[pkgsrc/trunk]: pkgsrc/security security/py-{acme, certbot}: Update to 0.25.0.

[fhajny <fhajny%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/55838aeea122
branches:  trunk
changeset: 381603:55838aeea122
user:      fhajny <fhajny%pkgsrc.org@localhost>
date:      Tue Jun 12 09:22:35 2018 +0000

description:
security/py-{acme,certbot}: Update to 0.25.0.

### Added

- Support for the ready status type was added to acme. Without this change,
  Certbot and acme users will begin encountering errors when using Let's
  Encrypt's ACMEv2 API starting on June 19th for the staging environment and
  July 5th for production. See
  https://community.letsencrypt.org/t/acmev2-order-ready-status/62866 for more
  information.
- Certbot now accepts the flag --reuse-key which will cause the same key to be
  used in the certificate when the lineage is renewed rather than generating a
  new key.
- You can now add multiple email addresses to your ACME account with Certbot by
  providing a comma separated list of emails to the --email flag.
- Support for Let's Encrypt's upcoming TLS-ALPN-01 challenge was added to acme.
  For more information, see
  https://community.letsencrypt.org/t/tls-alpn-validation-method/63814/1.
- acme now supports specifying the source address to bind to when sending
  outgoing connections. You still cannot specify this address using Certbot.
- If you run Certbot against Let's Encrypt's ACMEv2 staging server but don't
  already have an account registered at that server URL, Certbot will
  automatically reuse your staging account from Let's Encrypt's ACMEv1 endpoint
  if it exists.
- Interfaces were added to Certbot allowing plugins to be called at additional
  points. The `GenericUpdater` interface allows plugins to perform actions
  every time `certbot renew` is run, regardless of whether any certificates are
  due for renewal, and the `RenewDeployer` interface allows plugins to perform
  actions when a certificate is renewed. See `certbot.interfaces` for more
  information.

### Changed

- When running Certbot with --dry-run and you don't already have a staging
  account, the created account does not contain an email address even if one
  was provided to avoid expiration emails from Let's Encrypt's staging server.
- certbot-nginx does a better job of automatically detecting the location of
  Nginx's configuration files when run on BSD based systems.
- acme now requires and uses pytest when running tests with setuptools with
  `python setup.py test`.
- `certbot config_changes` no longer waits for user input before exiting.

### Fixed

- Misleading log output that caused users to think that Certbot's standalone
  plugin failed to bind to a port when performing a challenge has been
  corrected.
- An issue where certbot-nginx would fail to enable HSTS if the server block
  already had an `add_header` directive has been resolved.
- certbot-nginx now does a better job detecting the server block to base the
  configuration for TLS-SNI challenges on.

diffstat:

 security/py-acme/PLIST              |   9 ++++++++-
 security/py-certbot/Makefile.common |   4 ++--
 security/py-certbot/PLIST           |   8 +++++++-
 security/py-certbot/distinfo        |  10 +++++-----
 4 files changed, 22 insertions(+), 9 deletions(-)

diffs (96 lines):

diff -r 737e5ee1a684 -r 55838aeea122 security/py-acme/PLIST
--- a/security/py-acme/PLIST    Tue Jun 12 09:06:54 2018 +0000
+++ b/security/py-acme/PLIST    Tue Jun 12 09:22:35 2018 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.8 2018/03/13 10:08:51 fhajny Exp $
+@comment $NetBSD: PLIST,v 1.9 2018/06/12 09:22:35 fhajny Exp $
 ${PYSITELIB}/${EGG_INFODIR}/PKG-INFO
 ${PYSITELIB}/${EGG_INFODIR}/SOURCES.txt
 ${PYSITELIB}/${EGG_INFODIR}/dependency_links.txt
@@ -31,6 +31,10 @@
 ${PYSITELIB}/acme/jws.pyc
 ${PYSITELIB}/acme/jws_test.pyo
 ${PYSITELIB}/acme/jws_test.pyc
+${PYSITELIB}/acme/magic_typing.pyo
+${PYSITELIB}/acme/magic_typing.pyc
+${PYSITELIB}/acme/magic_typing_test.pyo
+${PYSITELIB}/acme/magic_typing_test.pyc
 ${PYSITELIB}/acme/messages.pyo
 ${PYSITELIB}/acme/messages.pyc
 ${PYSITELIB}/acme/messages_test.pyo
@@ -57,6 +61,8 @@
 ${PYSITELIB}/acme/fields_test.py
 ${PYSITELIB}/acme/jws.py
 ${PYSITELIB}/acme/jws_test.py
+${PYSITELIB}/acme/magic_typing.py
+${PYSITELIB}/acme/magic_typing_test.py
 ${PYSITELIB}/acme/messages.py
 ${PYSITELIB}/acme/messages_test.py
 ${PYSITELIB}/acme/standalone.py
@@ -78,6 +84,7 @@
 ${PYSITELIB}/acme/testdata/csr.der
 ${PYSITELIB}/acme/testdata/csr.pem
 ${PYSITELIB}/acme/testdata/dsa512_key.pem
+${PYSITELIB}/acme/testdata/rsa1024_cert.pem
 ${PYSITELIB}/acme/testdata/rsa1024_key.pem
 ${PYSITELIB}/acme/testdata/rsa2048_cert.pem
 ${PYSITELIB}/acme/testdata/rsa2048_key.pem
diff -r 737e5ee1a684 -r 55838aeea122 security/py-certbot/Makefile.common
--- a/security/py-certbot/Makefile.common       Tue Jun 12 09:06:54 2018 +0000
+++ b/security/py-certbot/Makefile.common       Tue Jun 12 09:22:35 2018 +0000
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.24 2018/05/16 15:09:42 fhajny Exp $
+# $NetBSD: Makefile.common,v 1.25 2018/06/12 09:22:35 fhajny Exp $
 #
 # used by security/py-acme/Makefile
 # used by security/py-certbot/Makefile
 
-DISTNAME=      certbot-0.24.0
+DISTNAME=      certbot-0.25.0
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=certbot/}
 
 HOMEPAGE=      https://letsencrypt.org/
diff -r 737e5ee1a684 -r 55838aeea122 security/py-certbot/PLIST
--- a/security/py-certbot/PLIST Tue Jun 12 09:06:54 2018 +0000
+++ b/security/py-certbot/PLIST Tue Jun 12 09:22:35 2018 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.11 2018/05/16 15:09:42 fhajny Exp $
+@comment $NetBSD: PLIST,v 1.12 2018/06/12 09:22:35 fhajny Exp $
 bin/certbot${PYVERSSUFFIX}
 ${PYSITELIB}/${EGG_INFODIR}/PKG-INFO
 ${PYSITELIB}/${EGG_INFODIR}/SOURCES.txt
@@ -244,6 +244,9 @@
 ${PYSITELIB}/certbot/tests/renewal_test.py
 ${PYSITELIB}/certbot/tests/renewal_test.pyc
 ${PYSITELIB}/certbot/tests/renewal_test.pyo
+${PYSITELIB}/certbot/tests/renewupdater_test.py
+${PYSITELIB}/certbot/tests/renewupdater_test.pyc
+${PYSITELIB}/certbot/tests/renewupdater_test.pyo
 ${PYSITELIB}/certbot/tests/reporter_test.py
 ${PYSITELIB}/certbot/tests/reporter_test.pyc
 ${PYSITELIB}/certbot/tests/reporter_test.pyo
@@ -286,6 +289,9 @@
 ${PYSITELIB}/certbot/tests/util_test.py
 ${PYSITELIB}/certbot/tests/util_test.pyc
 ${PYSITELIB}/certbot/tests/util_test.pyo
+${PYSITELIB}/certbot/updater.py
+${PYSITELIB}/certbot/updater.pyc
+${PYSITELIB}/certbot/updater.pyo
 ${PYSITELIB}/certbot/util.py
 ${PYSITELIB}/certbot/util.pyc
 ${PYSITELIB}/certbot/util.pyo
diff -r 737e5ee1a684 -r 55838aeea122 security/py-certbot/distinfo
--- a/security/py-certbot/distinfo      Tue Jun 12 09:06:54 2018 +0000
+++ b/security/py-certbot/distinfo      Tue Jun 12 09:22:35 2018 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.24 2018/05/16 15:09:42 fhajny Exp $
+$NetBSD: distinfo,v 1.25 2018/06/12 09:22:35 fhajny Exp $
 
-SHA1 (certbot-0.24.0.tar.gz) = cfa8d963a6f0d43eb5fa9f8c3e06601f0f1b71bb
-RMD160 (certbot-0.24.0.tar.gz) = 117ac1440d7ad42f3c8ceb6fb6b0bc37c5c31e12
-SHA512 (certbot-0.24.0.tar.gz) = b067da7eea54deb72ff4b516382cbe480ffebcb378489a2b0c52955f7399401d936d8d6587d88473d6f4fa9e864de94514941bde9727a5babbf2d6211ea61b20
-Size (certbot-0.24.0.tar.gz) = 1149694 bytes
+SHA1 (certbot-0.25.0.tar.gz) = 07a65d480c747d7de6a1158fb4502fcd35693db2
+RMD160 (certbot-0.25.0.tar.gz) = 778982e8f6f959732d07097163c298f97cc6c74f
+SHA512 (certbot-0.25.0.tar.gz) = af0f2498d79e9d54f0609b21b8ec40efe9fbcfa5162eb18bbb8b10cc230b31db6af81c4e85af243d92c527efc55634402b30960d014085f6e6af6e679ca75592
+Size (certbot-0.25.0.tar.gz) = 1163858 bytes