head 1.16; access; symbols pkgsrc-2026Q1:1.16.0.16 pkgsrc-2026Q1-base:1.16 pkgsrc-2025Q4:1.16.0.14 pkgsrc-2025Q4-base:1.16 pkgsrc-2025Q3:1.16.0.12 pkgsrc-2025Q3-base:1.16 pkgsrc-2025Q2:1.16.0.10 pkgsrc-2025Q2-base:1.16 pkgsrc-2025Q1:1.16.0.8 pkgsrc-2025Q1-base:1.16 pkgsrc-2024Q4:1.16.0.6 pkgsrc-2024Q4-base:1.16 pkgsrc-2024Q3:1.16.0.4 pkgsrc-2024Q3-base:1.16 pkgsrc-2024Q2:1.16.0.2 pkgsrc-2024Q2-base:1.16 pkgsrc-2024Q1:1.15.0.4 pkgsrc-2024Q1-base:1.15 pkgsrc-2023Q4:1.15.0.2 pkgsrc-2023Q4-base:1.15 pkgsrc-2023Q3:1.14.0.4 pkgsrc-2023Q3-base:1.14 pkgsrc-2023Q2:1.14.0.2 pkgsrc-2023Q2-base:1.14 pkgsrc-2023Q1:1.12.0.10 pkgsrc-2023Q1-base:1.12 pkgsrc-2022Q4:1.12.0.8 pkgsrc-2022Q4-base:1.12 pkgsrc-2022Q3:1.12.0.6 pkgsrc-2022Q3-base:1.12 pkgsrc-2022Q2:1.12.0.4 pkgsrc-2022Q2-base:1.12 pkgsrc-2022Q1:1.12.0.2 pkgsrc-2022Q1-base:1.12 pkgsrc-2021Q4:1.9.0.4 pkgsrc-2021Q4-base:1.9 pkgsrc-2021Q3:1.9.0.2 pkgsrc-2021Q3-base:1.9 pkgsrc-2021Q2:1.8.0.4 pkgsrc-2021Q2-base:1.8 pkgsrc-2021Q1:1.8.0.2 pkgsrc-2021Q1-base:1.8 pkgsrc-2020Q4:1.7.0.2 pkgsrc-2020Q4-base:1.7 pkgsrc-2020Q3:1.6.0.2 pkgsrc-2020Q3-base:1.6 pkgsrc-2020Q2:1.5.0.2 pkgsrc-2020Q2-base:1.5 pkgsrc-2020Q1:1.4.0.2 pkgsrc-2020Q1-base:1.4 pkgsrc-2019Q4:1.4.0.4 pkgsrc-2019Q4-base:1.4 pkgsrc-2019Q3:1.2.0.4 pkgsrc-2019Q3-base:1.2 pkgsrc-2019Q2:1.2.0.2 pkgsrc-2019Q2-base:1.2; locks; strict; comment @# @; 1.16 date 2024.06.06.12.05.45; author adam; state Exp; branches; next 1.15; commitid hdCFropXynm00VcF; 1.15 date 2023.12.12.16.39.35; author adam; state Exp; branches; next 1.14; commitid Bt5uu9XM5UmxccQE; 1.14 date 2023.05.13.07.26.50; author adam; state Exp; branches; next 1.13; commitid G3CnptHQHjHFZLoE; 1.13 date 2023.05.12.09.17.14; author adam; state Exp; branches; next 1.12; commitid rSY3Knu9BXmnDEoE; 1.12 date 2022.03.17.12.23.32; author adam; state Exp; branches; next 1.11; commitid 5AWTouazUZ8eczwD; 1.11 date 2022.02.10.21.23.33; author adam; state Exp; branches; next 1.10; commitid B716Vt4AFRqcj7sD; 1.10 date 2022.01.04.20.54.38; author wiz; state Exp; branches; next 1.9; commitid CYyhdK9qtoffkmnD; 1.9 date 2021.08.05.10.52.00; author adam; state Exp; branches; next 1.8; commitid yhqfUjWV7iacTL3D; 1.8 date 2021.02.09.10.06.42; author adam; state Exp; branches; next 1.7; commitid hxbR7NMuWCOok1HC; 1.7 date 2020.09.30.09.03.46; author adam; state Exp; branches; next 1.6; commitid 2Ze4o3CopScZd3qC; 1.6 date 2020.08.31.23.07.05; author wiz; state Exp; branches; next 1.5; commitid 9yf8HHEtVF21RgmC; 1.5 date 2020.05.07.10.53.45; author adam; state Exp; branches; next 1.4; commitid LYSs6vEelpsEwi7C; 1.4 date 2019.11.14.18.28.18; author adam; state Exp; branches; next 1.3; commitid M9Kb1br7rfFaFQKB; 1.3 date 2019.10.02.17.36.43; author adam; state Exp; branches; next 1.2; commitid xfzgCW1mv4DpLjFB; 1.2 date 2019.06.12.20.25.52; author adam; state Exp; branches; next 1.1; commitid cyGsyHTvmLzLiWqB; 1.1 date 2019.06.11.21.06.59; author triaxx; state Exp; branches; next ; commitid IxbqaITZCCwRyOqB; desc @@ 1.16 log @py-acme py-certbot*: updated to 2.11.0 2.11.0 Changed In anticipation of backwards incompatible changes, certbot-dns-cloudflare now requires less than version 2.20 of Cloudflare's python library. Fixed Fixed a bug in Certbot where a CSR's SANs did not always follow the order of the domain names that the user requested interactively. In some cases, the resulting cert's common name might seem picked up randomly from the SANs when it should be the first item the user had in mind. @ text @# $NetBSD: Makefile,v 1.15 2023/12/12 16:39:35 adam Exp $ .include "../../security/py-certbot/Makefile.common" DISTNAME= certbot_dns_google-${CERTBOT_VERSION} MASTER_SITES= ${MASTER_SITE_PYPI:=c/certbot-dns-google/} COMMENT= Google Cloud DNS Authenticator plugin for Certbot DEPENDS+= ${PYPKGPREFIX}-acme>=${CERTBOT_VERSION}:../../security/py-acme DEPENDS+= ${PYPKGPREFIX}-certbot>=${CERTBOT_VERSION}:../../security/py-certbot DEPENDS+= ${PYPKGPREFIX}-google-api-python-client>=1.6.5:../../www/py-google-api-python-client DEPENDS+= ${PYPKGPREFIX}-google-auth>=2.16.0:../../security/py-google-auth .include "../../lang/python/wheel.mk" .include "../../mk/bsd.pkg.mk" @ 1.15 log @py-acme py-certbot*: updated to 2.8.0 Certbot 2.8.0 Added Added support for Alpine Linux distribution when is used the apache plugin Changed Support for Python 3.7 was removed. Fixed Stop using the deprecated pkg_resources API included in setuptools. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14 2023/05/13 07:26:50 adam Exp $ d5 1 a5 1 DISTNAME= certbot-dns-google-${CERTBOT_VERSION} @ 1.14 log @py-certbot-dns-google: fix a typo @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.13 2023/05/12 09:17:14 adam Exp $ d15 1 a15 1 .include "../../lang/python/egg.mk" @ 1.13 log @py-acme py-certbot*: updated to 2.6.0 Certbot 2.6.0 Added --dns-google-project optionally allows for specifying the project that the DNS zone(s) reside in, which allows for Certbot usage in scenarios where the auth credentials reside in a different project to the zone(s) that are being managed. There is now a new Other annotated challenge object to allow plugins to support entirely novel challenges. Changed Optionally sign the SOA query for dns-rfc2136, to help resolve problems with split-view DNS setups and hidden primary setups. Certbot versions prior to v1.32.0 did not sign queries with the specified TSIG key resulting in difficulty with split-horizon implementations. Certbot v1.32.0 through v2.5.0 signed queries by default, potentially causing incompatibility with hidden primary setups with allow-update-forwarding enabled if the secondary did not also have the TSIG key within its config. Certbot v2.6.0 and later no longer signs queries by default, but allows the user to optionally sign these queries by explicit configuration using the dns_rfc2136_sign_query option in the credentials .ini file. Lineage name validity is performed for new lineages. --cert-name may no longer contain filepath separators (i.e. / or \, depending on the platform). certbot-dns-google now loads credentials using the standard Application Default Credentials strategy, rather than explicitly requiring the Google Compute metadata server to be present if a service account is not provided using --dns-google-credentials. --dns-google-credentials now supports additional types of file-based credential, such as External Account Credentials created by Workload Identity Federation. All file-based credentials implemented by the Google Auth library are supported. Fixed certbot-dns-google no longer requires deprecated oauth2client library. Certbot will no longer try to invoke plugins which do not subclass from the proper certbot.interfaces.{Installer,Authenticator} interface (e.g. certbot -i standalone will now be ignored). See GH-9664. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.12 2022/03/17 12:23:32 adam Exp $ d13 1 a13 1 DEPENDS+= ${PYPKGPREFIX}-google-oautht>=2.16.0:../../security/py-google-auth @ 1.12 log @py-acme py-certbot: updated to 1.25.0 Certbot 1.25.0 Changed Dropped 32 bit support for the Windows beta installer Windows beta installer is now distributed as "certbot-beta-installer-win_amd64.exe". Users of the Windows beta should uninstall the old version before running this. Added a check whether OCSP stapling is supported by the installer when requesting a certificate with the run subcommand in combination with the --must-staple option. If the installer does not support OCSP and the --must-staple option is used, Certbot will raise an error and quit. Certbot and its acme module now depend on josepy>=1.13.0 due to better type annotation support. Fixed Updated dependencies to use new version of cryptography that uses OpenSSL 1.1.1n, in response to https://www.openssl.org/news/secadv/20220315.txt. Certbot 1.24.0 Added When the --debug-challenges option is used in combination with -v, Certbot now displays the challenge URLs (for http-01 challenges) or FQDNs (for dns-01 challenges) and their expected return values. Changed Support for Python 3.6 was removed. All Certbot components now require setuptools>=41.6.0. The acme library now requires requests>=2.20.0. Certbot and its acme library now require pytz>=2019.3. certbot-nginx now requires pyparsing>=2.2.1. certbot-dns-route53 now requires boto3>=1.15.15. Fixed Nginx plugin now checks included files for the singleton server_names_hash_bucket_size directive. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.11 2022/02/10 21:23:33 adam Exp $ d12 2 a13 3 DEPENDS+= ${PYPKGPREFIX}-google-api-python-client>=1.5.5:../../www/py-google-api-python-client DEPENDS+= ${PYPKGPREFIX}-httplib2-[0-9]*:../../www/py-httplib2 DEPENDS+= ${PYPKGPREFIX}-oauth2client>=4.0:../../security/py-oauth2client @ 1.11 log @py-acme py-certbot*: updated to 1.23.0 Certbot 1.23.0 Added Added show_account subcommand, which will fetch the account information from the ACME server and show the account details (account URL and, if applicable, email address or addresses) We deprecated support for Python 3.6 in Certbot and its ACME library. Support for Python 3.6 will be removed in the next major release of Certbot. Fixed GCP Permission list for certbot-dns-google in plugin documentation dns-digitalocean used the SOA TTL for newly created records, rather than 30 seconds. Revoking a certificate based on an ECDSA key can now be done with --key-path. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.10 2022/01/04 20:54:38 wiz Exp $ a13 1 DEPENDS+= ${PYPKGPREFIX}-setuptools>=39.0.1:../../devel/py-setuptools @ 1.10 log @*: bump PKGREVISION for egg.mk users They now have a tool dependency on py-setuptools instead of a DEPENDS @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.9 2021/08/05 10:52:00 adam Exp $ a2 1 PKGREVISION= 1 a15 1 DEPENDS+= ${PYPKGPREFIX}-ZopeInterface-[0-9]*:../../devel/py-ZopeInterface @ 1.9 log @py-acme py-certbot*: updated to 1.18.0 1.18.0 Added New functions that Certbot plugins can use to interact with the user have been added to certbot.display.util. We plan to deprecate using IDisplay with zope in favor of these new functions in the future. The Plugin, Authenticator and Installer classes are added to certbot.interfaces module as alternatives to Certbot's current zope based plugin interfaces. The API of these interfaces is identical, but they are based on Python's abc module instead of zope. Certbot will continue to detect plugins that implement either interface, but we plan to drop support for zope based interfaces in a future version of Certbot. The class certbot.configuration.NamespaceConfig is added to the Certbot's public API. Changed When self-validating HTTP-01 challenges using acme.challenges.HTTP01Response.simple_verify, we now assume that the response is composed of only ASCII characters. Previously we were relying on the default behavior of the requests library which tries to guess the encoding of the response which was error prone. acme: the .client.Client and .client.BackwardsCompatibleClientV2 classes are now deprecated in favor of .client.ClientV2. The certbot.tests.patch_get_utility* functions have been deprecated. Plugins should now patch certbot.display.util themselves in their tests or use certbot.tests.util.patch_display_util as a temporary workaround. In order to simplify the transition to Certbot's new plugin interfaces, the classes Plugin and Installer in certbot.plugins.common module and certbot.plugins.dns_common.DNSAuthenticator now implement Certbot's new plugin interfaces. The Certbot plugins based on these classes are now automatically detected as implementing these interfaces. We added a dependency on chardet to our acme library so that it will be used over charset_normalizer in newer versions of requests. Fixed The Apache authenticator no longer crashes with "Unable to insert label" when encountering a completely empty vhost. This issue affected Certbot 1.17.0. Users of the Certbot snap on Debian 9 (Stretch) should no longer encounter an "access denied" error when installing DNS plugins. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.8 2021/02/09 10:06:42 adam Exp $ d3 1 @ 1.8 log @py-acme py-certbot*: updated to 1.12.0 1.12.0 Changed The --preferred-chain flag now only checks the Issuer Common Name of the topmost (closest to the root) certificate in the chain, instead of checking every certificate in the chain. Support for Python 2 has been removed. In previous releases, we caused certbot-auto to stop updating its Certbot installation. In this release, we are beginning to disable updates to the certbot-auto script itself. This release includes Amazon Linux users, and all other systems that are not based on Debian or RHEL. We plan to make this change to the certbot-auto script for all users in the coming months. Fixed Fixed the apache component on openSUSE Tumbleweed which no longer provides an apache2ctl symlink and uses apachectl instead. Fixed a typo in certbot/crypto_util.py causing an error upon attempting secp521r1 key generation @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.7 2020/09/30 09:03:46 adam Exp $ d10 2 a11 2 DEPENDS+= ${PYPKGPREFIX}-acme>=0.29.0:../../security/py-acme DEPENDS+= ${PYPKGPREFIX}-certbot>=1.1.0:../../security/py-certbot @ 1.7 log @py-acme py-certbot*: updated to 1.8.0 Certbot 1.8.0 Added Added the ability to remove email and phone contact information from an account using update_account --register-unsafely-without-email Changed Support for Python 3.5 has been removed. Fixed The problem causing the Apache plugin in the Certbot snap on ARM systems to fail to load the Augeas library it depends on has been fixed. The acme library can now tell the ACME server to clear contact information by passing an empty tuple to the contact field of a Registration message. Fixed the *** stack smashing detected *** error in the Certbot snap on some systems. More details about these changes can be found on our GitHub repo. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.6 2020/08/31 23:07:05 wiz Exp $ d14 1 a14 2 DEPENDS+= ${PYPKGPREFIX}-mock-[0-9]*:../../devel/py-mock DEPENDS+= ${PYPKGPREFIX}-setuptools-[0-9]*:../../devel/py-setuptools @ 1.6 log @*: switch to versioned_dependencies.mk for py-setuptools @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5 2020/05/07 10:53:45 adam Exp $ d15 1 a18 3 PYTHON_VERSIONS_INCOMPATIBLE= 27 # py-google-api-python-client PYTHON_VERSIONED_DEPENDENCIES+= setuptools a19 1 .include "../../lang/python/versioned_dependencies.mk" @ 1.5 log @py-acme/py-certbot*: updated to 1.4.0 1.4.0: Added * Turn off session tickets for apache plugin by default when appropriate. * Added serial number of certificate to the output of `certbot certificates` * Expose two new environment variables in the authenticator and cleanup scripts used by the `manual` plugin: `CERTBOT_REMAINING_CHALLENGES` is equal to the number of challenges remaining after the current challenge, `CERTBOT_ALL_DOMAINS` is a comma-separated list of all domains challenged for the current certificate. * Added TLS-ALPN-01 challenge support in the `acme` library. Support of this challenge in the Certbot client is planned to be added in a future release. * Added minimal proxy support for OCSP verification. * On Windows, hooks are now executed in a Powershell shell instead of a CMD shell, allowing both `*.ps1` and `*.bat` as valid scripts for Certbot. Changed * Reorganized error message when a user entered an invalid email address. * Stop asking interactively if the user would like to add a redirect. * `mock` dependency is now conditional on Python 2 in all of our packages. * Deprecate certbot-auto on Gentoo, macOS, and FreeBSD. Fixed * When using an RFC 8555 compliant endpoint, the `acme` library no longer sends the `resource` field in any requests or the `type` field when responding to challenges. * Fix nginx plugin crash when non-ASCII configuration file is being read (instead, the user will be warned that UTF-8 must be used). * Fix hanging OCSP queries during revocation checking - added a 10 second timeout. * Standalone servers now have a default socket timeout of 30 seconds, fixing cases where an idle connection can cause the standalone plugin to hang. * Parsing of the RFC 8555 application/pem-certificate-chain now tolerates CRLF line endings. This should fix interoperability with Buypass' services. More details about these changes can be found on our GitHub repo. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.4 2019/11/14 18:28:18 adam Exp $ a15 1 DEPENDS+= ${PYPKGPREFIX}-setuptools-[0-9]*:../../devel/py-setuptools d19 1 d22 1 @ 1.4 log @py-certbot: updated to 0.40.1 0.40.1: Changed Added back support for Python 3.4 to Certbot components and certbot-auto due to a bug when requiring Python 2.7 or 3.5+ on RHEL 6 based systems. More details about these changes can be found on our GitHub repo. 0.40.0: Changed We deprecated support for Python 3.4 in Certbot and its ACME library. Support for Python 3.4 will be removed in the next major release of Certbot. certbot-auto users on RHEL 6 based systems will be asked to enable Software Collections (SCL) repository so Python 3.6 can be installed. certbot-auto can enable the SCL repo for you on CentOS 6 while users on other RHEL 6 based systems will be asked to do this manually. --server may now be combined with --dry-run. Certbot will, as before, use the staging server instead of the live server when --dry-run is used. --dry-run now requests fresh authorizations every time, fixing the issue where it was prone to falsely reporting success. Updated certbot-dns-google to depend on newer versions of google-api-python-client and oauth2client. The OS detection logic again uses distro library for Linux OSes certbot.plugins.common.TLSSNI01 has been deprecated and will be removed in a future release. CLI flags --tls-sni-01-port and --tls-sni-01-address have been removed. The values tls-sni and tls-sni-01 for the --preferred-challenges flag are no longer accepted. Removed the flags: --agree-dev-preview, --dialog, and --apache-init-script acme.standalone.BaseRequestHandlerWithLogging and acme.standalone.simple_tls_sni_01_server have been deprecated and will be removed in a future release of the library. certbot-dns-rfc2136 now use TCP to query SOA records. Fixed More details about these changes can be found on our GitHub repo. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 2019/10/02 17:36:43 adam Exp $ d11 1 a11 1 DEPENDS+= ${PYPKGPREFIX}-certbot>=0.39.0:../../security/py-certbot @ 1.3 log @py-acme/py-certbot: updated to 0.39.0 0.39.0: Added Support for Python 3.8 was added to Certbot and all of its components. Support for CentOS 8 was added to certbot-auto. Changed Don't send OCSP requests for expired certificates Return to using platform.linux_distribution instead of distro.linux_distribution in OS fingerprinting for Python < 3.8 Updated the Nginx plugin's TLS configuration to keep support for some versions of IE11. Fixed Fixed OS detection in the Apache plugin on RHEL 6. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2 2019/06/12 20:25:52 adam Exp $ d12 1 a12 1 DEPENDS+= ${PYPKGPREFIX}-google-api-python-client>=1.5:../../www/py-google-api-python-client d15 1 a15 1 DEPENDS+= ${PYPKGPREFIX}-oauth2client>=2.0:../../security/py-oauth2client @ 1.2 log @py-certbot-dns-google: Python 2.7 is not supported in py-google-api-python-client @ text @d1 3 a3 1 # $NetBSD: Makefile,v 1.1 2019/06/11 21:06:59 triaxx Exp $ a7 1 MAINTAINER= triaxx@@NetBSD.org a9 2 .include "../../security/py-certbot/Makefile.common" d11 1 a11 1 DEPENDS+= ${PYPKGPREFIX}-certbot>=0.34.0:../../security/py-certbot @ 1.1 log @py-certbot-dns-google: import version 0.35.0 @ text @d1 1 a1 1 # $NetBSD: $ d20 2 @