CVS commit: pkgsrc/security

["Filip Hajny" <fhajny%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   fhajny
Date:           Tue Mar 13 10:08:51 UTC 2018

Modified Files:
        pkgsrc/security/py-acme: Makefile PLIST
        pkgsrc/security/py-certbot: Makefile Makefile.common distinfo

Log Message:
security/py-certbot: Update to 0.22.0

### Added

- Support for obtaining wildcard certificates and a newer version of the ACME
  protocol such as the one implemented by Let's Encrypt's upcoming ACMEv2
  endpoint was added to Certbot and its ACME library. Certbot still works with
  older ACME versions and will automatically change the version of the protocol
  used based on the version the ACME CA implements.
- The Apache and Nginx plugins are now able to automatically install a wildcard
  certificate to multiple virtual hosts that you select from your server
  configuration.
- The `certbot install` command now accepts the `--cert-name` flag for
  selecting a certificate.
- `acme.client.BackwardsCompatibleClientV2` was added to Certbot's ACME library
  which automatically handles most of the differences between new and old ACME
  versions. `acme.client.ClientV2` is also available for people who only want
  to support one version of the protocol or want to handle the differences
  between versions themselves.
- certbot-auto now supports the flag --install-only which has the script
  install Certbot and its dependencies and exit without invoking Certbot.
- Support for issuing a single certificate for a wildcard and base domain was
  added to our Google Cloud DNS plugin. To do this, we now require your API
  credentials have additional permissions, however, your credentials will
  already have these permissions unless you defined a custom role with fewer
  permissions than the standard DNS administrator role provided by Google.
  These permissions are also only needed for the case described above so it
  will continue to work for existing users. For more information about the
  permissions changes, see the documentation in the plugin.

### Changed

- We have broken lockstep between our ACME library, Certbot, and its plugins.
  This means that the different components do not need to be the same version
  to work together like they did previously. This makes packaging easier
  because not every piece of Certbot needs to be repackaged to ship a change to
  a subset of its components.
- Support for Python 2.6 and Python 3.3 has been removed from ACME, Certbot,
  Certbot's plugins, and certbot-auto. If you are using certbot-auto on a RHEL
  6 based system, it will walk you through the process of installing Certbot
  with Python 3 and refuse to upgrade to a newer version of Certbot until you
  have done so.
- Certbot's components now work with older versions of setuptools to simplify
  packaging for EPEL 7.

### Fixed

- Issues caused by Certbot's Nginx plugin adding multiple ipv6only directives
  has been resolved.
- A problem where Certbot's Apache plugin would add redundant include
  directives for the TLS configuration managed by Certbot has been fixed.
- Certbot's webroot plugin now properly deletes any directories it creates.


To generate a diff of this commit:
cvs rdiff -u -r1.9 -r1.10 pkgsrc/security/py-acme/Makefile
cvs rdiff -u -r1.7 -r1.8 pkgsrc/security/py-acme/PLIST
cvs rdiff -u -r1.7 -r1.8 pkgsrc/security/py-certbot/Makefile
cvs rdiff -u -r1.20 -r1.21 pkgsrc/security/py-certbot/Makefile.common \
    pkgsrc/security/py-certbot/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/py-acme/Makefile
diff -u pkgsrc/security/py-acme/Makefile:1.9 pkgsrc/security/py-acme/Makefile:1.10
--- pkgsrc/security/py-acme/Makefile:1.9        Mon Jan 22 13:37:25 2018
+++ pkgsrc/security/py-acme/Makefile    Tue Mar 13 10:08:51 2018
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.9 2018/01/22 13:37:25 fhajny Exp $
+# $NetBSD: Makefile,v 1.10 2018/03/13 10:08:51 fhajny Exp $
 
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:S/certbot/acme/}
 CATEGORIES=    security
@@ -9,10 +9,10 @@ LICENSE=      apache-2.0
 
 .include "../../security/py-certbot/Makefile.common"
 
-DEPENDS+=      ${PYPKGPREFIX}-josepy>=1.0.0:../../security/py-josepy
 DEPENDS+=      ${PYPKGPREFIX}-cryptography>=0.8:../../security/py-cryptography
-DEPENDS+=      ${PYPKGPREFIX}-OpenSSL>=0.15:../../security/py-OpenSSL
+DEPENDS+=      ${PYPKGPREFIX}-josepy>=1.0.0:../../security/py-josepy
 DEPENDS+=      ${PYPKGPREFIX}-mock-[0-9]*:../../devel/py-mock
+DEPENDS+=      ${PYPKGPREFIX}-OpenSSL>=0.15:../../security/py-OpenSSL
 DEPENDS+=      ${PYPKGPREFIX}-pytz-[0-9]*:../../time/py-pytz
 DEPENDS+=      ${PYPKGPREFIX}-requests>2.10:../../devel/py-requests
 DEPENDS+=      ${PYPKGPREFIX}-rfc3339-[0-9]*:../../time/py-rfc3339

Index: pkgsrc/security/py-acme/PLIST
diff -u pkgsrc/security/py-acme/PLIST:1.7 pkgsrc/security/py-acme/PLIST:1.8
--- pkgsrc/security/py-acme/PLIST:1.7   Mon Jan 22 13:37:25 2018
+++ pkgsrc/security/py-acme/PLIST       Tue Mar 13 10:08:51 2018
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.7 2018/01/22 13:37:25 fhajny Exp $
+@comment $NetBSD: PLIST,v 1.8 2018/03/13 10:08:51 fhajny Exp $
 ${PYSITELIB}/${EGG_INFODIR}/PKG-INFO
 ${PYSITELIB}/${EGG_INFODIR}/SOURCES.txt
 ${PYSITELIB}/${EGG_INFODIR}/dependency_links.txt
@@ -65,6 +65,7 @@ ${PYSITELIB}/acme/test_util.py
 ${PYSITELIB}/acme/testdata/README
 ${PYSITELIB}/acme/testdata/cert-100sans.pem
 ${PYSITELIB}/acme/testdata/cert-idnsans.pem
+${PYSITELIB}/acme/testdata/cert-nocn.der
 ${PYSITELIB}/acme/testdata/cert-san.pem
 ${PYSITELIB}/acme/testdata/cert.der
 ${PYSITELIB}/acme/testdata/cert.pem

Index: pkgsrc/security/py-certbot/Makefile
diff -u pkgsrc/security/py-certbot/Makefile:1.7 pkgsrc/security/py-certbot/Makefile:1.8
--- pkgsrc/security/py-certbot/Makefile:1.7     Mon Jan 22 13:37:25 2018
+++ pkgsrc/security/py-certbot/Makefile Tue Mar 13 10:08:51 2018
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.7 2018/01/22 13:37:25 fhajny Exp $
+# $NetBSD: Makefile,v 1.8 2018/03/13 10:08:51 fhajny Exp $
 
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    security
@@ -15,6 +15,7 @@ DEPENDS+=     ${PYPKGPREFIX}-acme-${PKGVERSI
 DEPENDS+=      ${PYPKGPREFIX}-configargparse>=0.9.3:../../devel/py-configargparse
 DEPENDS+=      ${PYPKGPREFIX}-configobj-[0-9]*:../../devel/py-configobj
 DEPENDS+=      ${PYPKGPREFIX}-cryptography>=1.2:../../security/py-cryptography
+DEPENDS+=      ${PYPKGPREFIX}-josepy-[0-9]*:../../security/py-josepy
 DEPENDS+=      ${PYPKGPREFIX}-mock-[0-9]*:../../devel/py-mock
 DEPENDS+=      ${PYPKGPREFIX}-parsedatetime>=2.0:../../time/py-parsedatetime
 DEPENDS+=      ${PYPKGPREFIX}-pytz-[0-9]*:../../time/py-pytz

Index: pkgsrc/security/py-certbot/Makefile.common
diff -u pkgsrc/security/py-certbot/Makefile.common:1.20 pkgsrc/security/py-certbot/Makefile.common:1.21
--- pkgsrc/security/py-certbot/Makefile.common:1.20     Fri Feb  2 15:36:08 2018
+++ pkgsrc/security/py-certbot/Makefile.common  Tue Mar 13 10:08:51 2018
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.20 2018/02/02 15:36:08 fhajny Exp $
+# $NetBSD: Makefile.common,v 1.21 2018/03/13 10:08:51 fhajny Exp $
 #
 # used by security/py-acme/Makefile
 # used by security/py-certbot/Makefile
 
-DISTNAME=      certbot-0.21.1
+DISTNAME=      certbot-0.22.0
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=certbot/}
 
 HOMEPAGE=      https://letsencrypt.org/
Index: pkgsrc/security/py-certbot/distinfo
diff -u pkgsrc/security/py-certbot/distinfo:1.20 pkgsrc/security/py-certbot/distinfo:1.21
--- pkgsrc/security/py-certbot/distinfo:1.20    Fri Feb  2 15:36:08 2018
+++ pkgsrc/security/py-certbot/distinfo Tue Mar 13 10:08:51 2018
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.20 2018/02/02 15:36:08 fhajny Exp $
+$NetBSD: distinfo,v 1.21 2018/03/13 10:08:51 fhajny Exp $
 
-SHA1 (certbot-0.21.1.tar.gz) = 824d40e584a017559fae58954845663a20e34a76
-RMD160 (certbot-0.21.1.tar.gz) = bedb988810cf30594b2ee014029c3edb9914582d
-SHA512 (certbot-0.21.1.tar.gz) = 6f3ffba7dc06bcc2a6b9835906331753ee2715192e7a49562314480069f22e4a66bb26f04dc4bbdfb0ab40998220d0c9b77fb0351e042116b02996fb2da699d2
-Size (certbot-0.21.1.tar.gz) = 1105663 bytes
+SHA1 (certbot-0.22.0.tar.gz) = 3ff38bfce754140ee61be392dc1da8bc02e09896
+RMD160 (certbot-0.22.0.tar.gz) = 53747b949a37eb35beb7ce098eca8f98f41b7bdf
+SHA512 (certbot-0.22.0.tar.gz) = 406810e29a2637c420b9a8a3feb3a2ffb77bd740419cbcf46d10ab152a7252c765c058481b2a1f9a96cc426a9ae018bf90540fc0ebd54be1c8822c528cf1b605
+Size (certbot-0.22.0.tar.gz) = 1128134 bytes