415 Commits

Author SHA1 Message Date
Felix Fontein
5cd9087e00 Release 3.2.0. 2026-04-19 12:53:29 +02:00
Felix Fontein
cb0137baca Mark dns-account-01 and dns-persist-01 more explicitly as experimental. (#1002) 2026-04-17 07:32:41 +02:00
Felix Fontein
0b36567667 Dedicate the 3.2.0 release to Michael O. Rabin. 2026-04-16 20:37:10 +02:00
Felix Fontein
305a1fc922 Prepare 3.2.0 release. 2026-04-15 21:20:41 +02:00
Felix Fontein
d966acbef4 Improve authz handling. (#998) 2026-04-05 09:45:11 +00:00
Felix Fontein
f3b43185bf ACME: add dns-persist-01 support (#997)
* Add dns-persist-01 DNS TXT record filters.

* Refactor parsing and joining CAA issue-values out.

* Add basic tests.

* Fix bug and add integration tests for filters.

* Add dns-persist-01 support to ACME modules.

* Add changelog fragment.
2026-04-01 19:46:59 +02:00
Felix Fontein
b1ae295fb7 ACME: implement dns-account-01 challenge type (#996)
* Implement dns-account-01.

* Bump draft versions.

* dns-account-01 implementation changed in Pebble; only the one used by ansible-core 2.21/devel's ACME simulator matches the latest draft.
2026-03-29 18:49:33 +00:00
Felix Fontein
9f7aba4d20 Release 3.1.1. 2026-02-12 06:52:18 +01:00
Felix Fontein
46dc971922 Prepare 3.1.1. 2026-02-11 21:51:21 +01:00
Felix Fontein
911ed33c2e Fix EC detection. (#981) 2026-02-11 21:44:24 +01:00
Felix Fontein
c9c3a41291 Release 3.1.0. 2025-12-29 14:52:25 +01:00
Felix Fontein
2b6c932f64 Prepare 3.1.0. 2025-12-23 15:25:52 +01:00
Aram Akhavan
83806cafc7 luks_device: add support for tpm2 and keyslot priority (#972)
* luks_device: add support for tpm2 and fido2 devices

* Update documentation per code review comments

Co-authored-by: Felix Fontein <felix@fontein.de>

* Add support for keyslot priority

* Add changelog fragment.

* Remove fido2 support. Add idempotency for remove-tpm2

* Fix testing

* Fix testing again

* Fix formatting

* Fix format

* Apply suggestions from code review

Co-authored-by: Felix Fontein <felix@fontein.de>

* Add required_by and fix formatting

* vscode did something stupid...

* Address code review comments

---------

Co-authored-by: Felix Fontein <felix@fontein.de>
2025-12-22 09:15:52 +01:00
Felix Fontein
87096afa07 Release 3.0.5. 2025-10-29 21:28:32 +01:00
Felix Fontein
64aa85031e Prepare 3.0.5. 2025-10-29 20:59:02 +01:00
Felix Fontein
5420f9baaf Cleanup with ruff check (#963)
* Implement improvements suggested by ruff check.

* Add ruff check to CI.

* Add changelog fragment.
2025-10-28 07:21:11 +01:00
Felix Fontein
520e7c6278 Release 3.0.4. 2025-10-01 06:43:56 +02:00
Felix Fontein
1da1fdc3b0 Prepare 3.0.4. 2025-09-30 22:10:18 +02:00
Felix Fontein
c0072d29f5 ansible-core 2.20: avoid deprecated functionality (#953)
* Avoid deprecated functionality.

* Lint.

* Fix typing.

* Python 3.7/3.8 compat.
2025-08-17 22:30:10 +02:00
Felix Fontein
114c98928d Release 3.0.3. 2025-08-04 19:18:38 +02:00
Felix Fontein
ba5c551a29 Increase number of retries from 10 to 20. (#949) 2025-08-03 10:29:55 +02:00
Felix Fontein
09c45551fe Prepare 3.0.3. 2025-08-02 21:02:29 +02:00
Felix Fontein
75413d0b08 Also retry on HTTP statuses 502 and 504. (#947) 2025-08-02 18:25:28 +02:00
Felix Fontein
bc16487882 Normalize changelog configs. 2025-07-27 16:35:32 +02:00
Felix Fontein
690561ecd9 Release 3.0.2. 2025-07-26 14:40:11 +02:00
Felix Fontein
05c9e09d20 Prepare 3.0.2. 2025-07-25 14:40:38 +02:00
Felix Fontein
f219cac94c Improve error message when lodaing corrupt private key or private key with wrong passphrase. (#939) 2025-07-25 14:36:54 +02:00
Felix Fontein
b3fea5b7df Release 3.0.1. 2025-07-17 22:05:11 +02:00
Felix Fontein
55ae448036 openssl_csr*: fix crash for key_usage idempotency check (#935)
* Fix crash for key_usage idempotency check.

* Add test.
2025-07-17 19:37:46 +02:00
Felix Fontein
e294890a5e Prepare 3.0.1. 2025-07-17 17:19:04 +02:00
Felix Fontein
b908b5986a Release 3.0.0. 2025-07-02 21:23:37 +02:00
Felix Fontein
6c304a2964 Prepare 3.0.0. 2025-07-02 21:02:43 +02:00
Felix Fontein
c7489b8d3c acme_certificate: deprecate modify_account's default true, recommend to set to false (#924)
* Deprecate modify_account's default value.

* Show new default in all examples.
2025-06-25 20:59:28 +02:00
Felix Fontein
58bde04672 Relesae 3.0.0-rc1. 2025-06-14 17:10:13 +02:00
Felix Fontein
e537ea122f Prepare 3.0.0-rc1. 2025-06-14 16:47:32 +02:00
Felix Fontein
056ae1cf69 acme_account: check for 'externalAccountRequired' error (#919)
* Check for 'externalAccountRequired' error.

* Add changelog fragment.
2025-06-12 22:41:07 +02:00
Felix Fontein
d83a923325 Ensure that *everything* is typed in community.crypto (#917)
* Ensure that *everything* is typed in community.crypto.

* Fix comment.

* Ignore type definitions/imports and AssertionErrors for code coverage.
2025-06-09 10:10:19 +02:00
Felix Fontein
e90d4d2b0f Improve type hinting. (#914) 2025-06-08 20:48:58 +02:00
Felix Fontein
f68b0d0c08 Improve type hints. (#913) 2025-06-01 21:33:20 +02:00
Felix Fontein
576a06b5b2 Remove no longer needed backend abstractions. (#912) 2025-06-01 09:07:06 +02:00
Felix Fontein
d1a8137d91 Add changelog fragments. 2025-05-31 10:28:02 +02:00
Felix Fontein
31933955e3 CSR: avoid access of private attributes (#910)
* Avoid access of private attributes.

* Add changelog.
2025-05-30 22:46:39 +02:00
Felix Fontein
f3db4eeea5 Release 3.0.0-a2. 2025-05-22 22:06:10 +02:00
Felix Fontein
1b05480354 Prepare 3.0.0-a2. 2025-05-22 21:20:41 +02:00
Felix Fontein
43ea6148df Remove Entrust modules and certificate providers (#900)
* Remove Entrust modules and certificate providers.

* Add more information on Entrust removal.

* Remove Entrust content from ignore.txt files.

* Work around bug in ansible-test.
2025-05-22 19:08:48 +00:00
Felix Fontein
94416989a8 Release 3.0.0-a1. 2025-05-18 14:33:13 +02:00
Felix Fontein
b08afe4237 Make all doc_fragments private. (#898) 2025-05-18 01:42:18 +02:00
Felix Fontein
9b8e4e81a9 Forgot to mention cryptography. 2025-05-18 01:31:21 +02:00
Felix Fontein
efda8596a5 Prepare 3.0.0-a1 release. 2025-05-18 01:09:30 +02:00
Felix Fontein
5fbf35df86 Deprecate no longer used options. (#891) 2025-05-16 22:23:05 +02:00