From bb1cdef4c6f006a48a035023942c3ad34f4d575c Mon Sep 17 00:00:00 2001 From: Felix Fontein Date: Sun, 21 Jul 2024 15:48:08 +0200 Subject: [PATCH] Release 2.21.1. --- CHANGELOG.md | 420 +++++++++--------- CHANGELOG.rst | 13 + changelogs/changelog.yaml | 12 + changelogs/fragments/2.21.1.yml | 1 - .../730-cryptography-invalidity_date.yml | 2 - 5 files changed, 243 insertions(+), 205 deletions(-) delete mode 100644 changelogs/fragments/2.21.1.yml delete mode 100644 changelogs/fragments/730-cryptography-invalidity_date.yml diff --git a/CHANGELOG.md b/CHANGELOG.md index 2530b1437..579aff959 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,237 +2,253 @@ **Topics** -- v2\.21\.0 +- v2\.21\.1 - Release Summary + - Bugfixes +- v2\.21\.0 + - Release Summary - Minor Changes - v2\.20\.0 - - Release Summary + - Release Summary - Minor Changes - Deprecated Features - - Bugfixes + - Bugfixes - New Modules - v2\.19\.1 - - Release Summary - - Bugfixes -- v2\.19\.0 - Release Summary + - Bugfixes +- v2\.19\.0 + - Release Summary - Minor Changes - Deprecated Features - - Bugfixes + - Bugfixes - New Modules - v2\.18\.0 - - Release Summary + - Release Summary - Minor Changes - Deprecated Features - - Bugfixes + - Bugfixes - New Plugins - Filter - v2\.17\.1 - - Release Summary - - Bugfixes -- v2\.17\.0 - Release Summary + - Bugfixes +- v2\.17\.0 + - Release Summary - Minor Changes - v2\.16\.2 - - Release Summary - - Bugfixes -- v2\.16\.1 - Release Summary - Bugfixes -- v2\.16\.0 +- v2\.16\.1 - Release Summary - - Minor Changes - Bugfixes -- v2\.15\.1 +- v2\.16\.0 - Release Summary + - Minor Changes - Bugfixes -- v2\.15\.0 +- v2\.15\.1 - Release Summary + - Bugfixes +- v2\.15\.0 + - Release Summary - Minor Changes - Deprecated Features - - Bugfixes + - Bugfixes - New Plugins - Filter - Lookup - v2\.14\.1 - - Release Summary - - Bugfixes + - Release Summary + - Bugfixes - Known Issues - v2\.14\.0 - - Release Summary + - Release Summary - Minor Changes - v2\.13\.1 - - Release Summary - - Bugfixes -- v2\.13\.0 - Release Summary + - Bugfixes +- v2\.13\.0 + - Release Summary - Minor Changes - Deprecated Features - - Bugfixes + - Bugfixes - v2\.12\.0 - - Release Summary + - Release Summary - Minor Changes - v2\.11\.1 - - Release Summary -- v2\.11\.0 - Release Summary - - Minor Changes - - Bugfixes -- v2\.10\.0 +- v2\.11\.0 - Release Summary + - Minor Changes - Bugfixes +- v2\.10\.0 + - Release Summary + - Bugfixes - New Plugins - Filter - v2\.9\.0 - - Release Summary + - Release Summary - Minor Changes - v2\.8\.1 - - Release Summary -- v2\.8\.0 - Release Summary +- v2\.8\.0 + - Release Summary - Minor Changes - v2\.7\.1 - - Release Summary - - Bugfixes -- v2\.7\.0 - Release Summary - - Minor Changes - Bugfixes -- v2\.6\.0 +- v2\.7\.0 - Release Summary + - Minor Changes + - Bugfixes +- v2\.6\.0 + - Release Summary - Minor Changes - v2\.5\.0 - - Release Summary + - Release Summary - Minor Changes - v2\.4\.0 - - Release Summary + - Release Summary - Deprecated Features - - Bugfixes + - Bugfixes - v2\.3\.4 - - Release Summary -- v2\.3\.3 - Release Summary - - Bugfixes -- v2\.3\.2 +- v2\.3\.3 - Release Summary - Bugfixes -- v2\.3\.1 +- v2\.3\.2 - Release Summary - Bugfixes -- v2\.3\.0 +- v2\.3\.1 - Release Summary - - Minor Changes - Bugfixes -- v2\.2\.4 +- v2\.3\.0 - Release Summary + - Minor Changes - Bugfixes -- v2\.2\.3 +- v2\.2\.4 - Release Summary - Bugfixes -- v2\.2\.2 +- v2\.2\.3 - Release Summary - Bugfixes -- v2\.2\.1 +- v2\.2\.2 - Release Summary - Bugfixes -- v2\.2\.0 +- v2\.2\.1 - Release Summary - - Minor Changes - Bugfixes -- v2\.1\.0 +- v2\.2\.0 - Release Summary - - Minor Changes + - Minor Changes - Bugfixes +- v2\.1\.0 + - Release Summary + - Minor Changes + - Bugfixes - New Modules - v2\.0\.2 - - Release Summary -- v2\.0\.1 - Release Summary +- v2\.0\.1 + - Release Summary - Minor Changes - - Bugfixes + - Bugfixes - v2\.0\.0 - - Release Summary + - Release Summary - Minor Changes - Breaking Changes / Porting Guide - Deprecated Features - Removed Features \(previously deprecated\) - - Bugfixes -- v1\.9\.4 - - Release Summary - Bugfixes -- v1\.9\.3 +- v1\.9\.4 - Release Summary - Bugfixes -- v1\.9\.2 +- v1\.9\.3 - Release Summary -- v1\.9\.1 + - Bugfixes +- v1\.9\.2 - Release Summary -- v1\.9\.0 +- v1\.9\.1 - Release Summary - - Minor Changes - - Bugfixes -- v1\.8\.0 +- v1\.9\.0 - Release Summary - - Minor Changes + - Minor Changes - Bugfixes -- v1\.7\.1 +- v1\.8\.0 - Release Summary + - Minor Changes - Bugfixes -- v1\.7\.0 +- v1\.7\.1 - Release Summary - - Minor Changes - Bugfixes - - New Modules -- v1\.6\.2 +- v1\.7\.0 - Release Summary + - Minor Changes - Bugfixes -- v1\.6\.1 + - New Modules +- v1\.6\.2 - Release Summary - Bugfixes -- v1\.6\.0 +- v1\.6\.1 - Release Summary + - Bugfixes +- v1\.6\.0 + - Release Summary - Minor Changes - Deprecated Features - - Bugfixes + - Bugfixes - v1\.5\.0 - - Release Summary + - Release Summary - Minor Changes - Deprecated Features - - Bugfixes + - Bugfixes - v1\.4\.0 - - Release Summary + - Release Summary - Minor Changes - - Bugfixes + - Bugfixes - v1\.3\.0 - - Release Summary + - Release Summary - Minor Changes - - Bugfixes + - Bugfixes - New Modules - v1\.2\.0 - - Release Summary + - Release Summary - Minor Changes - Security Fixes - - Bugfixes -- v1\.1\.1 - - Release Summary - Bugfixes -- v1\.1\.0 +- v1\.1\.1 - Release Summary - - Minor Changes - Bugfixes +- v1\.1\.0 + - Release Summary + - Minor Changes + - Bugfixes - New Modules - v1\.0\.0 - - Release Summary + - Release Summary - Minor Changes - Deprecated Features - Removed Features \(previously deprecated\) - - Bugfixes + - Bugfixes - New Modules + +## v2\.21\.1 + + +### Release Summary + +Maintenance release\. + + +### Bugfixes + +* When using cryptography \>\= 43\.0\.0\, use offset\-aware datetime\.datetime objects \(with timezone UTC\) instead of offset\-naive UTC timestamps for the InvalidityDate X\.509 CRL extension \([https\://github\.com/ansible\-collections/community\.crypto/issues/726](https\://github\.com/ansible\-collections/community\.crypto/issues/726)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/730](https\://github\.com/ansible\-collections/community\.crypto/pull/730)\)\. + ## v2\.21\.0 - + ### Release Summary Feature release\. @@ -247,7 +263,7 @@ Feature release\. ## v2\.20\.0 - + ### Release Summary Feature and bugfix release\. @@ -267,7 +283,7 @@ code or docs fragments from this collection\. * acme\.backends module utils \- the get\_cert\_information\(\) method for a ACME crypto backend must be implemented from community\.crypto 3\.0\.0 on \([https\://github\.com/ansible\-collections/community\.crypto/pull/736](https\://github\.com/ansible\-collections/community\.crypto/pull/736)\)\. * crypto\.module\_backends\.common module utils \- the crypto\.module\_backends\.common module utils is deprecated and will be removed from community\.crypto 3\.0\.0\. Use the improved argspec module util instead \([https\://github\.com/ansible\-collections/community\.crypto/pull/749](https\://github\.com/ansible\-collections/community\.crypto/pull/749)\)\. - + ### Bugfixes * x509\_crl\, x509\_certificate\, x509\_certificate\_info \- when parsing absolute timestamps which omitted the second count\, the first digit of the minutes was used as a one\-digit minutes count\, and the second digit of the minutes as a one\-digit second count \([https\://github\.com/ansible\-collections/community\.crypto/pull/745](https\://github\.com/ansible\-collections/community\.crypto/pull/745)\)\. @@ -282,12 +298,12 @@ code or docs fragments from this collection\. ## v2\.19\.1 - + ### Release Summary Bugfix release\. - + ### Bugfixes * crypto\.math module utils \- change return values for quick\_is\_not\_prime\(\) and convert\_int\_to\_bytes\(0\, 0\) for special cases that do not appear when using the collection \([https\://github\.com/ansible\-collections/community\.crypto/pull/733](https\://github\.com/ansible\-collections/community\.crypto/pull/733)\)\. @@ -297,7 +313,7 @@ Bugfix release\. ## v2\.19\.0 - + ### Release Summary Bugfix and feature release\. @@ -313,7 +329,7 @@ Bugfix and feature release\. * acme\.backends module utils \- from community\.crypto on\, all implementations of CryptoBackend must override get\_ordered\_csr\_identifiers\(\)\. The current default implementation\, which simply sorts the result of get\_csr\_identifiers\(\)\, will then be removed \([https\://github\.com/ansible\-collections/community\.crypto/pull/725](https\://github\.com/ansible\-collections/community\.crypto/pull/725)\)\. - + ### Bugfixes * acme\_certificate \- respect the order of the CNAME and SAN identifiers that are passed on when creating an ACME order \([https\://github\.com/ansible\-collections/community\.crypto/issues/723](https\://github\.com/ansible\-collections/community\.crypto/issues/723)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/725](https\://github\.com/ansible\-collections/community\.crypto/pull/725)\)\. @@ -326,7 +342,7 @@ Bugfix and feature release\. ## v2\.18\.0 - + ### Release Summary Bugfix and feature release\. @@ -341,7 +357,7 @@ Bugfix and feature release\. * openssl\_csr\_pipe\, openssl\_privatekey\_pipe\, x509\_certificate\_pipe \- the current behavior of check mode is deprecated and will change in community\.crypto 3\.0\.0\. The current behavior is similar to the modules without \_pipe\: if the object needs to be \(re\-\)generated\, only the changed status is set\, but the object is not updated\. From community\.crypto 3\.0\.0 on\, the modules will ignore check mode and always act as if check mode is not active\. This behavior can already achieved now by adding check\_mode\: false to the task\. If you think this breaks your use\-case of this module\, please [create an issue in the community\.crypto repository](https\://github\.com/ansible\-collections/community\.crypto/issues/new/choose) \([https\://github\.com/ansible\-collections/community\.crypto/issues/712](https\://github\.com/ansible\-collections/community\.crypto/issues/712)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/714](https\://github\.com/ansible\-collections/community\.crypto/pull/714)\)\. - + ### Bugfixes * luks\_device \- fixed module a bug that prevented using remove\_keyslot with the value 0 \([https\://github\.com/ansible\-collections/community\.crypto/pull/710](https\://github\.com/ansible\-collections/community\.crypto/pull/710)\)\. @@ -360,12 +376,12 @@ Bugfix and feature release\. ## v2\.17\.1 - + ### Release Summary Bugfix release for compatibility with cryptography 42\.0\.0\. - + ### Bugfixes * openssl\_dhparam \- was using an internal function instead of the public API to load DH param files when using the cryptography backend\. The internal function was removed in cryptography 42\.0\.0\. The module now uses the public API\, which has been available since support for DH params was added to cryptography \([https\://github\.com/ansible\-collections/community\.crypto/pull/698](https\://github\.com/ansible\-collections/community\.crypto/pull/698)\)\. @@ -375,7 +391,7 @@ Bugfix release for compatibility with cryptography 42\.0\.0\. ## v2\.17\.0 - + ### Release Summary Feature release\. @@ -388,12 +404,12 @@ Feature release\. ## v2\.16\.2 - + ### Release Summary Bugfix release\. - + ### Bugfixes * acme\_\* modules \- directly react on bad return data for account creation/retrieval/updating requests \([https\://github\.com/ansible\-collections/community\.crypto/pull/682](https\://github\.com/ansible\-collections/community\.crypto/pull/682)\)\. @@ -404,12 +420,12 @@ Bugfix release\. ## v2\.16\.1 - + ### Release Summary Bugfix release\. - + ### Bugfixes * acme\_\* modules \- also retry requests in case of socket errors\, bad status lines\, and unknown connection errors\; improve error messages in these cases \([https\://github\.com/ansible\-collections/community\.crypto/issues/680](https\://github\.com/ansible\-collections/community\.crypto/issues/680)\)\. @@ -417,7 +433,7 @@ Bugfix release\. ## v2\.16\.0 - + ### Release Summary Bugfix release\. @@ -427,7 +443,7 @@ Bugfix release\. * luks\_devices \- add new options keyslot\, new\_keyslot\, and remove\_keyslot to allow adding/removing keys to/from specific keyslots \([https\://github\.com/ansible\-collections/community\.crypto/pull/664](https\://github\.com/ansible\-collections/community\.crypto/pull/664)\)\. - + ### Bugfixes * openssl\_pkcs12 \- modify autodetect to not detect pyOpenSSL \>\= 23\.3\.0\, which removed PKCS\#12 support \([https\://github\.com/ansible\-collections/community\.crypto/pull/666](https\://github\.com/ansible\-collections/community\.crypto/pull/666)\)\. @@ -435,12 +451,12 @@ Bugfix release\. ## v2\.15\.1 - + ### Release Summary Bugfix release\. - + ### Bugfixes * acme\_\* modules \- correctly handle error documents without type \([https\://github\.com/ansible\-collections/community\.crypto/issues/651](https\://github\.com/ansible\-collections/community\.crypto/issues/651)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/652](https\://github\.com/ansible\-collections/community\.crypto/pull/652)\)\. @@ -448,7 +464,7 @@ Bugfix release\. ## v2\.15\.0 - + ### Release Summary Bugfix and feature release\. @@ -463,7 +479,7 @@ Bugfix and feature release\. * get\_certificate \- the default false of the asn1\_base64 option is deprecated and will change to true in community\.crypto 3\.0\.0 \([https\://github\.com/ansible\-collections/community\.crypto/pull/600](https\://github\.com/ansible\-collections/community\.crypto/pull/600)\)\. - + ### Bugfixes * openssh\_cert\, openssh\_keypair \- the modules ignored return codes of ssh and ssh\-keygen in some cases \([https\://github\.com/ansible\-collections/community\.crypto/issues/645](https\://github\.com/ansible\-collections/community\.crypto/issues/645)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/646](https\://github\.com/ansible\-collections/community\.crypto/pull/646)\)\. @@ -485,7 +501,7 @@ Bugfix and feature release\. ## v2\.14\.1 - + ### Release Summary Bugfix and maintenance release with updated documentation\. @@ -498,7 +514,7 @@ ansible\-core 2\.15 or later to see it as it is intended\. Alternatively you can look at [the devel docsite](https\://docs\.ansible\.com/ansible/devel/collections/community/crypto/) for the rendered HTML version of the documentation of the latest release\. - + ### Bugfixes * Fix PEM detection/identification to also accept random other lines before the line starting with \-\-\-\-\-BEGIN \([https\://github\.com/ansible\-collections/community\.crypto/issues/627](https\://github\.com/ansible\-collections/community\.crypto/issues/627)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/628](https\://github\.com/ansible\-collections/community\.crypto/pull/628)\)\. @@ -511,7 +527,7 @@ for the rendered HTML version of the documentation of the latest release\. ## v2\.14\.0 - + ### Release Summary Feature release\. @@ -526,12 +542,12 @@ Feature release\. ## v2\.13\.1 - + ### Release Summary Bugfix release\. - + ### Bugfixes * execution environment definition \- fix installation of python3\-pyOpenSSL package on CentOS and RHEL \([https\://github\.com/ansible\-collections/community\.crypto/pull/606](https\://github\.com/ansible\-collections/community\.crypto/pull/606)\)\. @@ -540,7 +556,7 @@ Bugfix release\. ## v2\.13\.0 - + ### Release Summary Bugfix and maintenance release\. @@ -555,7 +571,7 @@ Bugfix and maintenance release\. * x509\_crl \- the mode option is deprecated\; use crl\_mode instead\. The mode option will change its meaning in community\.crypto 3\.0\.0\, and will refer to the CRL file\'s mode instead \([https\://github\.com/ansible\-collections/community\.crypto/issues/596](https\://github\.com/ansible\-collections/community\.crypto/issues/596)\)\. - + ### Bugfixes * openssh\_keypair \- always generate a new key pair if the private key does not exist\. Previously\, the module would fail when regenerate\=fail without an existing key\, contradicting the documentation \([https\://github\.com/ansible\-collections/community\.crypto/pull/598](https\://github\.com/ansible\-collections/community\.crypto/pull/598)\)\. @@ -564,7 +580,7 @@ Bugfix and maintenance release\. ## v2\.12\.0 - + ### Release Summary Feature release\. @@ -577,7 +593,7 @@ Feature release\. ## v2\.11\.1 - + ### Release Summary Maintenance release with improved documentation\. @@ -585,7 +601,7 @@ Maintenance release with improved documentation\. ## v2\.11\.0 - + ### Release Summary Feature and bugfix release\. @@ -595,7 +611,7 @@ Feature and bugfix release\. * get\_certificate \- adds ciphers option for custom cipher selection \([https\://github\.com/ansible\-collections/community\.crypto/pull/571](https\://github\.com/ansible\-collections/community\.crypto/pull/571)\)\. - + ### Bugfixes * action plugin helper \- fix handling of deprecations for ansible\-core 2\.14\.2 \([https\://github\.com/ansible\-collections/community\.crypto/pull/572](https\://github\.com/ansible\-collections/community\.crypto/pull/572)\)\. @@ -605,12 +621,12 @@ Feature and bugfix release\. ## v2\.10\.0 - + ### Release Summary Bugfix and feature release\. - + ### Bugfixes * openssl\_csr\, openssl\_csr\_pipe \- prevent invalid values for crl\_distribution\_points that do not have one of full\_name\, relative\_name\, and crl\_issuer \([https\://github\.com/ansible\-collections/community\.crypto/pull/560](https\://github\.com/ansible\-collections/community\.crypto/pull/560)\)\. @@ -632,7 +648,7 @@ Bugfix and feature release\. ## v2\.9\.0 - + ### Release Summary Regular feature release\. @@ -645,7 +661,7 @@ Regular feature release\. ## v2\.8\.1 - + ### Release Summary Maintenance release with improved documentation\. @@ -653,7 +669,7 @@ Maintenance release with improved documentation\. ## v2\.8\.0 - + ### Release Summary Feature release\. @@ -668,12 +684,12 @@ Feature release\. ## v2\.7\.1 - + ### Release Summary Maintenance release\. - + ### Bugfixes * acme\_\* modules \- improve feedback when importing cryptography does not work \([https\://github\.com/ansible\-collections/community\.crypto/issues/518](https\://github\.com/ansible\-collections/community\.crypto/issues/518)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/519](https\://github\.com/ansible\-collections/community\.crypto/pull/519)\)\. @@ -681,7 +697,7 @@ Maintenance release\. ## v2\.7\.0 - + ### Release Summary Feature release\. @@ -691,7 +707,7 @@ Feature release\. * acme\* modules \- also support the HTTP 503 Service Unavailable and 408 Request Timeout response status for automatic retries \([https\://github\.com/ansible\-collections/community\.crypto/pull/513](https\://github\.com/ansible\-collections/community\.crypto/pull/513)\)\. - + ### Bugfixes * openssl\_privatekey\_pipe \- ensure compatibility with newer versions of ansible\-core \([https\://github\.com/ansible\-collections/community\.crypto/pull/515](https\://github\.com/ansible\-collections/community\.crypto/pull/515)\)\. @@ -699,7 +715,7 @@ Feature release\. ## v2\.6\.0 - + ### Release Summary Feature release\. @@ -713,7 +729,7 @@ Feature release\. ## v2\.5\.0 - + ### Release Summary Maintenance release with improved licensing declaration and documentation fixes\. @@ -726,7 +742,7 @@ Maintenance release with improved licensing declaration and documentation fixes\ ## v2\.4\.0 - + ### Release Summary Deprecation and bugfix release\. No new features this time\. @@ -736,7 +752,7 @@ Deprecation and bugfix release\. No new features this time\. * Support for Ansible 2\.9 and ansible\-base 2\.10 is deprecated\, and will be removed in the next major release \(community\.crypto 3\.0\.0\)\. Some modules might still work with these versions afterwards\, but we will no longer keep compatibility code that was needed to support them \([https\://github\.com/ansible\-collections/community\.crypto/pull/460](https\://github\.com/ansible\-collections/community\.crypto/pull/460)\)\. - + ### Bugfixes * openssl\_pkcs12 \- when using the pyOpenSSL backend\, do not crash when trying to read non\-existing other certificates \([https\://github\.com/ansible\-collections/community\.crypto/issues/486](https\://github\.com/ansible\-collections/community\.crypto/issues/486)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/487](https\://github\.com/ansible\-collections/community\.crypto/pull/487)\)\. @@ -744,7 +760,7 @@ Deprecation and bugfix release\. No new features this time\. ## v2\.3\.4 - + ### Release Summary Re\-release of what was intended to be 2\.3\.3\. @@ -760,12 +776,12 @@ has been added\. ## v2\.3\.3 - + ### Release Summary Bugfix release\. - + ### Bugfixes * Include Apache\-2\.0\.txt file for plugins/module\_utils/crypto/\_obj2txt\.py and plugins/module\_utils/crypto/\_objects\_data\.py\. @@ -775,12 +791,12 @@ Bugfix release\. ## v2\.3\.2 - + ### Release Summary Maintenance and bugfix release\. - + ### Bugfixes * Include simplified\_bsd\.txt license file for the ECS module utils\. @@ -789,12 +805,12 @@ Maintenance and bugfix release\. ## v2\.3\.1 - + ### Release Summary Maintenance release\. - + ### Bugfixes * Include PSF\-license\.txt file for plugins/module\_utils/\_version\.py\. @@ -802,7 +818,7 @@ Maintenance release\. ## v2\.3\.0 - + ### Release Summary Feature and bugfix release\. @@ -821,7 +837,7 @@ Feature and bugfix release\. * x509\_crl \- add name\_encoding option to control the encoding \(IDNA\, Unicode\) used to return domain names in general names \([https\://github\.com/ansible\-collections/community\.crypto/pull/436](https\://github\.com/ansible\-collections/community\.crypto/pull/436)\)\. * x509\_crl\_info \- add name\_encoding option to control the encoding \(IDNA\, Unicode\) used to return domain names in general names \([https\://github\.com/ansible\-collections/community\.crypto/pull/436](https\://github\.com/ansible\-collections/community\.crypto/pull/436)\)\. - + ### Bugfixes * Make collection more robust when PyOpenSSL is used with an incompatible cryptography version \([https\://github\.com/ansible\-collections/community\.crypto/pull/445](https\://github\.com/ansible\-collections/community\.crypto/pull/445)\)\. @@ -830,12 +846,12 @@ Feature and bugfix release\. ## v2\.2\.4 - + ### Release Summary Regular maintenance release\. - + ### Bugfixes * openssh\_\* modules \- fix exception handling to report traceback to users for enhanced traceability \([https\://github\.com/ansible\-collections/community\.crypto/pull/417](https\://github\.com/ansible\-collections/community\.crypto/pull/417)\)\. @@ -843,12 +859,12 @@ Regular maintenance release\. ## v2\.2\.3 - + ### Release Summary Regular bugfix release\. - + ### Bugfixes * luks\_device \- fix parsing of lsblk output when device name ends with crypt \([https\://github\.com/ansible\-collections/community\.crypto/issues/409](https\://github\.com/ansible\-collections/community\.crypto/issues/409)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/410](https\://github\.com/ansible\-collections/community\.crypto/pull/410)\)\. @@ -856,14 +872,14 @@ Regular bugfix release\. ## v2\.2\.2 - + ### Release Summary Regular bugfix release\. In this release\, we extended the test matrix to include Alpine 3\, ArchLinux\, Debian Bullseye\, and CentOS Stream 8\. CentOS 8 was removed from the test matrix\. - + ### Bugfixes * certificate\_complete\_chain \- allow multiple potential intermediate certificates to have the same subject \([https\://github\.com/ansible\-collections/community\.crypto/issues/399](https\://github\.com/ansible\-collections/community\.crypto/issues/399)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/403](https\://github\.com/ansible\-collections/community\.crypto/pull/403)\)\. @@ -875,12 +891,12 @@ In this release\, we extended the test matrix to include Alpine 3\, ArchLinux\, ## v2\.2\.1 - + ### Release Summary Bugfix release\. - + ### Bugfixes * openssh\_cert \- fixed false changed status for host certificates when using full\_idempotence \([https\://github\.com/ansible\-collections/community\.crypto/issues/395](https\://github\.com/ansible\-collections/community\.crypto/issues/395)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/396](https\://github\.com/ansible\-collections/community\.crypto/pull/396)\)\. @@ -888,7 +904,7 @@ Bugfix release\. ## v2\.2\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -898,7 +914,7 @@ Regular bugfix and feature release\. * openssh\_cert \- added ignore\_timestamps parameter so it can be used semi\-idempotent with relative timestamps in valid\_to/valid\_from \([https\://github\.com/ansible\-collections/community\.crypto/issues/379](https\://github\.com/ansible\-collections/community\.crypto/issues/379)\)\. - + ### Bugfixes * luks\_devices \- set LANG and similar environment variables to avoid translated output\, which can break some of the module\'s functionality like key management \([https\://github\.com/ansible\-collections/community\.crypto/pull/388](https\://github\.com/ansible\-collections/community\.crypto/pull/388)\, [https\://github\.com/ansible\-collections/community\.crypto/issues/385](https\://github\.com/ansible\-collections/community\.crypto/issues/385)\)\. @@ -906,7 +922,7 @@ Regular bugfix and feature release\. ## v2\.1\.0 - + ### Release Summary Feature and bugfix release\. @@ -916,7 +932,7 @@ Feature and bugfix release\. * Adjust error messages that indicate cryptography is not installed from Can\'t to Cannot \([https\://github\.com/ansible\-collections/community\.crypto/pull/374](https\://github\.com/ansible\-collections/community\.crypto/pull/374)\)\. - + ### Bugfixes * Various modules and plugins \- use vendored version of distutils\.version instead of the deprecated Python standard library distutils \([https\://github\.com/ansible\-collections/community\.crypto/pull/353](https\://github\.com/ansible\-collections/community\.crypto/pull/353)\)\. @@ -932,7 +948,7 @@ Feature and bugfix release\. ## v2\.0\.2 - + ### Release Summary Documentation fix release\. No actual code changes\. @@ -940,7 +956,7 @@ Documentation fix release\. No actual code changes\. ## v2\.0\.1 - + ### Release Summary Bugfix release with extra forward compatibility for newer versions of cryptography\. @@ -950,7 +966,7 @@ Bugfix release with extra forward compatibility for newer versions of cryptograp * acme\_\* modules \- fix usage of fetch\_url with changes in latest ansible\-core devel branch \([https\://github\.com/ansible\-collections/community\.crypto/pull/339](https\://github\.com/ansible\-collections/community\.crypto/pull/339)\)\. - + ### Bugfixes * acme\_certificate \- avoid passing multiple certificates to cryptography\'s X\.509 certificate loader when fullchain\_dest is used \([https\://github\.com/ansible\-collections/community\.crypto/pull/324](https\://github\.com/ansible\-collections/community\.crypto/pull/324)\)\. @@ -961,7 +977,7 @@ Bugfix release with extra forward compatibility for newer versions of cryptograp ## v2\.0\.0 - + ### Release Summary A new major release of the community\.crypto collection\. The main changes are removal of the PyOpenSSL backends for almost all modules \(openssl\_pkcs12 being the only exception\)\, and removal of the assertonly provider in the x509\_certificate provider\. There are also some other breaking changes which should improve the user interface/experience of this collection long\-term\. @@ -1023,7 +1039,7 @@ A new major release of the community\.crypto collection\. The main * x509\_certificate\_info \- removed the pyopenssl backend \([https\://github\.com/ansible\-collections/community\.crypto/pull/273](https\://github\.com/ansible\-collections/community\.crypto/pull/273)\)\. * x509\_certificate\_pipe \- removed the pyopenssl backend \([https\://github\.com/ansible\-collections/community\.crypto/pull/273](https\://github\.com/ansible\-collections/community\.crypto/pull/273)\)\. - + ### Bugfixes * cryptography backend \- improve Unicode handling for Python 2 \([https\://github\.com/ansible\-collections/community\.crypto/pull/313](https\://github\.com/ansible\-collections/community\.crypto/pull/313)\)\. @@ -1035,12 +1051,12 @@ A new major release of the community\.crypto collection\. The main ## v1\.9\.4 - + ### Release Summary Regular bugfix release\. - + ### Bugfixes * acme\_\* modules \- fix commands composed for OpenSSL backend to retrieve information on CSRs and certificates from stdin to use /dev/stdin instead of \-\. This is needed for OpenSSL 1\.0\.1 and 1\.0\.2\, apparently \([https\://github\.com/ansible\-collections/community\.crypto/pull/279](https\://github\.com/ansible\-collections/community\.crypto/pull/279)\)\. @@ -1049,12 +1065,12 @@ Regular bugfix release\. ## v1\.9\.3 - + ### Release Summary Regular bugfix release\. - + ### Bugfixes * openssl\_csr and openssl\_csr\_pipe \- make sure that Unicode strings are used to compare strings with the cryptography backend\. This fixes idempotency problems with non\-ASCII letters on Python 2 \([https\://github\.com/ansible\-collections/community\.crypto/issues/270](https\://github\.com/ansible\-collections/community\.crypto/issues/270)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/271](https\://github\.com/ansible\-collections/community\.crypto/pull/271)\)\. @@ -1062,7 +1078,7 @@ Regular bugfix release\. ## v1\.9\.2 - + ### Release Summary Bugfix release to fix the changelog\. No other change compared to 1\.9\.0\. @@ -1070,7 +1086,7 @@ Bugfix release to fix the changelog\. No other change compared to 1\.9\.0\. ## v1\.9\.1 - + ### Release Summary Accidental 1\.9\.1 release\. Identical to 1\.9\.0\. @@ -1078,7 +1094,7 @@ Accidental 1\.9\.1 release\. Identical to 1\.9\.0\. ## v1\.9\.0 - + ### Release Summary Regular feature release\. @@ -1089,7 +1105,7 @@ Regular feature release\. * get\_certificate \- added starttls option to retrieve certificates from servers which require clients to request an encrypted connection \([https\://github\.com/ansible\-collections/community\.crypto/pull/264](https\://github\.com/ansible\-collections/community\.crypto/pull/264)\)\. * openssh\_keypair \- added diff support \([https\://github\.com/ansible\-collections/community\.crypto/pull/260](https\://github\.com/ansible\-collections/community\.crypto/pull/260)\)\. - + ### Bugfixes * keypair\_backend module utils \- simplify code to pass sanity tests \([https\://github\.com/ansible\-collections/community\.crypto/pull/263](https\://github\.com/ansible\-collections/community\.crypto/pull/263)\)\. @@ -1100,7 +1116,7 @@ Regular feature release\. ## v1\.8\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -1113,7 +1129,7 @@ Regular bugfix and feature release\. * openssh\_cert \- added regenerate option to validate additional certificate parameters which trigger regeneration of an existing certificate \([https\://github\.com/ansible\-collections/community\.crypto/pull/256](https\://github\.com/ansible\-collections/community\.crypto/pull/256)\)\. * openssh\_cert \- adding diff support \([https\://github\.com/ansible\-collections/community\.crypto/pull/255](https\://github\.com/ansible\-collections/community\.crypto/pull/255)\)\. - + ### Bugfixes * openssh\_cert \- fixed certificate generation to restore original certificate if an error is encountered \([https\://github\.com/ansible\-collections/community\.crypto/pull/255](https\://github\.com/ansible\-collections/community\.crypto/pull/255)\)\. @@ -1122,12 +1138,12 @@ Regular bugfix and feature release\. ## v1\.7\.1 - + ### Release Summary Bugfix release\. - + ### Bugfixes * openssl\_pkcs12 \- fix crash when loading passphrase\-protected PKCS\#12 files with cryptography backend \([https\://github\.com/ansible\-collections/community\.crypto/issues/247](https\://github\.com/ansible\-collections/community\.crypto/issues/247)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/248](https\://github\.com/ansible\-collections/community\.crypto/pull/248)\)\. @@ -1135,7 +1151,7 @@ Bugfix release\. ## v1\.7\.0 - + ### Release Summary Regular feature and bugfix release\. @@ -1163,7 +1179,7 @@ Regular feature and bugfix release\. * x509\_crl\_info \- add list\_revoked\_certificates option to avoid enumerating all revoked certificates \([https\://github\.com/ansible\-collections/community\.crypto/pull/232](https\://github\.com/ansible\-collections/community\.crypto/pull/232)\)\. * x509\_crl\_info \- refactor module to allow code reuse for diff mode \([https\://github\.com/ansible\-collections/community\.crypto/pull/203](https\://github\.com/ansible\-collections/community\.crypto/pull/203)\)\. - + ### Bugfixes * openssh\_keypair \- fix check\_mode to populate return values for existing keypairs \([https\://github\.com/ansible\-collections/community\.crypto/issues/113](https\://github\.com/ansible\-collections/community\.crypto/issues/113)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/230](https\://github\.com/ansible\-collections/community\.crypto/pull/230)\)\. @@ -1178,12 +1194,12 @@ Regular feature and bugfix release\. ## v1\.6\.2 - + ### Release Summary Bugfix release\. Fixes compatibility issue of ACME modules with step\-ca\. - + ### Bugfixes * acme\_\* modules \- avoid crashing for ACME servers where the meta directory key is not present \([https\://github\.com/ansible\-collections/community\.crypto/issues/220](https\://github\.com/ansible\-collections/community\.crypto/issues/220)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/221](https\://github\.com/ansible\-collections/community\.crypto/pull/221)\)\. @@ -1191,12 +1207,12 @@ Bugfix release\. Fixes compatibility issue of ACME modules with step\-ca\. ## v1\.6\.1 - + ### Release Summary Bugfix release\. - + ### Bugfixes * acme\_\* modules \- fix wrong usages of ACMEProtocolException \([https\://github\.com/ansible\-collections/community\.crypto/pull/216](https\://github\.com/ansible\-collections/community\.crypto/pull/216)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/217](https\://github\.com/ansible\-collections/community\.crypto/pull/217)\)\. @@ -1204,7 +1220,7 @@ Bugfix release\. ## v1\.6\.0 - + ### Release Summary Fixes compatibility issues with the latest ansible\-core 2\.11 beta\, and contains a lot of internal refactoring for the ACME modules and support for private key passphrases for them\. @@ -1223,7 +1239,7 @@ Fixes compatibility issues with the latest ansible\-core 2\.11 beta\, and contai * acme module\_utils \- the acme module\_utils \(ansible\_collections\.community\.crypto\.plugins\.module\_utils\.acme\) is deprecated and will be removed in community\.crypto 2\.0\.0\. Use the new Python modules in the acme package instead \(ansible\_collections\.community\.crypto\.plugins\.module\_utils\.acme\.xxx\) \([https\://github\.com/ansible\-collections/community\.crypto/pull/184](https\://github\.com/ansible\-collections/community\.crypto/pull/184)\)\. - + ### Bugfixes * action\_module plugin helper \- make compatible with latest changes in ansible\-core 2\.11\.0b3 \([https\://github\.com/ansible\-collections/community\.crypto/pull/202](https\://github\.com/ansible\-collections/community\.crypto/pull/202)\)\. @@ -1232,7 +1248,7 @@ Fixes compatibility issues with the latest ansible\-core 2\.11 beta\, and contai ## v1\.5\.0 - + ### Release Summary Regular feature and bugfix release\. Deprecates a return value\. @@ -1248,7 +1264,7 @@ Regular feature and bugfix release\. Deprecates a return value\. * acme\_account\_info \- when retrieve\_orders\=url\_list\, orders will no longer be returned in community\.crypto 2\.0\.0\. Use order\_uris instead \([https\://github\.com/ansible\-collections/community\.crypto/pull/178](https\://github\.com/ansible\-collections/community\.crypto/pull/178)\)\. - + ### Bugfixes * openssl\_csr \- no longer fails when comparing CSR without basic constraint when basic\_constraints is specified \([https\://github\.com/ansible\-collections/community\.crypto/issues/179](https\://github\.com/ansible\-collections/community\.crypto/issues/179)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/180](https\://github\.com/ansible\-collections/community\.crypto/pull/180)\)\. @@ -1256,7 +1272,7 @@ Regular feature and bugfix release\. Deprecates a return value\. ## v1\.4\.0 - + ### Release Summary Release with several new features and bugfixes\. @@ -1271,7 +1287,7 @@ Release with several new features and bugfixes\. * openssl\_csr\, openssl\_csr\_pipe \- allow to specify CRL distribution endpoints with crl\_distribution\_points \([https\://github\.com/ansible\-collections/community\.crypto/issues/147](https\://github\.com/ansible\-collections/community\.crypto/issues/147)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/167](https\://github\.com/ansible\-collections/community\.crypto/pull/167)\)\. * openssl\_pkcs12 \- allow to specify certificate bundles in other\_certificates by using new option other\_certificates\_parse\_all \([https\://github\.com/ansible\-collections/community\.crypto/issues/149](https\://github\.com/ansible\-collections/community\.crypto/issues/149)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/166](https\://github\.com/ansible\-collections/community\.crypto/pull/166)\)\. - + ### Bugfixes * acme\_certificate \- error when requested challenge type is not found for non\-valid challenges\, instead of hanging on step 2 \([https\://github\.com/ansible\-collections/community\.crypto/issues/171](https\://github\.com/ansible\-collections/community\.crypto/issues/171)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/173](https\://github\.com/ansible\-collections/community\.crypto/pull/173)\)\. @@ -1279,7 +1295,7 @@ Release with several new features and bugfixes\. ## v1\.3\.0 - + ### Release Summary Contains new modules openssl\_privatekey\_pipe\, openssl\_csr\_pipe and x509\_certificate\_pipe which allow to create or update private keys\, CSRs and X\.509 certificates without having to write them to disk\. @@ -1294,7 +1310,7 @@ Contains new modules openssl\_privatekey\_pipe\, openssl\_csr * x509\_certificate \- for the selfsigned provider\, a CSR is not required anymore\. If no CSR is provided\, the module behaves as if a minimal CSR which only contains the public key has been provided \([https\://github\.com/ansible\-collections/community\.crypto/issues/32](https\://github\.com/ansible\-collections/community\.crypto/issues/32)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/129](https\://github\.com/ansible\-collections/community\.crypto/pull/129)\)\. * x509\_certificate \- refactor module to allow code reuse by x509\_certificate\_pipe \([https\://github\.com/ansible\-collections/community\.crypto/pull/135](https\://github\.com/ansible\-collections/community\.crypto/pull/135)\)\. - + ### Bugfixes * openssl\_pkcs12 \- report the correct state when action is parse \([https\://github\.com/ansible\-collections/community\.crypto/issues/143](https\://github\.com/ansible\-collections/community\.crypto/issues/143)\)\. @@ -1311,7 +1327,7 @@ Contains new modules openssl\_privatekey\_pipe\, openssl\_csr ## v1\.2\.0 - + ### Release Summary Please note that this release fixes a security issue \(CVE\-2020\-25646\)\. @@ -1332,7 +1348,7 @@ Please note that this release fixes a security issue \(CVE\-2020\-25646\)\. * x509\_certificate \- the options privatekey\_content and ownca\_privatekey\_content were not marked as no\_log\, resulting in it being dumped into the system log by default\, and returned in the registered results in the invocation field \(CVE\-2020\-25646\, [https\://github\.com/ansible\-collections/community\.crypto/pull/125](https\://github\.com/ansible\-collections/community\.crypto/pull/125)\)\. * x509\_crl \- the option privatekey\_content was not marked as no\_log\, resulting in it being dumped into the system log by default\, and returned in the registered results in the invocation field \(CVE\-2020\-25646\, [https\://github\.com/ansible\-collections/community\.crypto/pull/125](https\://github\.com/ansible\-collections/community\.crypto/pull/125)\)\. - + ### Bugfixes * openssl\_pkcs12 \- do not crash when reading PKCS\#12 file which has no private key and/or no main certificate \([https\://github\.com/ansible\-collections/community\.crypto/issues/103](https\://github\.com/ansible\-collections/community\.crypto/issues/103)\)\. @@ -1340,12 +1356,12 @@ Please note that this release fixes a security issue \(CVE\-2020\-25646\)\. ## v1\.1\.1 - + ### Release Summary Bugfixes for Ansible 2\.10\.0\. - + ### Bugfixes * meta/runtime\.yml \- convert Ansible version numbers for old names of modules to collection version numbers \([https\://github\.com/ansible\-collections/community\.crypto/pull/108](https\://github\.com/ansible\-collections/community\.crypto/pull/108)\)\. @@ -1354,7 +1370,7 @@ Bugfixes for Ansible 2\.10\.0\. ## v1\.1\.0 - + ### Release Summary Release for Ansible 2\.10\.0\. @@ -1372,7 +1388,7 @@ Release for Ansible 2\.10\.0\. * openssl\_csr \- add support for name constraints extension \([https\://github\.com/ansible\-collections/community\.crypto/issues/46](https\://github\.com/ansible\-collections/community\.crypto/issues/46)\)\. * openssl\_csr\_info \- add support for name constraints extension \([https\://github\.com/ansible\-collections/community\.crypto/issues/46](https\://github\.com/ansible\-collections/community\.crypto/issues/46)\)\. - + ### Bugfixes * acme\_inspect \- fix problem with Python 3\.5 that JSON was not decoded \([https\://github\.com/ansible\-collections/community\.crypto/issues/86](https\://github\.com/ansible\-collections/community\.crypto/issues/86)\)\. @@ -1388,7 +1404,7 @@ Release for Ansible 2\.10\.0\. ## v1\.0\.0 - + ### Release Summary This is the first proper release of the community\.crypto collection\. This changelog contains all changes to the modules in this collection that were added after the release of Ansible 2\.9\.0\. @@ -1432,7 +1448,7 @@ This is the first proper release of the community\.crypto collectio * The letsencrypt module has been removed\. Use acme\_certificate instead\. - + ### Bugfixes * ACME modules\: fix bug in ACME v1 account update code diff --git a/CHANGELOG.rst b/CHANGELOG.rst index bd1ac6b03..974265e62 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -4,6 +4,19 @@ Community Crypto Release Notes .. contents:: Topics +v2.21.1 +======= + +Release Summary +--------------- + +Maintenance release. + +Bugfixes +-------- + +- When using cryptography >= 43.0.0, use offset-aware ``datetime.datetime`` objects (with timezone UTC) instead of offset-naive UTC timestamps for the ``InvalidityDate`` X.509 CRL extension (https://github.com/ansible-collections/community.crypto/issues/726, https://github.com/ansible-collections/community.crypto/pull/730). + v2.21.0 ======= diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml index 9db1757a1..23f4ddfd5 100644 --- a/changelogs/changelog.yaml +++ b/changelogs/changelog.yaml @@ -1465,3 +1465,15 @@ releases: - 779-add-tls_ctx_options-option.yml - 784-get_certificate-get_certificate_chain.yml release_date: '2024-07-12' + 2.21.1: + changes: + bugfixes: + - When using cryptography >= 43.0.0, use offset-aware ``datetime.datetime`` + objects (with timezone UTC) instead of offset-naive UTC timestamps for the + ``InvalidityDate`` X.509 CRL extension (https://github.com/ansible-collections/community.crypto/issues/726, + https://github.com/ansible-collections/community.crypto/pull/730). + release_summary: Maintenance release. + fragments: + - 2.21.1.yml + - 730-cryptography-invalidity_date.yml + release_date: '2024-07-21' diff --git a/changelogs/fragments/2.21.1.yml b/changelogs/fragments/2.21.1.yml deleted file mode 100644 index 778e3fb7f..000000000 --- a/changelogs/fragments/2.21.1.yml +++ /dev/null @@ -1 +0,0 @@ -release_summary: Maintenance release. diff --git a/changelogs/fragments/730-cryptography-invalidity_date.yml b/changelogs/fragments/730-cryptography-invalidity_date.yml deleted file mode 100644 index c356aaf41..000000000 --- a/changelogs/fragments/730-cryptography-invalidity_date.yml +++ /dev/null @@ -1,2 +0,0 @@ -bugfixes: - - When using cryptography >= 43.0.0, use offset-aware ``datetime.datetime`` objects (with timezone UTC) instead of offset-naive UTC timestamps for the ``InvalidityDate`` X.509 CRL extension (https://github.com/ansible-collections/community.crypto/issues/726, https://github.com/ansible-collections/community.crypto/pull/730).