: fixed upstream. +- Drop glib2-CVE-2021-27219-add-g_memdup2.patch: fixed upstream. @@ -184,0 +189,17 @@ +Wed Feb 10 01:17:16 UTC 2021 - Alynx Zhou <alynx.zhou(a)suse.com> + +- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a + guint as parameter and sometimes leads into an integer overflow, + so add a g_memdup2 function which uses gsize to replace it. + (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933, + glgo#GNOME/glib!1943) + +------------------------------------------------------------------- +Thu Feb 10 00:49:58 UTC 2021 - Alynx Zhou <alynx.zhou(a)suse.com> + +- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a + gsize as length but stores in a guint, this patch will refuse if + the length is larger than guint. (bsc#1182328, + glgo#GNOME/glib!1944) + +------------------------------------------------------------------- @@ -337,0 +359,2 @@ +- Drop glib2-add-support-for-slim-timezone-format.patch: fixed + upstream. @@ -347,0 +371,10 @@ + +------------------------------------------------------------------- +Fri Oct 4 07:12:20 UTC 2020 - Alynx Zhou <alynx.zhou(a)suse.com> + +- Add patches to support for slim format of timezone (bsc#1178346): + + glib2-add-support-for-slim-timezone-format.patch: basic support + for slim format (glgo#GNOME/glib!1533). + + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST + incorrect end day when using slim format + (glgo#GNOME/glib!1683). ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------

1 0

commit python-certbot-dns-cloudflare for openSUSE:Factory
by Source-Sync 30 Jul '21

30 Jul '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-certbot-dns-cloudflare for openSUSE:Factory checked in at 2021-07-30 23:22:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-certbot-dns-cloudflare (Old) and /work/SRC/openSUSE:Factory/.python-certbot-dns-cloudflare.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python-certbot-dns-cloudflare" Fri Jul 30 23:22:08 2021 rev:28 rq:909351 version:1.17.0 Changes: -------- --- /work/SRC/openSUSE:Factory/python-certbot-dns-cloudflare/python-certbot-dns-cloudflare.changes 2021-06-24 18:23:06.056951277 +0200 +++ /work/SRC/openSUSE:Factory/.python-certbot-dns-cloudflare.new.1899/python-certbot-dns-cloudflare.changes 2021-07-30 23:22:32.127612758 +0200 @@ -1,0 +2,6 @@ +Fri Jul 30 08:44:20 UTC 2021 - Mark��ta Machov�� <mmachova(a)suse.com> + +- update to version 1.17.0 + * sync with the main certbot package + +------------------------------------------------------------------- Old: ---- certbot-dns-cloudflare-1.16.0.tar.gz New: ---- certbot-dns-cloudflare-1.17.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-certbot-dns-cloudflare.spec ++++++ --- /var/tmp/diff_new_pack.7DqioI/_old 2021-07-30 23:22:32.535612310 +0200 +++ /var/tmp/diff_new_pack.7DqioI/_new 2021-07-30 23:22:32.539612306 +0200 @@ -19,7 +19,7 @@ %{?!python_module:%define python_module() python-%{**} python3-%{**}} %define skip_python2 1 Name: python-certbot-dns-cloudflare -Version: 1.16.0 +Version: 1.17.0 Release: 0 Summary: Cloudflare Authenticator plugin for Certbot License: Apache-2.0 ++++++ certbot-dns-cloudflare-1.16.0.tar.gz -> certbot-dns-cloudflare-1.17.0.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-dns-cloudflare-1.16.0/PKG-INFO new/certbot-dns-cloudflare-1.17.0/PKG-INFO --- old/certbot-dns-cloudflare-1.16.0/PKG-INFO 2021-06-01 19:49:54.050317000 +0200 +++ new/certbot-dns-cloudflare-1.17.0/PKG-INFO 2021-07-06 17:41:31.612998000 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 2.1 Name: certbot-dns-cloudflare -Version: 1.16.0 +Version: 1.17.0 Summary: Cloudflare DNS Authenticator plugin for Certbot Home-page: https://github.com/certbot/certbot Author: Certbot Project diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-dns-cloudflare-1.16.0/certbot_dns_cloudflare.egg-info/PKG-INFO new/certbot-dns-cloudflare-1.17.0/certbot_dns_cloudflare.egg-info/PKG-INFO --- old/certbot-dns-cloudflare-1.16.0/certbot_dns_cloudflare.egg-info/PKG-INFO 2021-06-01 19:49:54.000000000 +0200 +++ new/certbot-dns-cloudflare-1.17.0/certbot_dns_cloudflare.egg-info/PKG-INFO 2021-07-06 17:41:31.000000000 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 2.1 Name: certbot-dns-cloudflare -Version: 1.16.0 +Version: 1.17.0 Summary: Cloudflare DNS Authenticator plugin for Certbot Home-page: https://github.com/certbot/certbot Author: Certbot Project diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-dns-cloudflare-1.16.0/certbot_dns_cloudflare.egg-info/requires.txt new/certbot-dns-cloudflare-1.17.0/certbot_dns_cloudflare.egg-info/requires.txt --- old/certbot-dns-cloudflare-1.16.0/certbot_dns_cloudflare.egg-info/requires.txt 2021-06-01 19:49:54.000000000 +0200 +++ new/certbot-dns-cloudflare-1.17.0/certbot_dns_cloudflare.egg-info/requires.txt 2021-07-06 17:41:31.000000000 +0200 @@ -1,8 +1,8 @@ cloudflare>=1.5.1 setuptools>=39.0.1 zope.interface -acme>=0.29.0 -certbot>=1.1.0 +acme>=1.17.0 +certbot>=1.17.0 [docs] Sphinx>=1.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-dns-cloudflare-1.16.0/setup.py new/certbot-dns-cloudflare-1.17.0/setup.py --- old/certbot-dns-cloudflare-1.16.0/setup.py 2021-06-01 19:49:18.000000000 +0200 +++ new/certbot-dns-cloudflare-1.17.0/setup.py 2021-07-06 17:41:17.000000000 +0200 @@ -4,10 +4,8 @@ from setuptools import find_packages from setuptools import setup -version = '1.16.0' +version = '1.17.0' -# Remember to update local-oldest-requirements.txt when changing the minimum -# acme/certbot version. install_requires = [ 'cloudflare>=1.5.1', 'setuptools>=39.0.1', @@ -16,8 +14,11 @@ if not os.environ.get('SNAP_BUILD'): install_requires.extend([ - 'acme>=0.29.0', - 'certbot>=1.1.0', + # We specify the minimum acme and certbot version as the current plugin + # version for simplicity. See + # https://github.com/certbot/certbot/issues/8761 for more info. + f'acme>={version}', + f'certbot>={version}', ]) elif 'bdist_wheel' in sys.argv[1:]: raise RuntimeError('Unset SNAP_BUILD when building wheels '

1 0

commit python-certbot-apache for openSUSE:Factory
by Source-Sync 30 Jul '21

30 Jul '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-certbot-apache for openSUSE:Factory checked in at 2021-07-30 23:22:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-certbot-apache (Old) and /work/SRC/openSUSE:Factory/.python-certbot-apache.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python-certbot-apache" Fri Jul 30 23:22:07 2021 rev:29 rq:909350 version:1.17.0 Changes: -------- --- /work/SRC/openSUSE:Factory/python-certbot-apache/python-certbot-apache.changes 2021-06-24 18:23:05.316950456 +0200 +++ /work/SRC/openSUSE:Factory/.python-certbot-apache.new.1899/python-certbot-apache.changes 2021-07-30 23:22:31.359613601 +0200 @@ -1,0 +2,9 @@ +Fri Jul 30 08:43:59 UTC 2021 - Mark��ta Machov�� <mmachova(a)suse.com> + +- update to version 1.17.0 + * Add Void Linux overrides for certbot-apache. + * The Apache authenticator now always configures virtual hosts which do not have + an explicit ServerName. This should make it work more reliably with the + default Apache configuration in Debian-based environments. + +------------------------------------------------------------------- Old: ---- certbot-apache-1.16.0.tar.gz New: ---- certbot-apache-1.17.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-certbot-apache.spec ++++++ --- /var/tmp/diff_new_pack.bmlCDF/_old 2021-07-30 23:22:31.863613048 +0200 +++ /var/tmp/diff_new_pack.bmlCDF/_new 2021-07-30 23:22:31.863613048 +0200 @@ -19,7 +19,7 @@ %{?!python_module:%define python_module() python-%{**} python3-%{**}} %define skip_python2 1 Name: python-certbot-apache -Version: 1.16.0 +Version: 1.17.0 Release: 0 Summary: Apache plugin for Certbot License: Apache-2.0 ++++++ certbot-apache-1.16.0.tar.gz -> certbot-apache-1.17.0.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-apache-1.16.0/PKG-INFO new/certbot-apache-1.17.0/PKG-INFO --- old/certbot-apache-1.16.0/PKG-INFO 2021-06-01 19:49:36.872988500 +0200 +++ new/certbot-apache-1.17.0/PKG-INFO 2021-07-06 17:41:26.245873200 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 2.1 Name: certbot-apache -Version: 1.16.0 +Version: 1.17.0 Summary: Apache plugin for Certbot Home-page: https://github.com/letsencrypt/letsencrypt Author: Certbot Project diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-apache-1.16.0/certbot_apache/_internal/entrypoint.py new/certbot-apache-1.17.0/certbot_apache/_internal/entrypoint.py --- old/certbot-apache-1.16.0/certbot_apache/_internal/entrypoint.py 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-apache-1.17.0/certbot_apache/_internal/entrypoint.py 2021-07-06 17:41:15.000000000 +0200 @@ -10,6 +10,7 @@ from certbot_apache._internal import override_fedora from certbot_apache._internal import override_gentoo from certbot_apache._internal import override_suse +from certbot_apache._internal import override_void OVERRIDE_CLASSES = { "arch": override_arch.ArchConfigurator, @@ -35,6 +36,7 @@ "sles": override_suse.OpenSUSEConfigurator, "scientific": override_centos.CentOSConfigurator, "scientific linux": override_centos.CentOSConfigurator, + "void": override_void.VoidConfigurator, } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-apache-1.16.0/certbot_apache/_internal/http_01.py new/certbot-apache-1.17.0/certbot_apache/_internal/http_01.py --- old/certbot-apache-1.16.0/certbot_apache/_internal/http_01.py 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-apache-1.17.0/certbot_apache/_internal/http_01.py 2021-07-06 17:41:15.000000000 +0200 @@ -95,10 +95,10 @@ def _mod_config(self): selected_vhosts: List[VirtualHost] = [] http_port = str(self.configurator.config.http01_port) + + # Search for VirtualHosts matching by name for chall in self.achalls: - # Search for matching VirtualHosts - for vh in self._matching_vhosts(chall.domain): - selected_vhosts.append(vh) + selected_vhosts += self._matching_vhosts(chall.domain) # Ensure that we have one or more VirtualHosts that we can continue # with. (one that listens to port configured with --http-01-port) @@ -107,9 +107,13 @@ if any(a.is_wildcard() or a.get_port() == http_port for a in vhost.addrs): found = True - if not found: - for vh in self._relevant_vhosts(): - selected_vhosts.append(vh) + # If there's at least one elgible VirtualHost, also add all unnamed VirtualHosts + # because they might match at runtime (#8890) + if found: + selected_vhosts += self._unnamed_vhosts() + # Otherwise, add every Virtualhost which listens on the right port + else: + selected_vhosts += self._relevant_vhosts() # Add the challenge configuration for vh in selected_vhosts: @@ -167,6 +171,10 @@ return relevant_vhosts + def _unnamed_vhosts(self) -> List[VirtualHost]: + """Return all VirtualHost objects with no ServerName""" + return [vh for vh in self.configurator.vhosts if vh.name is None] + def _set_up_challenges(self): if not os.path.isdir(self.challenge_dir): old_umask = filesystem.umask(0o022) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-apache-1.16.0/certbot_apache/_internal/override_void.py new/certbot-apache-1.17.0/certbot_apache/_internal/override_void.py --- old/certbot-apache-1.16.0/certbot_apache/_internal/override_void.py 1970-01-01 01:00:00.000000000 +0100 +++ new/certbot-apache-1.17.0/certbot_apache/_internal/override_void.py 2021-07-06 17:41:15.000000000 +0200 @@ -0,0 +1,23 @@ +""" Distribution specific override class for Void Linux """ +import zope.interface + +from certbot import interfaces +from certbot_apache._internal import configurator +from certbot_apache._internal.configurator import OsOptions + + +(a)zope.interface.provider(interfaces.IPluginFactory) +class VoidConfigurator(configurator.ApacheConfigurator): + """Void Linux specific ApacheConfigurator override class""" + + OS_DEFAULTS = OsOptions( + server_root="/etc/apache", + vhost_root="/etc/apache/extra", + vhost_files="*.conf", + logs_root="/var/log/httpd", + ctl="apachectl", + version_cmd=['apachectl', '-v'], + restart_cmd=['apachectl', 'graceful'], + conftest_cmd=['apachectl', 'configtest'], + challenge_location="/etc/apache/extra", + ) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-apache-1.16.0/certbot_apache.egg-info/PKG-INFO new/certbot-apache-1.17.0/certbot_apache.egg-info/PKG-INFO --- old/certbot-apache-1.16.0/certbot_apache.egg-info/PKG-INFO 2021-06-01 19:49:36.000000000 +0200 +++ new/certbot-apache-1.17.0/certbot_apache.egg-info/PKG-INFO 2021-07-06 17:41:26.000000000 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 2.1 Name: certbot-apache -Version: 1.16.0 +Version: 1.17.0 Summary: Apache plugin for Certbot Home-page: https://github.com/letsencrypt/letsencrypt Author: Certbot Project diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-apache-1.16.0/certbot_apache.egg-info/SOURCES.txt new/certbot-apache-1.17.0/certbot_apache.egg-info/SOURCES.txt --- old/certbot-apache-1.16.0/certbot_apache.egg-info/SOURCES.txt 2021-06-01 19:49:36.000000000 +0200 +++ new/certbot-apache-1.17.0/certbot_apache.egg-info/SOURCES.txt 2021-07-06 17:41:26.000000000 +0200 @@ -30,6 +30,7 @@ certbot_apache/_internal/override_fedora.py certbot_apache/_internal/override_gentoo.py certbot_apache/_internal/override_suse.py +certbot_apache/_internal/override_void.py certbot_apache/_internal/parser.py certbot_apache/_internal/parsernode_util.py certbot_apache/_internal/augeas_lens/httpd.aug diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-apache-1.16.0/certbot_apache.egg-info/requires.txt new/certbot-apache-1.17.0/certbot_apache.egg-info/requires.txt --- old/certbot-apache-1.16.0/certbot_apache.egg-info/requires.txt 2021-06-01 19:49:36.000000000 +0200 +++ new/certbot-apache-1.17.0/certbot_apache.egg-info/requires.txt 2021-07-06 17:41:26.000000000 +0200 @@ -1,5 +1,5 @@ -acme>=1.8.0 -certbot>=1.10.1 +acme>=1.17.0 +certbot>=1.17.0 python-augeas setuptools>=39.0.1 zope.component diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-apache-1.16.0/setup.py new/certbot-apache-1.17.0/setup.py --- old/certbot-apache-1.16.0/setup.py 2021-06-01 19:49:18.000000000 +0200 +++ new/certbot-apache-1.17.0/setup.py 2021-07-06 17:41:17.000000000 +0200 @@ -1,13 +1,14 @@ from setuptools import find_packages from setuptools import setup -version = '1.16.0' +version = '1.17.0' -# Remember to update local-oldest-requirements.txt when changing the minimum -# acme/certbot version. install_requires = [ - 'acme>=1.8.0', - 'certbot>=1.10.1', + # We specify the minimum acme and certbot version as the current plugin + # version for simplicity. See + # https://github.com/certbot/certbot/issues/8761 for more info. + f'acme>={version}', + f'certbot>={version}', 'python-augeas', 'setuptools>=39.0.1', 'zope.component', diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-apache-1.16.0/tests/http_01_test.py new/certbot-apache-1.17.0/tests/http_01_test.py --- old/certbot-apache-1.16.0/tests/http_01_test.py 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-apache-1.17.0/tests/http_01_test.py 2021-07-06 17:41:15.000000000 +0200 @@ -125,6 +125,18 @@ domain="duplicate.example.com", account_key=self.account_key)] self.common_perform_test(achalls, vhosts) + def test_configure_name_and_blank(self): + domain = "certbot.demo" + vhosts = [v for v in self.config.vhosts if v.name == domain or v.name is None] + achalls = [ + achallenges.KeyAuthorizationAnnotatedChallenge( + challb=acme_util.chall_to_challb( + challenges.HTTP01(token=((b'a' * 16))), + "pending"), + domain=domain, account_key=self.account_key), + ] + self.common_perform_test(achalls, vhosts) + def test_no_vhost(self): for achall in self.achalls: self.http.add_chall(achall)

1 0

commit python-certbot for openSUSE:Factory
by Source-Sync 30 Jul '21

30 Jul '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-certbot for openSUSE:Factory checked in at 2021-07-30 23:22:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-certbot (Old) and /work/SRC/openSUSE:Factory/.python-certbot.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python-certbot" Fri Jul 30 23:22:06 2021 rev:36 rq:909349 version:1.17.0 Changes: -------- --- /work/SRC/openSUSE:Factory/python-certbot/python-certbot.changes 2021-06-24 18:23:04.580949639 +0200 +++ /work/SRC/openSUSE:Factory/.python-certbot.new.1899/python-certbot.changes 2021-07-30 23:22:30.563614476 +0200 @@ -1,0 +2,11 @@ +Fri Jul 30 08:40:46 UTC 2021 - Mark��ta Machov�� <mmachova(a)suse.com> + +- update to version 1.17.0 + * We changed how dependencies are specified between Certbot packages. For this + and future releases, higher level Certbot components will require that lower + level components are the same version or newer. More specifically, version X + of the Certbot package will now always require acme>=X and version Y of a + plugin package will always require acme>=Y and certbot=>Y. Specifying + dependencies in this way simplifies testing and development. + +------------------------------------------------------------------- Old: ---- certbot-1.16.0.tar.gz certbot-1.16.0.tar.gz.asc New: ---- certbot-1.17.0.tar.gz certbot-1.17.0.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-certbot.spec ++++++ --- /var/tmp/diff_new_pack.JL4njM/_old 2021-07-30 23:22:31.095613891 +0200 +++ /var/tmp/diff_new_pack.JL4njM/_new 2021-07-30 23:22:31.095613891 +0200 @@ -19,7 +19,7 @@ %{?!python_module:%define python_module() python-%{**} python3-%{**}} %define skip_python2 1 Name: python-certbot -Version: 1.16.0 +Version: 1.17.0 Release: 0 Summary: ACME client License: Apache-2.0 @@ -27,7 +27,7 @@ Source0: https://files.pythonhosted.org/packages/source/c/certbot/certbot-%{version}… Source1: https://files.pythonhosted.org/packages/source/c/certbot/certbot-%{version}… Source2: %{name}.keyring -BuildRequires: %{python_module acme >= 1.8.0} +BuildRequires: %{python_module acme >= %{version}} BuildRequires: %{python_module configargparse >= 0.9.3} BuildRequires: %{python_module configobj >= 5.0.6} BuildRequires: %{python_module cryptography >= 2.1.4} @@ -42,7 +42,7 @@ BuildRequires: %{python_module zope.interface} BuildRequires: fdupes BuildRequires: python-rpm-macros -Requires: python-acme >= 1.8.0 +Requires: python-acme >= %{version} Requires: python-configargparse >= 0.9.3 Requires: python-configobj Requires: python-cryptography >= 2.1.4 ++++++ certbot-1.16.0.tar.gz -> certbot-1.17.0.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/CHANGELOG.md new/certbot-1.17.0/CHANGELOG.md --- old/certbot-1.16.0/CHANGELOG.md 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-1.17.0/CHANGELOG.md 2021-07-06 17:41:16.000000000 +0200 @@ -2,6 +2,33 @@ Certbot adheres to [Semantic Versioning](https://semver.org/). +## 1.17.0 - 2021-07-06 + +### Added + +* Add Void Linux overrides for certbot-apache. + +### Changed + +* We changed how dependencies are specified between Certbot packages. For this + and future releases, higher level Certbot components will require that lower + level components are the same version or newer. More specifically, version X + of the Certbot package will now always require acme>=X and version Y of a + plugin package will always require acme>=Y and certbot=>Y. Specifying + dependencies in this way simplifies testing and development. +* The Apache authenticator now always configures virtual hosts which do not have + an explicit `ServerName`. This should make it work more reliably with the + default Apache configuration in Debian-based environments. + +### Fixed + +* When we increased the logging level on our nginx "Could not parse file" message, + it caused a previously-existing inability to parse empty files to become more + visible. We have now added the ability to correctly parse empty files, so that + message should only show for more significant errors. + +More details about these changes can be found on our GitHub repo. + ## 1.16.0 - 2021-06-01 ### Added diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/PKG-INFO new/certbot-1.17.0/PKG-INFO --- old/certbot-1.16.0/PKG-INFO 2021-06-01 19:49:18.495477000 +0200 +++ new/certbot-1.17.0/PKG-INFO 2021-07-06 17:41:18.405661800 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 2.1 Name: certbot -Version: 1.16.0 +Version: 1.17.0 Summary: ACME client Home-page: https://github.com/letsencrypt/letsencrypt Author: Certbot Project @@ -26,8 +26,10 @@ Classifier: Topic :: System :: Systems Administration Classifier: Topic :: Utilities Requires-Python: >=3.6 +Provides-Extra: all Provides-Extra: dev Provides-Extra: docs +Provides-Extra: test License-File: LICENSE.txt .. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/certbot/__init__.py new/certbot-1.17.0/certbot/__init__.py --- old/certbot-1.16.0/certbot/__init__.py 2021-06-01 19:49:18.000000000 +0200 +++ new/certbot-1.17.0/certbot/__init__.py 2021-07-06 17:41:17.000000000 +0200 @@ -1,3 +1,3 @@ """Certbot client.""" # version number like 1.2.3a0, must have at least 2 parts, like 1.2 -__version__ = '1.16.0' +__version__ = '1.17.0' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/certbot/_internal/cli/__init__.py new/certbot-1.17.0/certbot/_internal/cli/__init__.py --- old/certbot-1.16.0/certbot/_internal/cli/__init__.py 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-1.17.0/certbot/_internal/cli/__init__.py 2021-07-06 17:41:16.000000000 +0200 @@ -71,6 +71,11 @@ default=flag_default("verbose_count"), help="This flag can be used " "multiple times to incrementally increase the verbosity of output, " "e.g. -vvv.") + # This is for developers to set the level in the cli.ini, and overrides + # the --verbose flag + helpful.add( + None, "--verbose-level", dest="verbose_level", + default=flag_default("verbose_level"), help=argparse.SUPPRESS) helpful.add( None, "-t", "--text", dest="text_mode", action="store_true", default=flag_default("text_mode"), help=argparse.SUPPRESS) @@ -449,6 +454,7 @@ plugins = plugins_disco.PluginsRegistry.find_all() # reconstructed_args == sys.argv[1:], or whatever was passed to main() reconstructed_args = helpful_parser.args + [helpful_parser.verb] + detector = set_by_cli.detector = prepare_and_parse_args( # type: ignore plugins, reconstructed_args, detect_defaults=True) # propagate plugin requests: eg --standalone modifies config.authenticator diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/certbot/_internal/client.py new/certbot-1.17.0/certbot/_internal/client.py --- old/certbot-1.16.0/certbot/_internal/client.py 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-1.17.0/certbot/_internal/client.py 2021-07-06 17:41:16.000000000 +0200 @@ -2,7 +2,7 @@ import datetime import logging import platform -from typing import Optional +from typing import List, Optional, Union from cryptography.hazmat.backends import default_backend # See https://github.com/pyca/cryptography/issues/4275 @@ -598,7 +598,8 @@ with error_handler.ErrorHandler(self._rollback_and_restart, msg): self.installer.restart() - def apply_enhancement(self, domains, enhancement, options=None): + def apply_enhancement(self, domains: List[str], enhancement: str, + options: Optional[Union[List[str], str]] = None) -> None: """Applies an enhancement on all domains. :param list domains: list of ssl_vhosts (as strings) @@ -612,33 +613,28 @@ """ - msg = f"Could not set up {enhancement} enhancement" - with error_handler.ErrorHandler(self._recovery_routine_with_msg, msg): + enh_label = options if enhancement == "ensure-http-header" else enhancement + with error_handler.ErrorHandler(self._recovery_routine_with_msg, None): for dom in domains: try: self.installer.enhance(dom, enhancement, options) except errors.PluginEnhancementAlreadyPresent: - if enhancement == "ensure-http-header": - logger.info("Enhancement %s was already set.", - options) - else: - logger.info("Enhancement %s was already set.", - enhancement) + logger.info("Enhancement %s was already set.", enh_label) except errors.PluginError: - logger.error("Unable to set enhancement %s for %s", - enhancement, dom) + logger.error("Unable to set the %s enhancement for %s.", enh_label, dom) raise - self.installer.save("Add enhancement %s" % (enhancement)) + self.installer.save(f"Add enhancement {enh_label}") - def _recovery_routine_with_msg(self, success_msg): + def _recovery_routine_with_msg(self, success_msg: Optional[str]) -> None: """Calls the installer's recovery routine and prints success_msg :param str success_msg: message to show on successful recovery """ self.installer.recovery_routine() - display_util.notify(success_msg) + if success_msg: + display_util.notify(success_msg) def _rollback_and_restart(self, success_msg): """Rollback the most recent checkpoint and restart the webserver diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/certbot/_internal/constants.py new/certbot-1.17.0/certbot/_internal/constants.py --- old/certbot-1.16.0/certbot/_internal/constants.py 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-1.17.0/certbot/_internal/constants.py 2021-07-06 17:41:16.000000000 +0200 @@ -22,7 +22,8 @@ ], # Main parser - verbose_count=-int(logging.WARNING / 10), + verbose_count=0, + verbose_level=None, text_mode=False, max_log_backups=1000, preconfigured_renewal=False, @@ -142,6 +143,9 @@ QUIET_LOGGING_LEVEL = logging.ERROR """Logging level to use in quiet mode.""" +DEFAULT_LOGGING_LEVEL = logging.WARNING +"""Default logging level to use when not in quiet mode.""" + RENEWER_DEFAULTS = dict( renewer_enabled="yes", renew_before_expiry="30 days", diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/certbot/_internal/log.py new/certbot-1.17.0/certbot/_internal/log.py --- old/certbot-1.16.0/certbot/_internal/log.py 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-1.17.0/certbot/_internal/log.py 2021-07-06 17:41:16.000000000 +0200 @@ -120,8 +120,11 @@ if config.quiet: level = constants.QUIET_LOGGING_LEVEL + elif config.verbose_level is not None: + level = constants.DEFAULT_LOGGING_LEVEL - int(config.verbose_level) * 10 else: - level = -config.verbose_count * 10 + level = constants.DEFAULT_LOGGING_LEVEL - config.verbose_count * 10 + stderr_handler.setLevel(level) logger.debug('Root logging level set at %d', level) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/certbot/_internal/main.py new/certbot-1.17.0/certbot/_internal/main.py --- old/certbot-1.16.0/certbot/_internal/main.py 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-1.17.0/certbot/_internal/main.py 2021-07-06 17:41:16.000000000 +0200 @@ -202,7 +202,7 @@ "--duplicate option.{br}{br}" "For example:{br}{br}{1} --duplicate {2}".format( existing, - sys.argv[0], " ".join(sys.argv[1:]), + cli.cli_command, " ".join(sys.argv[1:]), br=os.linesep )) raise errors.Error(USER_CANCELLED) @@ -507,6 +507,13 @@ "Certificates created using --csr will not be renewed automatically by Certbot. " "You will need to renew the certificate before it expires, by running the same " "Certbot command again.") + elif _is_interactive_only_auth(config): + steps.append( + "This certificate will not be renewed automatically. Autorenewal of " + "--manual certificates requires the use of an authentication hook script " + "(--manual-auth-hook) but one was not provided. To renew this certificate, repeat " + f"this same {cli.cli_command} command before the certificate's expiry date." + ) elif not config.preconfigured_renewal: steps.append( "The certificate will need to be renewed before it expires. Certbot can " @@ -556,6 +563,11 @@ assert cert_path and fullchain_path, "No certificates saved to report." + renewal_msg = "" + if config.preconfigured_renewal and not _is_interactive_only_auth(config): + renewal_msg = ("\nCertbot has set up a scheduled task to automatically renew this " + "certificate in the background.") + display_util.notify( ("\nSuccessfully received certificate.\n" "Certificate is saved at: {cert_path}\n{key_msg}" @@ -564,13 +576,22 @@ cert_path=fullchain_path, expiry=crypto_util.notAfter(cert_path).date(), key_msg="Key is saved at: {}\n".format(key_path) if key_path else "", - renewal_msg="\nCertbot has set up a scheduled task to automatically renew this " - "certificate in the background." if config.preconfigured_renewal else "", + renewal_msg=renewal_msg, nl="\n" if config.verb == "run" else "" # Normalize spacing across verbs ) ) +def _is_interactive_only_auth(config: interfaces.IConfig) -> bool: + """ Whether the current authenticator params only support interactive renewal. + """ + # --manual without --manual-auth-hook can never autorenew + if config.authenticator == "manual" and config.manual_auth_hook is None: + return True + + return False + + def _csr_report_new_cert(config: interfaces.IConfig, cert_path: Optional[str], chain_path: Optional[str], fullchain_path: Optional[str]): """ --csr variant of _report_new_cert. @@ -1052,7 +1073,7 @@ if not enhancements.are_requested(config) and not oldstyle_enh: msg = ("Please specify one or more enhancement types to configure. To list " "the available enhancement types, run:\n\n%s --help enhance\n") - logger.error(msg, sys.argv[0]) + logger.error(msg, cli.cli_command) raise errors.MisconfigurationError("No enhancements requested, exiting.") try: @@ -1398,7 +1419,7 @@ if config.csr: cert_path, chain_path, fullchain_path = _csr_get_and_save_cert(config, le_client) _csr_report_new_cert(config, cert_path, chain_path, fullchain_path) - _report_next_steps(config, None, None) + _report_next_steps(config, None, None, new_or_renewed_cert=not config.dry_run) _suggest_donation_if_appropriate(config) eff.handle_subscription(config, le_client.account) return @@ -1417,7 +1438,8 @@ fullchain_path = lineage.fullchain_path if lineage else None key_path = lineage.key_path if lineage else None _report_new_cert(config, cert_path, fullchain_path, key_path) - _report_next_steps(config, None, lineage, new_or_renewed_cert=should_get_cert) + _report_next_steps(config, None, lineage, + new_or_renewed_cert=should_get_cert and not config.dry_run) _suggest_donation_if_appropriate(config) eff.handle_subscription(config, le_client.account) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/certbot/_internal/plugins/standalone.py new/certbot-1.17.0/certbot/_internal/plugins/standalone.py --- old/certbot-1.16.0/certbot/_internal/plugins/standalone.py 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-1.17.0/certbot/_internal/plugins/standalone.py 2021-07-06 17:41:16.000000000 +0200 @@ -5,6 +5,7 @@ import socket from typing import DefaultDict from typing import Dict +from typing import List from typing import Set from typing import Tuple from typing import TYPE_CHECKING @@ -184,6 +185,14 @@ if not self.served[servers]: self.servers.stop(port) + def auth_hint(self, failed_achalls: List[achallenges.AnnotatedChallenge]) -> str: + port, addr = self.config.http01_port, self.config.http01_address + neat_addr = f"{addr}:{port}" if addr else f"port {port}" + return ("The Certificate Authority failed to download the challenge files from " + f"the temporary standalone webserver started by Certbot on {neat_addr}. " + "Ensure that the listed domains point to this machine and that it can " + "accept inbound connections from the internet.") + def _handle_perform_error(error): if error.socket_error.errno == errno.EACCES: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/certbot/plugins/common.py new/certbot-1.17.0/certbot/plugins/common.py --- old/certbot-1.16.0/certbot/plugins/common.py 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-1.17.0/certbot/plugins/common.py 2021-07-06 17:41:16.000000000 +0200 @@ -119,7 +119,7 @@ # This is a fallback hint. Authenticators should implement their own auth_hint that # addresses the specific mechanics of that authenticator. challs = " and ".join(sorted({achall.typ for achall in failed_achalls})) - return ("The Certificate Authority couldn't exterally verify that the {name} plugin " + return ("The Certificate Authority couldn't externally verify that the {name} plugin " "completed the required {challs} challenges. Ensure the plugin is configured " "correctly and that the changes it makes are accessible from the internet." .format(name=self.name, challs=challs)) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/certbot.egg-info/PKG-INFO new/certbot-1.17.0/certbot.egg-info/PKG-INFO --- old/certbot-1.16.0/certbot.egg-info/PKG-INFO 2021-06-01 19:49:18.000000000 +0200 +++ new/certbot-1.17.0/certbot.egg-info/PKG-INFO 2021-07-06 17:41:18.000000000 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 2.1 Name: certbot -Version: 1.16.0 +Version: 1.17.0 Summary: ACME client Home-page: https://github.com/letsencrypt/letsencrypt Author: Certbot Project @@ -26,8 +26,10 @@ Classifier: Topic :: System :: Systems Administration Classifier: Topic :: Utilities Requires-Python: >=3.6 +Provides-Extra: all Provides-Extra: dev Provides-Extra: docs +Provides-Extra: test License-File: LICENSE.txt .. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/certbot.egg-info/requires.txt new/certbot-1.17.0/certbot.egg-info/requires.txt --- old/certbot-1.16.0/certbot.egg-info/requires.txt 2021-06-01 19:49:18.000000000 +0200 +++ new/certbot-1.17.0/certbot.egg-info/requires.txt 2021-07-06 17:41:18.000000000 +0200 @@ -1,4 +1,4 @@ -acme>=1.8.0 +acme>=1.17.0 ConfigArgParse>=0.9.3 configobj>=5.0.6 cryptography>=2.1.4 @@ -14,19 +14,32 @@ [:sys_platform == "win32"] pywin32>=300 -[dev] -astroid +[all] azure-devops -coverage ipdb -mypy PyGithub -poetry>=1.1.0 +pip +poetry>=1.2.0a1 +tox +twine +wheel +repoze.sphinx.autointerface +Sphinx>=1.2 +sphinx_rtd_theme +coverage +mypy pylint pytest pytest-cov pytest-xdist typing-extensions + +[dev] +azure-devops +ipdb +PyGithub +pip +poetry>=1.2.0a1 tox twine wheel @@ -35,3 +48,12 @@ repoze.sphinx.autointerface Sphinx>=1.2 sphinx_rtd_theme + +[test] +coverage +mypy +pylint +pytest +pytest-cov +pytest-xdist +typing-extensions diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/docs/cli-help.txt new/certbot-1.17.0/docs/cli-help.txt --- old/certbot-1.16.0/docs/cli-help.txt 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-1.17.0/docs/cli-help.txt 2021-07-06 17:41:16.000000000 +0200 @@ -41,7 +41,7 @@ and ~/.config/letsencrypt/cli.ini) -v, --verbose This flag can be used multiple times to incrementally increase the verbosity of output, e.g. -vvv. (default: - -2) + -3) --max-log-backups MAX_LOG_BACKUPS Specifies the maximum number of backup logs that should be kept by Certbot's built in log rotation. @@ -118,7 +118,7 @@ case, and to know when to deprecate support for past Python versions and flags. If you wish to hide this information from the Let's Encrypt server, set this to - "". (default: CertbotACMEClient/1.15.0 (certbot; + "". (default: CertbotACMEClient/1.16.0 (certbot; OS_NAME OS_VERSION) Authenticator/XXX Installer/YYY (SUBCOMMAND; flags: FLAGS) Py/major.minor.patchlevel). The flags encoded in the user agent are: --duplicate, diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/docs/using.rst new/certbot-1.17.0/docs/using.rst --- old/certbot-1.16.0/docs/using.rst 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-1.17.0/docs/using.rst 2021-07-06 17:41:16.000000000 +0200 @@ -57,10 +57,11 @@ | domain. Doing domain validation in this way is | the only way to obtain wildcard certificates from Let's | Encrypt. -manual_ Y N | Helps you obtain a certificate by giving you instructions to http-01_ (80) or - | perform domain validation yourself. Additionally allows you dns-01_ (53) - | to specify scripts to automate the validation task in a - | customized way. +manual_ Y N | Obtain a certificate by manually following instructions to http-01_ (80) or + | perform domain validation yourself. Certificates created this dns-01_ (53) + | way do not support autorenewal. + | Autorenewal may be enabled by providing an authentication + | hook script to automate the domain validation steps. =========== ==== ==== =============================================================== ============================= .. |dns_plugs| replace:: :ref:`DNS plugins <dns_plugins>` @@ -229,11 +230,21 @@ _acme-challenge.example.com. 300 IN TXT "gfj9Xq...Rg85nM" +.. _manual-renewal: -Additionally you can specify scripts to prepare for validation and -perform the authentication procedure and/or clean up after it by using -the ``--manual-auth-hook`` and ``--manual-cleanup-hook`` flags. This is -described in more depth in the hooks_ section. +**Renewal with the manual plugin** + +Certificates created using ``--manual`` **do not** support automatic renewal unless +combined with an `authentication hook script <#hooks>`_ via ``--manual-auth-hook`` +to automatically set up the required HTTP and/or TXT challenges. + +If you can use one of the other plugins_ which support autorenewal to create +your certificate, doing so is highly recommended. + +To manually renew a certificate using ``--manual`` without hooks, repeat the same +``certbot --manual`` command you used to create the certificate originally. As this +will require you to copy and paste new HTTP files or DNS TXT records, the command +cannot be automated with a cron job. .. _combination: @@ -286,6 +297,10 @@ dns-inwx_ Y Y DNS Authentication for INWX through the XML API dns-azure_ Y N DNS Authentication using Azure DNS dns-godaddy_ Y N DNS Authentication using Godaddy DNS +njalla_ Y N DNS Authentication for njalla +DuckDNS_ Y N DNS Authentication for DuckDNS +Porkbun_ Y N DNS Authentication for Porkbun +Infomaniak_ Y N DNS Authentication using Infomaniak Domains API ================== ==== ==== =============================================================== .. _haproxy: https://github.com/greenhost/certbot-haproxy @@ -302,6 +317,10 @@ .. _dns-inwx: https://github.com/oGGy990/certbot-dns-inwx/ .. _dns-azure: https://github.com/binkhq/certbot-dns-azure .. _dns-godaddy: https://github.com/miigotu/certbot-dns-godaddy +.. _njalla: https://github.com/chaptergy/certbot-dns-njalla +.. _DuckDNS: https://github.com/infinityofspace/certbot_dns_duckdns +.. _Porkbun: https://github.com/infinityofspace/certbot_dns_porkbun +.. _Infomaniak: https://github.com/Infomaniak/certbot-dns-infomaniak If you're interested, you can also :ref:`write your own plugin <dev-plugin>`. @@ -522,6 +541,10 @@ .. seealso:: Most Certbot installations come with automatic renewal out of the box. See `Automated Renewals`_ for more details. +.. seealso:: Users of the `Manual`_ plugin should note that ``--manual`` certificates + will not renew automatically, unless combined with authentication hook scripts. + See `Renewal with the manual plugin <#manual-renewal>`_. + As of version 0.10.0, Certbot supports a ``renew`` action to check all installed certificates for impending expiry and attempt to renew them. The simplest form is simply @@ -710,7 +733,7 @@ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ If you think you may need to set up automated renewal, follow these instructions to set up a -scheduled task to automatically renew your certificates in the background. If you are unsure +scheduled task to automatically renew your certificates in the background. If you are unsure whether your system has a pre-installed scheduled task for Certbot, it is safe to follow these instructions to create one. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/examples/dev-cli.ini new/certbot-1.17.0/examples/dev-cli.ini --- old/certbot-1.16.0/examples/dev-cli.ini 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-1.17.0/examples/dev-cli.ini 2021-07-06 17:41:16.000000000 +0200 @@ -13,8 +13,6 @@ text = True agree-tos = True debug = True -# Unfortunately, it's not possible to specify "verbose" multiple times -# (correspondingly to -vvvvvv) -verbose = True +verbose-level = 2 # -vv (debug) authenticator = standalone diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/setup.py new/certbot-1.17.0/setup.py --- old/certbot-1.16.0/setup.py 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-1.17.0/setup.py 2021-07-06 17:41:16.000000000 +0200 @@ -41,7 +41,10 @@ # here to avoid masking the more specific request requirements in acme. See # https://github.com/pypa/pip/issues/988 for more info. install_requires = [ - 'acme>=1.8.0', + # We specify the minimum acme version as the current Certbot version for + # simplicity. See https://github.com/certbot/certbot/issues/8761 for more + # info. + f'acme>={version}', # We technically need ConfigArgParse 0.10.0 for Python 2.6 support, but # saying so here causes a runtime error against our temporary fork of 0.9.3 # in which we added 2.6 support (see #2243), so we relax the requirement. @@ -64,22 +67,13 @@ ] dev_extras = [ - 'astroid', 'azure-devops', - 'coverage', 'ipdb', - 'mypy', 'PyGithub', - # 1.1.0+ is required for poetry to use the poetry-core library for the - # build system declared in tools/pinning/pyproject.toml. - 'poetry>=1.1.0', - 'pylint', - 'pytest', - 'pytest-cov', - 'pytest-xdist', - # typing-extensions is required to import typing.Protocol and make the mypy checks - # pass (along with pylint about non-existent objects) on Python 3.6 & 3.7 - 'typing-extensions', + 'pip', + # poetry 1.2.0+ is required for it to pin pip, setuptools, and wheel. See + # https://github.com/python-poetry/poetry/issues/1584. + 'poetry>=1.2.0a1', 'tox', 'twine', 'wheel', @@ -93,6 +87,21 @@ 'sphinx_rtd_theme', ] +test_extras = [ + 'coverage', + 'mypy', + 'pylint', + 'pytest', + 'pytest-cov', + 'pytest-xdist', + # typing-extensions is required to import typing.Protocol and make the mypy checks + # pass (along with pylint about non-existent objects) on Python 3.6 & 3.7 + 'typing-extensions', +] + + +all_extras = dev_extras + docs_extras + test_extras + setup( name='certbot', version=version, @@ -129,8 +138,10 @@ install_requires=install_requires, extras_require={ + 'all': all_extras, 'dev': dev_extras, 'docs': docs_extras, + 'test': test_extras, }, entry_points={ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/tests/client_test.py new/certbot-1.17.0/tests/client_test.py --- old/certbot-1.16.0/tests/client_test.py 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-1.17.0/tests/client_test.py 2021-07-06 17:41:16.000000000 +0200 @@ -712,7 +712,7 @@ if enhance_error: self.assertEqual(mock_logger.error.call_count, 1) - self.assertIn('Unable to set enhancement', mock_logger.error.call_args_list[0][0][0]) + self.assertEqual('Unable to set the %s enhancement for %s.', mock_logger.error.call_args_list[0][0][0]) if restart_error: mock_logger.critical.assert_called_with( 'Rolling back to previous server configuration...') diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/tests/log_test.py new/certbot-1.17.0/tests/log_test.py --- old/certbot-1.16.0/tests/log_test.py 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-1.17.0/tests/log_test.py 2021-07-06 17:41:16.000000000 +0200 @@ -122,7 +122,7 @@ if self.config.quiet: self.assertEqual(level, constants.QUIET_LOGGING_LEVEL) else: - self.assertEqual(level, -self.config.verbose_count * 10) + self.assertEqual(level, constants.DEFAULT_LOGGING_LEVEL) def test_debug(self): self.config.debug = True diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/tests/main_test.py new/certbot-1.17.0/tests/main_test.py --- old/certbot-1.16.0/tests/main_test.py 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-1.17.0/tests/main_test.py 2021-07-06 17:41:16.000000000 +0200 @@ -271,6 +271,21 @@ self._call(('certonly --webroot --cert-name example.com').split()) self.assertIs(mock_choose_names.called, True) + @mock.patch('certbot._internal.main._report_next_steps') + @mock.patch('certbot._internal.main._get_and_save_cert') + @mock.patch('certbot._internal.main._csr_get_and_save_cert') + @mock.patch('certbot._internal.cert_manager.lineage_for_certname') + def test_dryrun_next_steps_no_cert_saved(self, mock_lineage, mock_csr_get_cert, + unused_mock_get_cert, mock_report_next_steps): + """certonly --dry-run shouldn't report creation of a certificate in NEXT STEPS.""" + mock_lineage.return_value = None + mock_csr_get_cert.return_value = ("/cert", "/chain", "/fullchain") + for flag in (f"--csr {CSR}", "-d example.com"): + self._call(f"certonly {flag} --webroot --cert-name example.com --dry-run".split()) + mock_report_next_steps.assert_called_once_with( + mock.ANY, mock.ANY, mock.ANY, new_or_renewed_cert=False) + mock_report_next_steps.reset_mock() + class FindDomainsOrCertnameTest(unittest.TestCase): """Tests for certbot._internal.main._find_domains_or_certname.""" @@ -1886,6 +1901,71 @@ 'This certificate expires on 1970-01-01.' ) + def test_manual_no_hooks_report(self): + """Shouldn't get a message about autorenewal if no --manual-auth-hook""" + self._call(mock.Mock(dry_run=False, authenticator='manual', manual_auth_hook=None), + '/path/to/cert.pem', '/path/to/fullchain.pem', + '/path/to/privkey.pem') + + self.mock_notify.assert_called_with( + '\nSuccessfully received certificate.\n' + 'Certificate is saved at: /path/to/fullchain.pem\n' + 'Key is saved at: /path/to/privkey.pem\n' + 'This certificate expires on 1970-01-01.\n' + 'These files will be updated when the certificate renews.' + ) + + +class ReportNextStepsTest(unittest.TestCase): + """Tests for certbot._internal.main._report_next_steps""" + + def setUp(self): + self.config = mock.MagicMock( + cert_name="example.com", preconfigured_renewal=True, + csr=None, authenticator="nginx", manual_auth_hook=None) + notify_patch = mock.patch('certbot._internal.main.display_util.notify') + self.mock_notify = notify_patch.start() + self.addCleanup(notify_patch.stop) + self.old_stdout = sys.stdout + sys.stdout = io.StringIO() + + def tearDown(self): + sys.stdout = self.old_stdout + + @classmethod + def _call(cls, *args, **kwargs): + from certbot._internal.main import _report_next_steps + _report_next_steps(*args, **kwargs) + + def _output(self) -> str: + self.mock_notify.assert_called_once() + return self.mock_notify.call_args_list[0][0][0] + + def test_report(self): + """No steps for a normal renewal""" + self.config.authenticator = "manual" + self.config.manual_auth_hook = "/bin/true" + self._call(self.config, None, None) + self.mock_notify.assert_not_called() + + def test_csr_report(self): + """--csr requires manual renewal""" + self.config.csr = "foo.csr" + self._call(self.config, None, None) + self.assertIn("--csr will not be renewed", self._output()) + + def test_manual_no_hook_renewal(self): + """--manual without a hook requires manual renewal""" + self.config.authenticator = "manual" + self._call(self.config, None, None) + self.assertIn("--manual certificates requires", self._output()) + + def test_no_preconfigured_renewal(self): + """No --preconfigured-renewal needs manual cron setup""" + self.config.preconfigured_renewal = False + self._call(self.config, None, None) + self.assertIn("https://certbot.org/renewal-setup", self._output()) + class UpdateAccountTest(test_util.ConfigTestCase): """Tests for certbot._internal.main.update_account""" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-1.16.0/tests/plugins/standalone_test.py new/certbot-1.17.0/tests/plugins/standalone_test.py --- old/certbot-1.16.0/tests/plugins/standalone_test.py 2021-06-01 19:49:17.000000000 +0200 +++ new/certbot-1.17.0/tests/plugins/standalone_test.py 2021-07-06 17:41:16.000000000 +0200 @@ -177,6 +177,13 @@ "server1": set(), "server2": set()}) self.auth.servers.stop.assert_called_with(2) + def test_auth_hint(self): + self.config.http01_port = "80" + self.config.http01_address = None + self.assertIn("on port 80", self.auth.auth_hint([])) + self.config.http01_address = "127.0.0.1" + self.assertIn("on 127.0.0.1:80", self.auth.auth_hint([])) + if __name__ == "__main__": unittest.main() # pragma: no cover

1 0

commit traefik for openSUSE:Factory
by Source-Sync 30 Jul '21

30 Jul '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package traefik for openSUSE:Factory checked in at 2021-07-30 23:22:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/traefik (Old) and /work/SRC/openSUSE:Factory/.traefik.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "traefik" Fri Jul 30 23:22:04 2021 rev:3 rq:909344 version:2.4.12 Changes: -------- --- /work/SRC/openSUSE:Factory/traefik/traefik.changes 2021-06-01 10:36:10.152681014 +0200 +++ /work/SRC/openSUSE:Factory/.traefik.new.1899/traefik.changes 2021-07-30 23:22:24.635620987 +0200 @@ -1,0 +2,29 @@ +Wed Jul 28 15:46:39 UTC 2021 - alexandre.vicenzi(a)suse.com + +- Update to version 2.4.12: + * Get Kubernetes server version early + * Don't remove ingress config on API call failure + * Ratelimiter: use correct ttlSeconds value, and always call Set + * Check if defaultcertificate is defined in store + * Disable ExternalName Services by default on Kubernetes providers + * Fix: malformed Kubernetes resource names and references in tests + * Disable Cross-Namespace by default for IngressRoute provider + * Accesslog: support multiple values for a given header + * Ignore http 1.0 request host missing errors + * Headers Middleware: support http.CloseNotifier interface + * Detect certificates content modifications + * Update go-acme/lego to v4.4.0 + * Fix: ACME preferred chain. + * Remove error when HTTProutes is empty + * Fix incorrect behaviour with multi-port endpoint subsets + * Kubernetes ingress provider to search via all endpoints + * Fix plugin unzip call on windows + * Update Yaegi to v0.9.17 + * Bump paerser to v0.1.4 + * Create buffered signals channel + * Fix: use defaultEntryPoints when no entryPoint is defined in a TCPRouter + * Use a dynamic buffer to handle client Hello SNI detection + * Error span on 5xx only + + +------------------------------------------------------------------- Old: ---- traefik-2.4.8.tar.gz New: ---- traefik-2.4.12.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ traefik.spec ++++++ --- /var/tmp/diff_new_pack.IUVaYB/_old 2021-07-30 23:22:26.091619387 +0200 +++ /var/tmp/diff_new_pack.IUVaYB/_new 2021-07-30 23:22:26.091619387 +0200 @@ -15,10 +15,11 @@ # Please submit bugfixes or comments via https://bugs.opensuse.org/ # + %define project github.com/traefik/traefik Name: traefik -Version: 2.4.8 +Version: 2.4.12 Release: 0 Summary: The Cloud Native Application Proxy License: MIT @@ -29,9 +30,9 @@ Source2: traefik.service Source3: traefik.toml BuildRequires: go-bindata -BuildRequires: golang(API) >= 1.16 BuildRequires: golang-packaging BuildRequires: systemd-rpm-macros +BuildRequires: golang(API) >= 1.16 Recommends: podman %{?systemd_requires} %{go_provides} ++++++ _service ++++++ --- /var/tmp/diff_new_pack.IUVaYB/_old 2021-07-30 23:22:26.119619356 +0200 +++ /var/tmp/diff_new_pack.IUVaYB/_new 2021-07-30 23:22:26.119619356 +0200 @@ -2,7 +2,7 @@ <service name="tar_scm" mode="disabled"> <param name="url">https://github.com/traefik/traefik.git</param> <param name="scm">git</param> - <param name="revision">v2.4.8</param> + <param name="revision">v2.4.12</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.IUVaYB/_old 2021-07-30 23:22:26.135619339 +0200 +++ /var/tmp/diff_new_pack.IUVaYB/_new 2021-07-30 23:22:26.135619339 +0200 @@ -1,4 +1,4 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/traefik/traefik.git</param> - <param name="changesrevision">32655b5b16a1142b8b460e2d8dd68fe00d86a6bf</param></service></servicedata> \ No newline at end of file + <param name="changesrevision">8be434aaadfcb14270657980f7ffffa0ebca420b</param></service></servicedata> \ No newline at end of file ++++++ traefik-2.4.8.tar.gz -> traefik-2.4.12.tar.gz ++++++ /work/SRC/openSUSE:Factory/traefik/traefik-2.4.8.tar.gz /work/SRC/openSUSE:Factory/.traefik.new.1899/traefik-2.4.12.tar.gz differ: char 12, line 1

1 0

commit lime for openSUSE:Factory
by Source-Sync 30 Jul '21

30 Jul '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package lime for openSUSE:Factory checked in at 2021-07-30 23:22:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/lime (Old) and /work/SRC/openSUSE:Factory/.lime.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "lime" Fri Jul 30 23:22:03 2021 rev:5 rq:909332 version:5.0.3 Changes: -------- --- /work/SRC/openSUSE:Factory/lime/lime.changes 2021-07-29 21:33:02.252691746 +0200 +++ /work/SRC/openSUSE:Factory/.lime.new.1899/lime.changes 2021-07-30 23:22:23.559622168 +0200 @@ -1,0 +2,5 @@ +Fri Jul 30 07:39:15 UTC 2021 - Paolo Stivanin <info(a)paolostivanin.com> + +- Update to 5.0.3 (no changelog) + +------------------------------------------------------------------- Old: ---- lime-5.0.0.tar.bz2 New: ---- lime-5.0.3.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ lime.spec ++++++ --- /var/tmp/diff_new_pack.lOGa8L/_old 2021-07-30 23:22:24.011621672 +0200 +++ /var/tmp/diff_new_pack.lOGa8L/_new 2021-07-30 23:22:24.015621668 +0200 @@ -19,7 +19,7 @@ %define soname liblime %define sover 0 Name: lime -Version: 5.0.0 +Version: 5.0.3 Release: 0 Summary: Instant Message End-to-End Encryption Library License: GPL-3.0-or-later ++++++ lime-5.0.0.tar.bz2 -> lime-5.0.3.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lime-5.0.0/src/lime_crypto_primitives.cpp new/lime-5.0.3/src/lime_crypto_primitives.cpp --- old/lime-5.0.0/src/lime_crypto_primitives.cpp 2021-05-11 23:07:21.000000000 +0200 +++ new/lime-5.0.3/src/lime_crypto_primitives.cpp 2021-07-29 14:22:55.000000000 +0200 @@ -370,7 +370,7 @@ /* generic implementation, of HKDF RFC-5869 */ template <typename hashAlgo, typename infoType> void HMAC_KDF(const uint8_t *const salt, const size_t saltSize, const uint8_t *const ikm, const size_t ikmSize, const infoType &info, uint8_t *output, size_t outputSize) { - std::array<uint8_t, hashAlgo::ssize()> prk; // hold the output of pre-computation + std::array<uint8_t, hashAlgo::ssize()> prk{}; // hold the output of pre-computation // extraction HMAC<hashAlgo>(salt, saltSize, ikm, ikmSize, prk.data(), prk.size()); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lime-5.0.0/src/lime_double_ratchet.cpp new/lime-5.0.3/src/lime_double_ratchet.cpp --- old/lime-5.0.0/src/lime_double_ratchet.cpp 2021-05-11 23:07:21.000000000 +0200 +++ new/lime-5.0.3/src/lime_double_ratchet.cpp 2021-07-29 14:22:55.000000000 +0200 @@ -47,7 +47,7 @@ template <typename Curve> static void KDF_RK(DRChainKey &RK, DRChainKey &CK, const X<Curve, lime::Xtype::sharedSecret> &dh_out) noexcept { // Ask for twice the size of a DRChainKey for HKDF output - lime::sBuffer<2*lime::settings::DRChainKeySize> HKDFoutput; + lime::sBuffer<2*lime::settings::DRChainKeySize> HKDFoutput{}; HMAC_KDF<SHA512>(RK.data(), RK.size(), dh_out.data(), dh_out.size(), lime::settings::hkdf_DRChainKey_info, HKDFoutput.data(), HKDFoutput.size()); // First half of the output goes to RootKey (RK)

1 0