From 31579ed2378208a5234bfe3227f560aa1dc4a040 Mon Sep 17 00:00:00 2001 From: Felix Fontein Date: Mon, 20 May 2024 11:30:53 +0200 Subject: [PATCH] Release 1.9.25. --- CHANGELOG.md | 488 +++++++++--------- CHANGELOG.rst | 14 + changelogs/changelog.yaml | 13 + changelogs/fragments/1.9.25.yml | 1 - changelogs/fragments/733-math-prime.yml | 2 - ...40-ecs_certificate-renewal-without-csr.yml | 2 - 6 files changed, 280 insertions(+), 240 deletions(-) delete mode 100644 changelogs/fragments/1.9.25.yml delete mode 100644 changelogs/fragments/733-math-prime.yml delete mode 100644 changelogs/fragments/740-ecs_certificate-renewal-without-csr.yml diff --git a/CHANGELOG.md b/CHANGELOG.md index d4c6a530..21cf93b2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,140 +1,144 @@ # Community Crypto Release Notes **Topics** -- v1\.9\.24 - - Release Summary - - Bugfixes -- v1\.9\.23 - - Release Summary - - Bugfixes -- v1\.9\.22 - - Release Summary - - Bugfixes -- v1\.9\.21 - - Release Summary - - Bugfixes -- v1\.9\.20 - - Release Summary - - Bugfixes -- v1\.9\.19 - - Release Summary - - Bugfixes -- v1\.9\.18 - - Release Summary - - Bugfixes -- v1\.9\.17 - - Release Summary - - Bugfixes -- v1\.9\.16 - - Release Summary - - Bugfixes -- v1\.9\.15 - - Release Summary - - Bugfixes -- v1\.9\.14 - - Release Summary - - Bugfixes -- v1\.9\.13 - - Release Summary - - Bugfixes -- v1\.9\.12 - - Release Summary - - Bugfixes - - Known Issues -- v1\.9\.11 - - Release Summary - - Bugfixes -- v1\.9\.10 - - Release Summary - - Bugfixes -- v1\.9\.9 - - Bugfixes -- v1\.9\.8 - - Release Summary -- v1\.9\.7 - - Release Summary - - Minor Changes - - Bugfixes -- v1\.9\.6 - - Release Summary - - Bugfixes -- v1\.9\.5 - - Release Summary - - Bugfixes -- v1\.9\.4 - - Release Summary - - Bugfixes -- v1\.9\.3 - - Release Summary - - Bugfixes -- v1\.9\.2 - - Release Summary -- v1\.9\.1 - - Release Summary -- v1\.9\.0 - - Release Summary - - Minor Changes - - Bugfixes -- v1\.8\.0 - - Release Summary - - Minor Changes - - Bugfixes -- v1\.7\.1 - - Release Summary - - Bugfixes -- v1\.7\.0 - - Release Summary - - Minor Changes - - Bugfixes - - New Modules -- v1\.6\.2 - - Release Summary - - Bugfixes -- v1\.6\.1 - - Release Summary - - Bugfixes -- v1\.6\.0 - - Release Summary - - Minor Changes - - Deprecated Features - - Bugfixes -- v1\.5\.0 - - Release Summary - - Minor Changes - - Deprecated Features - - Bugfixes -- v1\.4\.0 - - Release Summary - - Minor Changes - - Bugfixes -- v1\.3\.0 - - Release Summary - - Minor Changes - - Bugfixes - - New Modules -- v1\.2\.0 - - Release Summary - - Minor Changes - - Security Fixes - - Bugfixes -- v1\.1\.1 - - Release Summary - - Bugfixes -- v1\.1\.0 - - Release Summary - - Minor Changes - - Bugfixes - - New Modules -- v1\.0\.0 - - Release Summary - - Minor Changes - - Deprecated Features - - Removed Features \(previously deprecated\) - - Bugfixes - - New Modules - -## v1\.9\.24 +- v1\.9\.25 + - Release Summary + - Bugfixes +- v1\.9\.24 + - Release Summary + - Bugfixes +- v1\.9\.23 + - Release Summary + - Bugfixes +- v1\.9\.22 + - Release Summary + - Bugfixes +- v1\.9\.21 + - Release Summary + - Bugfixes +- v1\.9\.20 + - Release Summary + - Bugfixes +- v1\.9\.19 + - Release Summary + - Bugfixes +- v1\.9\.18 + - Release Summary + - Bugfixes +- v1\.9\.17 + - Release Summary + - Bugfixes +- v1\.9\.16 + - Release Summary + - Bugfixes +- v1\.9\.15 + - Release Summary + - Bugfixes +- v1\.9\.14 + - Release Summary + - Bugfixes +- v1\.9\.13 + - Release Summary + - Bugfixes +- v1\.9\.12 + - Release Summary + - Bugfixes + - Known Issues +- v1\.9\.11 + - Release Summary + - Bugfixes +- v1\.9\.10 + - Release Summary + - Bugfixes +- v1\.9\.9 + - Bugfixes +- v1\.9\.8 + - Release Summary +- v1\.9\.7 + - Release Summary + - Minor Changes + - Bugfixes +- v1\.9\.6 + - Release Summary + - Bugfixes +- v1\.9\.5 + - Release Summary + - Bugfixes +- v1\.9\.4 + - Release Summary + - Bugfixes +- v1\.9\.3 + - Release Summary + - Bugfixes +- v1\.9\.2 + - Release Summary +- v1\.9\.1 + - Release Summary +- v1\.9\.0 + - Release Summary + - Minor Changes + - Bugfixes +- v1\.8\.0 + - Release Summary + - Minor Changes + - Bugfixes +- v1\.7\.1 + - Release Summary + - Bugfixes +- v1\.7\.0 + - Release Summary + - Minor Changes + - Bugfixes + - New Modules +- v1\.6\.2 + - Release Summary + - Bugfixes +- v1\.6\.1 + - Release Summary + - Bugfixes +- v1\.6\.0 + - Release Summary + - Minor Changes + - Deprecated Features + - Bugfixes +- v1\.5\.0 + - Release Summary + - Minor Changes + - Deprecated Features + - Bugfixes +- v1\.4\.0 + - Release Summary + - Minor Changes + - Bugfixes +- v1\.3\.0 + - Release Summary + - Minor Changes + - Bugfixes + - New Modules +- v1\.2\.0 + - Release Summary + - Minor Changes + - Security Fixes + - Bugfixes +- v1\.1\.1 + - Release Summary + - Bugfixes +- v1\.1\.0 + - Release Summary + - Minor Changes + - Bugfixes + - New Modules +- v1\.0\.0 + - Release Summary + - Minor Changes + - Deprecated Features + - Removed Features \(previously deprecated\) + - Bugfixes + - New Modules + + +## v1\.9\.25 ### Release Summary @@ -144,12 +148,11 @@ Bugfix release\. ### Bugfixes -* openssl\_dhparam \- was using an internal function instead of the public API to load DH param files when using the cryptography backend\. The internal function was removed in cryptography 42\.0\.0\. The module now uses the public API\, which has been available since support for DH params was added to cryptography \([https\://github\.com/ansible\-collections/community\.crypto/pull/698](https\://github\.com/ansible\-collections/community\.crypto/pull/698)\)\. -* openssl\_privatekey\_info \- check\_consistency\=true no longer works for RSA keys with cryptography 42\.0\.0\+ \([https\://github\.com/ansible\-collections/community\.crypto/pull/701](https\://github\.com/ansible\-collections/community\.crypto/pull/701)\)\. -* x509\_certificate \- when using the PyOpenSSL backend with provider\=assertonly\, better handle unexpected errors when validating private keys \([https\://github\.com/ansible\-collections/community\.crypto/pull/704](https\://github\.com/ansible\-collections/community\.crypto/pull/704)\)\. +* crypto\.math module utils \- change return values for quick\_is\_not\_prime\(\) for special cases that do not appear when using the collection \([https\://github\.com/ansible\-collections/community\.crypto/pull/733](https\://github\.com/ansible\-collections/community\.crypto/pull/733)\)\. +* ecs\_certificate \- fixed csr option to be empty and allow renewal of a specific certificate according to the Renewal Information specification \([https\://github\.com/ansible\-collections/community\.crypto/pull/740](https\://github\.com/ansible\-collections/community\.crypto/pull/740)\)\. - -## v1\.9\.23 + +## v1\.9\.24 ### Release Summary @@ -159,10 +162,12 @@ Bugfix release\. ### Bugfixes -* openssl\_pkcs12 \- modify autodetect to not detect pyOpenSSL \>\= 23\.3\.0\, which removed PKCS\#12 support \([https\://github\.com/ansible\-collections/community\.crypto/pull/666](https\://github\.com/ansible\-collections/community\.crypto/pull/666)\)\. +* openssl\_dhparam \- was using an internal function instead of the public API to load DH param files when using the cryptography backend\. The internal function was removed in cryptography 42\.0\.0\. The module now uses the public API\, which has been available since support for DH params was added to cryptography \([https\://github\.com/ansible\-collections/community\.crypto/pull/698](https\://github\.com/ansible\-collections/community\.crypto/pull/698)\)\. +* openssl\_privatekey\_info \- check\_consistency\=true no longer works for RSA keys with cryptography 42\.0\.0\+ \([https\://github\.com/ansible\-collections/community\.crypto/pull/701](https\://github\.com/ansible\-collections/community\.crypto/pull/701)\)\. +* x509\_certificate \- when using the PyOpenSSL backend with provider\=assertonly\, better handle unexpected errors when validating private keys \([https\://github\.com/ansible\-collections/community\.crypto/pull/704](https\://github\.com/ansible\-collections/community\.crypto/pull/704)\)\. - -## v1\.9\.22 + +## v1\.9\.23 ### Release Summary @@ -172,10 +177,10 @@ Bugfix release\. ### Bugfixes -* openssh\_keypair \- always generate a new key pair if the private key does not exist\. Previously\, the module would fail when regenerate\=fail without an existing key\, contradicting the documentation \([https\://github\.com/ansible\-collections/community\.crypto/pull/598](https\://github\.com/ansible\-collections/community\.crypto/pull/598)\)\. +* openssl\_pkcs12 \- modify autodetect to not detect pyOpenSSL \>\= 23\.3\.0\, which removed PKCS\#12 support \([https\://github\.com/ansible\-collections/community\.crypto/pull/666](https\://github\.com/ansible\-collections/community\.crypto/pull/666)\)\. - -## v1\.9\.21 + +## v1\.9\.22 ### Release Summary @@ -185,11 +190,10 @@ Bugfix release\. ### Bugfixes -* action plugin helper \- fix handling of deprecations for ansible\-core 2\.14\.2 \([https\://github\.com/ansible\-collections/community\.crypto/pull/572](https\://github\.com/ansible\-collections/community\.crypto/pull/572)\)\. -* openssl\_csr\, openssl\_csr\_pipe \- prevent invalid values for crl\_distribution\_points that do not have one of full\_name\, relative\_name\, and crl\_issuer \([https\://github\.com/ansible\-collections/community\.crypto/pull/560](https\://github\.com/ansible\-collections/community\.crypto/pull/560)\)\. +* openssh\_keypair \- always generate a new key pair if the private key does not exist\. Previously\, the module would fail when regenerate\=fail without an existing key\, contradicting the documentation \([https\://github\.com/ansible\-collections/community\.crypto/pull/598](https\://github\.com/ansible\-collections/community\.crypto/pull/598)\)\. - -## v1\.9\.20 + +## v1\.9\.21 ### Release Summary @@ -199,10 +203,11 @@ Bugfix release\. ### Bugfixes -* openssl\_publickey\_info \- do not crash with internal error when public key cannot be parsed \([https\://github\.com/ansible\-collections/community\.crypto/pull/551](https\://github\.com/ansible\-collections/community\.crypto/pull/551)\)\. +* action plugin helper \- fix handling of deprecations for ansible\-core 2\.14\.2 \([https\://github\.com/ansible\-collections/community\.crypto/pull/572](https\://github\.com/ansible\-collections/community\.crypto/pull/572)\)\. +* openssl\_csr\, openssl\_csr\_pipe \- prevent invalid values for crl\_distribution\_points that do not have one of full\_name\, relative\_name\, and crl\_issuer \([https\://github\.com/ansible\-collections/community\.crypto/pull/560](https\://github\.com/ansible\-collections/community\.crypto/pull/560)\)\. - -## v1\.9\.19 + +## v1\.9\.20 ### Release Summary @@ -212,10 +217,10 @@ Bugfix release\. ### Bugfixes -* openssl\_privatekey\_pipe \- ensure compatibility with newer versions of ansible\-core \([https\://github\.com/ansible\-collections/community\.crypto/pull/515](https\://github\.com/ansible\-collections/community\.crypto/pull/515)\)\. +* openssl\_publickey\_info \- do not crash with internal error when public key cannot be parsed \([https\://github\.com/ansible\-collections/community\.crypto/pull/551](https\://github\.com/ansible\-collections/community\.crypto/pull/551)\)\. - -## v1\.9\.18 + +## v1\.9\.19 ### Release Summary @@ -225,10 +230,10 @@ Bugfix release\. ### Bugfixes -* openssl\_pkcs12 \- when using the pyOpenSSL backend\, do not crash when trying to read non\-existing other certificates \([https\://github\.com/ansible\-collections/community\.crypto/issues/486](https\://github\.com/ansible\-collections/community\.crypto/issues/486)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/487](https\://github\.com/ansible\-collections/community\.crypto/pull/487)\)\. +* openssl\_privatekey\_pipe \- ensure compatibility with newer versions of ansible\-core \([https\://github\.com/ansible\-collections/community\.crypto/pull/515](https\://github\.com/ansible\-collections/community\.crypto/pull/515)\)\. - -## v1\.9\.17 + +## v1\.9\.18 ### Release Summary @@ -238,6 +243,19 @@ Bugfix release\. ### Bugfixes +* openssl\_pkcs12 \- when using the pyOpenSSL backend\, do not crash when trying to read non\-existing other certificates \([https\://github\.com/ansible\-collections/community\.crypto/issues/486](https\://github\.com/ansible\-collections/community\.crypto/issues/486)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/487](https\://github\.com/ansible\-collections/community\.crypto/pull/487)\)\. + + +## v1\.9\.17 + + +### Release Summary + +Bugfix release\. + + +### Bugfixes + * Include Apache\-2\.0\.txt file for plugins/module\_utils/crypto/\_obj2txt\.py and plugins/module\_utils/crypto/\_objects\_data\.py\. * openssl\_csr \- the module no longer crashes with \'permitted\_subtrees/excluded\_subtrees must be a non\-empty list or None\' if only one of name\_constraints\_permitted and name\_constraints\_excluded is provided \([https\://github\.com/ansible\-collections/community\.crypto/issues/481](https\://github\.com/ansible\-collections/community\.crypto/issues/481)\)\. * x509\_crl \- do not crash when signing CRL with Ed25519 or Ed448 keys \([https\://github\.com/ansible\-collections/community\.crypto/issues/473](https\://github\.com/ansible\-collections/community\.crypto/issues/473)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/474](https\://github\.com/ansible\-collections/community\.crypto/pull/474)\)\. @@ -245,12 +263,12 @@ Bugfix release\. ## v1\.9\.16 - + ### Release Summary Maintenance and bugfix release\. - + ### Bugfixes * Include simplified\_bsd\.txt license file for the ECS module utils\. @@ -259,12 +277,12 @@ Maintenance and bugfix release\. ## v1\.9\.15 - + ### Release Summary Maintenance release\. - + ### Bugfixes * Include PSF\-license\.txt file for plugins/module\_utils/\_version\.py\. @@ -272,21 +290,6 @@ Maintenance release\. ## v1\.9\.14 - -### Release Summary - -Regular bugfix release\. - - -### Bugfixes - -* Make collection more robust when PyOpenSSL is used with an incompatible cryptography version \([https\://github\.com/ansible\-collections/community\.crypto/pull/446](https\://github\.com/ansible\-collections/community\.crypto/pull/446)\)\. -* openssh\_\* modules \- fix exception handling to report traceback to users for enhanced traceability \([https\://github\.com/ansible\-collections/community\.crypto/pull/417](https\://github\.com/ansible\-collections/community\.crypto/pull/417)\)\. -* x509\_crl \- fix crash when issuer for a revoked certificate is specified \([https\://github\.com/ansible\-collections/community\.crypto/pull/441](https\://github\.com/ansible\-collections/community\.crypto/pull/441)\)\. - - -## v1\.9\.13 - ### Release Summary @@ -295,10 +298,12 @@ Regular bugfix release\. ### Bugfixes -* luks\_device \- fix parsing of lsblk output when device name ends with crypt \([https\://github\.com/ansible\-collections/community\.crypto/issues/409](https\://github\.com/ansible\-collections/community\.crypto/issues/409)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/410](https\://github\.com/ansible\-collections/community\.crypto/pull/410)\)\. +* Make collection more robust when PyOpenSSL is used with an incompatible cryptography version \([https\://github\.com/ansible\-collections/community\.crypto/pull/446](https\://github\.com/ansible\-collections/community\.crypto/pull/446)\)\. +* openssh\_\* modules \- fix exception handling to report traceback to users for enhanced traceability \([https\://github\.com/ansible\-collections/community\.crypto/pull/417](https\://github\.com/ansible\-collections/community\.crypto/pull/417)\)\. +* x509\_crl \- fix crash when issuer for a revoked certificate is specified \([https\://github\.com/ansible\-collections/community\.crypto/pull/441](https\://github\.com/ansible\-collections/community\.crypto/pull/441)\)\. - -## v1\.9\.12 + +## v1\.9\.13 ### Release Summary @@ -308,6 +313,19 @@ Regular bugfix release\. ### Bugfixes +* luks\_device \- fix parsing of lsblk output when device name ends with crypt \([https\://github\.com/ansible\-collections/community\.crypto/issues/409](https\://github\.com/ansible\-collections/community\.crypto/issues/409)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/410](https\://github\.com/ansible\-collections/community\.crypto/pull/410)\)\. + + +## v1\.9\.12 + + +### Release Summary + +Regular bugfix release\. + + +### Bugfixes + * certificate\_complete\_chain \- allow multiple potential intermediate certificates to have the same subject \([https\://github\.com/ansible\-collections/community\.crypto/issues/399](https\://github\.com/ansible\-collections/community\.crypto/issues/399)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/403](https\://github\.com/ansible\-collections/community\.crypto/pull/403)\)\. * x509\_certificate \- for the ownca provider\, check whether the CA private key actually belongs to the CA certificate\. This fix only covers the cryptography backend\, not the pyopenssl backend \([https\://github\.com/ansible\-collections/community\.crypto/pull/407](https\://github\.com/ansible\-collections/community\.crypto/pull/407)\)\. * x509\_certificate \- regenerate certificate when the CA\'s public key changes for provider\=ownca\. This fix only covers the cryptography backend\, not the pyopenssl backend \([https\://github\.com/ansible\-collections/community\.crypto/pull/407](https\://github\.com/ansible\-collections/community\.crypto/pull/407)\)\. @@ -324,12 +342,12 @@ Regular bugfix release\. ## v1\.9\.11 - + ### Release Summary Bugfix release\. - + ### Bugfixes * openssh\_cert \- fixed false changed status for host certificates when using full\_idempotence \([https\://github\.com/ansible\-collections/community\.crypto/issues/395](https\://github\.com/ansible\-collections/community\.crypto/issues/395)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/396](https\://github\.com/ansible\-collections/community\.crypto/pull/396)\)\. @@ -337,12 +355,12 @@ Bugfix release\. ## v1\.9\.10 - + ### Release Summary Regular bugfix release\. - + ### Bugfixes * luks\_devices \- set LANG and similar environment variables to avoid translated output\, which can break some of the module\'s functionality like key management \([https\://github\.com/ansible\-collections/community\.crypto/pull/388](https\://github\.com/ansible\-collections/community\.crypto/pull/388)\, [https\://github\.com/ansible\-collections/community\.crypto/issues/385](https\://github\.com/ansible\-collections/community\.crypto/issues/385)\)\. @@ -350,7 +368,7 @@ Regular bugfix release\. ## v1\.9\.9 - + ### Bugfixes * Various modules and plugins \- use vendored version of distutils\.version instead of the deprecated Python standard library distutils \([https\://github\.com/ansible\-collections/community\.crypto/pull/353](https\://github\.com/ansible\-collections/community\.crypto/pull/353)\)\. @@ -360,7 +378,7 @@ Regular bugfix release\. ## v1\.9\.8 - + ### Release Summary Documentation fix release\. No actual code changes\. @@ -368,7 +386,7 @@ Documentation fix release\. No actual code changes\. ## v1\.9\.7 - + ### Release Summary Bugfix release with extra forward compatibility for newer versions of cryptography\. @@ -378,7 +396,7 @@ Bugfix release with extra forward compatibility for newer versions of cryptograp * acme\_\* modules \- fix usage of fetch\_url with changes in latest ansible\-core devel branch \([https\://github\.com/ansible\-collections/community\.crypto/pull/339](https\://github\.com/ansible\-collections/community\.crypto/pull/339)\)\. - + ### Bugfixes * acme\_certificate \- avoid passing multiple certificates to cryptography\'s X\.509 certificate loader when fullchain\_dest is used \([https\://github\.com/ansible\-collections/community\.crypto/pull/324](https\://github\.com/ansible\-collections/community\.crypto/pull/324)\)\. @@ -389,12 +407,12 @@ Bugfix release with extra forward compatibility for newer versions of cryptograp ## v1\.9\.6 - + ### Release Summary Regular bugfix release\. - + ### Bugfixes * cryptography backend \- improve Unicode handling for Python 2 \([https\://github\.com/ansible\-collections/community\.crypto/pull/313](https\://github\.com/ansible\-collections/community\.crypto/pull/313)\)\. @@ -402,12 +420,12 @@ Regular bugfix release\. ## v1\.9\.5 - + ### Release Summary Bugfix release to fully support cryptography 35\.0\.0\. - + ### Bugfixes * get\_certificate \- fix compatibility with the cryptography 35\.0\.0 release \([https\://github\.com/ansible\-collections/community\.crypto/pull/294](https\://github\.com/ansible\-collections/community\.crypto/pull/294)\)\. @@ -420,20 +438,6 @@ Bugfix release to fully support cryptography 35\.0\.0\. ## v1\.9\.4 - -### Release Summary - -Regular bugfix release\. - - -### Bugfixes - -* acme\_\* modules \- fix commands composed for OpenSSL backend to retrieve information on CSRs and certificates from stdin to use /dev/stdin instead of \-\. This is needed for OpenSSL 1\.0\.1 and 1\.0\.2\, apparently \([https\://github\.com/ansible\-collections/community\.crypto/pull/279](https\://github\.com/ansible\-collections/community\.crypto/pull/279)\)\. -* acme\_challenge\_cert\_helper \- only return exception when cryptography is not installed\, not when a too old version of it is installed\. This prevents Ansible\'s callback to crash \([https\://github\.com/ansible\-collections/community\.crypto/pull/281](https\://github\.com/ansible\-collections/community\.crypto/pull/281)\)\. - - -## v1\.9\.3 - ### Release Summary @@ -442,12 +446,26 @@ Regular bugfix release\. ### Bugfixes +* acme\_\* modules \- fix commands composed for OpenSSL backend to retrieve information on CSRs and certificates from stdin to use /dev/stdin instead of \-\. This is needed for OpenSSL 1\.0\.1 and 1\.0\.2\, apparently \([https\://github\.com/ansible\-collections/community\.crypto/pull/279](https\://github\.com/ansible\-collections/community\.crypto/pull/279)\)\. +* acme\_challenge\_cert\_helper \- only return exception when cryptography is not installed\, not when a too old version of it is installed\. This prevents Ansible\'s callback to crash \([https\://github\.com/ansible\-collections/community\.crypto/pull/281](https\://github\.com/ansible\-collections/community\.crypto/pull/281)\)\. + + +## v1\.9\.3 + + +### Release Summary + +Regular bugfix release\. + + +### Bugfixes + * openssl\_csr and openssl\_csr\_pipe \- make sure that Unicode strings are used to compare strings with the cryptography backend\. This fixes idempotency problems with non\-ASCII letters on Python 2 \([https\://github\.com/ansible\-collections/community\.crypto/issues/270](https\://github\.com/ansible\-collections/community\.crypto/issues/270)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/271](https\://github\.com/ansible\-collections/community\.crypto/pull/271)\)\. ## v1\.9\.2 - + ### Release Summary Bugfix release to fix the changelog\. No other change compared to 1\.9\.0\. @@ -455,7 +473,7 @@ Bugfix release to fix the changelog\. No other change compared to 1\.9\.0\. ## v1\.9\.1 - + ### Release Summary Accidental 1\.9\.1 release\. Identical to 1\.9\.0\. @@ -463,7 +481,7 @@ Accidental 1\.9\.1 release\. Identical to 1\.9\.0\. ## v1\.9\.0 - + ### Release Summary Regular feature release\. @@ -474,7 +492,7 @@ Regular feature release\. * get\_certificate \- added starttls option to retrieve certificates from servers which require clients to request an encrypted connection \([https\://github\.com/ansible\-collections/community\.crypto/pull/264](https\://github\.com/ansible\-collections/community\.crypto/pull/264)\)\. * openssh\_keypair \- added diff support \([https\://github\.com/ansible\-collections/community\.crypto/pull/260](https\://github\.com/ansible\-collections/community\.crypto/pull/260)\)\. - + ### Bugfixes * keypair\_backend module utils \- simplify code to pass sanity tests \([https\://github\.com/ansible\-collections/community\.crypto/pull/263](https\://github\.com/ansible\-collections/community\.crypto/pull/263)\)\. @@ -485,7 +503,7 @@ Regular feature release\. ## v1\.8\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -498,7 +516,7 @@ Regular bugfix and feature release\. * openssh\_cert \- added regenerate option to validate additional certificate parameters which trigger regeneration of an existing certificate \([https\://github\.com/ansible\-collections/community\.crypto/pull/256](https\://github\.com/ansible\-collections/community\.crypto/pull/256)\)\. * openssh\_cert \- adding diff support \([https\://github\.com/ansible\-collections/community\.crypto/pull/255](https\://github\.com/ansible\-collections/community\.crypto/pull/255)\)\. - + ### Bugfixes * openssh\_cert \- fixed certificate generation to restore original certificate if an error is encountered \([https\://github\.com/ansible\-collections/community\.crypto/pull/255](https\://github\.com/ansible\-collections/community\.crypto/pull/255)\)\. @@ -507,12 +525,12 @@ Regular bugfix and feature release\. ## v1\.7\.1 - + ### Release Summary Bugfix release\. - + ### Bugfixes * openssl\_pkcs12 \- fix crash when loading passphrase\-protected PKCS\#12 files with cryptography backend \([https\://github\.com/ansible\-collections/community\.crypto/issues/247](https\://github\.com/ansible\-collections/community\.crypto/issues/247)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/248](https\://github\.com/ansible\-collections/community\.crypto/pull/248)\)\. @@ -520,7 +538,7 @@ Bugfix release\. ## v1\.7\.0 - + ### Release Summary Regular feature and bugfix release\. @@ -548,7 +566,7 @@ Regular feature and bugfix release\. * x509\_crl\_info \- add list\_revoked\_certificates option to avoid enumerating all revoked certificates \([https\://github\.com/ansible\-collections/community\.crypto/pull/232](https\://github\.com/ansible\-collections/community\.crypto/pull/232)\)\. * x509\_crl\_info \- refactor module to allow code re\-use for diff mode \([https\://github\.com/ansible\-collections/community\.crypto/pull/203](https\://github\.com/ansible\-collections/community\.crypto/pull/203)\)\. - + ### Bugfixes * openssh\_keypair \- fix check\_mode to populate return values for existing keypairs \([https\://github\.com/ansible\-collections/community\.crypto/issues/113](https\://github\.com/ansible\-collections/community\.crypto/issues/113)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/230](https\://github\.com/ansible\-collections/community\.crypto/pull/230)\)\. @@ -563,12 +581,12 @@ Regular feature and bugfix release\. ## v1\.6\.2 - + ### Release Summary Bugfix release\. Fixes compatibility issue of ACME modules with step\-ca\. - + ### Bugfixes * acme\_\* modules \- avoid crashing for ACME servers where the meta directory key is not present \([https\://github\.com/ansible\-collections/community\.crypto/issues/220](https\://github\.com/ansible\-collections/community\.crypto/issues/220)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/221](https\://github\.com/ansible\-collections/community\.crypto/pull/221)\)\. @@ -576,12 +594,12 @@ Bugfix release\. Fixes compatibility issue of ACME modules with step\-ca\. ## v1\.6\.1 - + ### Release Summary Bugfix release\. - + ### Bugfixes * acme\_\* modules \- fix wrong usages of ACMEProtocolException \([https\://github\.com/ansible\-collections/community\.crypto/pull/216](https\://github\.com/ansible\-collections/community\.crypto/pull/216)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/217](https\://github\.com/ansible\-collections/community\.crypto/pull/217)\)\. @@ -589,7 +607,7 @@ Bugfix release\. ## v1\.6\.0 - + ### Release Summary Fixes compatibility issues with the latest ansible\-core 2\.11 beta\, and contains a lot of internal refactoring for the ACME modules and support for private key passphrases for them\. @@ -608,7 +626,7 @@ Fixes compatibility issues with the latest ansible\-core 2\.11 beta\, and contai * acme module\_utils \- the acme module\_utils \(ansible\_collections\.community\.crypto\.plugins\.module\_utils\.acme\) is deprecated and will be removed in community\.crypto 2\.0\.0\. Use the new Python modules in the acme package instead \(ansible\_collections\.community\.crypto\.plugins\.module\_utils\.acme\.xxx\) \([https\://github\.com/ansible\-collections/community\.crypto/pull/184](https\://github\.com/ansible\-collections/community\.crypto/pull/184)\)\. - + ### Bugfixes * action\_module plugin helper \- make compatible with latest changes in ansible\-core 2\.11\.0b3 \([https\://github\.com/ansible\-collections/community\.crypto/pull/202](https\://github\.com/ansible\-collections/community\.crypto/pull/202)\)\. @@ -617,7 +635,7 @@ Fixes compatibility issues with the latest ansible\-core 2\.11 beta\, and contai ## v1\.5\.0 - + ### Release Summary Regular feature and bugfix release\. Deprecates a return value\. @@ -633,7 +651,7 @@ Regular feature and bugfix release\. Deprecates a return value\. * acme\_account\_info \- when retrieve\_orders\=url\_list\, orders will no longer be returned in community\.crypto 2\.0\.0\. Use order\_uris instead \([https\://github\.com/ansible\-collections/community\.crypto/pull/178](https\://github\.com/ansible\-collections/community\.crypto/pull/178)\)\. - + ### Bugfixes * openssl\_csr \- no longer fails when comparing CSR without basic constraint when basic\_constraints is specified \([https\://github\.com/ansible\-collections/community\.crypto/issues/179](https\://github\.com/ansible\-collections/community\.crypto/issues/179)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/180](https\://github\.com/ansible\-collections/community\.crypto/pull/180)\)\. @@ -641,7 +659,7 @@ Regular feature and bugfix release\. Deprecates a return value\. ## v1\.4\.0 - + ### Release Summary Release with several new features and bugfixes\. @@ -656,7 +674,7 @@ Release with several new features and bugfixes\. * openssl\_csr\, openssl\_csr\_pipe \- allow to specify CRL distribution endpoints with crl\_distribution\_points \([https\://github\.com/ansible\-collections/community\.crypto/issues/147](https\://github\.com/ansible\-collections/community\.crypto/issues/147)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/167](https\://github\.com/ansible\-collections/community\.crypto/pull/167)\)\. * openssl\_pkcs12 \- allow to specify certificate bundles in other\_certificates by using new option other\_certificates\_parse\_all \([https\://github\.com/ansible\-collections/community\.crypto/issues/149](https\://github\.com/ansible\-collections/community\.crypto/issues/149)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/166](https\://github\.com/ansible\-collections/community\.crypto/pull/166)\)\. - + ### Bugfixes * acme\_certificate \- error when requested challenge type is not found for non\-valid challenges\, instead of hanging on step 2 \([https\://github\.com/ansible\-collections/community\.crypto/issues/171](https\://github\.com/ansible\-collections/community\.crypto/issues/171)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/173](https\://github\.com/ansible\-collections/community\.crypto/pull/173)\)\. @@ -664,7 +682,7 @@ Release with several new features and bugfixes\. ## v1\.3\.0 - + ### Release Summary Contains new modules openssl\_privatekey\_pipe\, openssl\_csr\_pipe and x509\_certificate\_pipe which allow to create or update private keys\, CSRs and X\.509 certificates without having to write them to disk\. @@ -679,7 +697,7 @@ Contains new modules openssl\_privatekey\_pipe\, openssl\_csr * x509\_certificate \- for the selfsigned provider\, a CSR is not required anymore\. If no CSR is provided\, the module behaves as if a minimal CSR which only contains the public key has been provided \([https\://github\.com/ansible\-collections/community\.crypto/issues/32](https\://github\.com/ansible\-collections/community\.crypto/issues/32)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/129](https\://github\.com/ansible\-collections/community\.crypto/pull/129)\)\. * x509\_certificate \- refactor module to allow code re\-use by x509\_certificate\_pipe \([https\://github\.com/ansible\-collections/community\.crypto/pull/135](https\://github\.com/ansible\-collections/community\.crypto/pull/135)\)\. - + ### Bugfixes * openssl\_pkcs12 \- report the correct state when action is parse \([https\://github\.com/ansible\-collections/community\.crypto/issues/143](https\://github\.com/ansible\-collections/community\.crypto/issues/143)\)\. @@ -696,7 +714,7 @@ Contains new modules openssl\_privatekey\_pipe\, openssl\_csr ## v1\.2\.0 - + ### Release Summary Please note that this release fixes a security issue \(CVE\-2020\-25646\)\. @@ -717,7 +735,7 @@ Please note that this release fixes a security issue \(CVE\-2020\-25646\)\. * x509\_certificate \- the options privatekey\_content and ownca\_privatekey\_content were not marked as no\_log\, resulting in it being dumped into the system log by default\, and returned in the registered results in the invocation field \(CVE\-2020\-25646\, [https\://github\.com/ansible\-collections/community\.crypto/pull/125](https\://github\.com/ansible\-collections/community\.crypto/pull/125)\)\. * x509\_crl \- the option privatekey\_content was not marked as no\_log\, resulting in it being dumped into the system log by default\, and returned in the registered results in the invocation field \(CVE\-2020\-25646\, [https\://github\.com/ansible\-collections/community\.crypto/pull/125](https\://github\.com/ansible\-collections/community\.crypto/pull/125)\)\. - + ### Bugfixes * openssl\_pkcs12 \- do not crash when reading PKCS\#12 file which has no private key and/or no main certificate \([https\://github\.com/ansible\-collections/community\.crypto/issues/103](https\://github\.com/ansible\-collections/community\.crypto/issues/103)\)\. @@ -725,12 +743,12 @@ Please note that this release fixes a security issue \(CVE\-2020\-25646\)\. ## v1\.1\.1 - + ### Release Summary Bugfixes for Ansible 2\.10\.0\. - + ### Bugfixes * meta/runtime\.yml \- convert Ansible version numbers for old names of modules to collection version numbers \([https\://github\.com/ansible\-collections/community\.crypto/pull/108](https\://github\.com/ansible\-collections/community\.crypto/pull/108)\)\. @@ -739,7 +757,7 @@ Bugfixes for Ansible 2\.10\.0\. ## v1\.1\.0 - + ### Release Summary Release for Ansible 2\.10\.0\. @@ -757,7 +775,7 @@ Release for Ansible 2\.10\.0\. * openssl\_csr \- add support for name constraints extension \([https\://github\.com/ansible\-collections/community\.crypto/issues/46](https\://github\.com/ansible\-collections/community\.crypto/issues/46)\)\. * openssl\_csr\_info \- add support for name constraints extension \([https\://github\.com/ansible\-collections/community\.crypto/issues/46](https\://github\.com/ansible\-collections/community\.crypto/issues/46)\)\. - + ### Bugfixes * acme\_inspect \- fix problem with Python 3\.5 that JSON was not decoded \([https\://github\.com/ansible\-collections/community\.crypto/issues/86](https\://github\.com/ansible\-collections/community\.crypto/issues/86)\)\. @@ -773,7 +791,7 @@ Release for Ansible 2\.10\.0\. ## v1\.0\.0 - + ### Release Summary This is the first proper release of the community\.crypto collection\. This changelog contains all changes to the modules in this collection that were added after the release of Ansible 2\.9\.0\. @@ -817,7 +835,7 @@ This is the first proper release of the community\.crypto collectio * The letsencrypt module has been removed\. Use acme\_certificate instead\. - + ### Bugfixes * ACME modules\: fix bug in ACME v1 account update code diff --git a/CHANGELOG.rst b/CHANGELOG.rst index 8562149a..80926d8c 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -4,6 +4,20 @@ Community Crypto Release Notes .. contents:: Topics +v1.9.25 +======= + +Release Summary +--------------- + +Bugfix release. + +Bugfixes +-------- + +- crypto.math module utils - change return values for ``quick_is_not_prime()`` for special cases that do not appear when using the collection (https://github.com/ansible-collections/community.crypto/pull/733). +- ecs_certificate - fixed ``csr`` option to be empty and allow renewal of a specific certificate according to the Renewal Information specification (https://github.com/ansible-collections/community.crypto/pull/740). + v1.9.24 ======= diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml index 4222ef4c..dd96739f 100644 --- a/changelogs/changelog.yaml +++ b/changelogs/changelog.yaml @@ -741,6 +741,19 @@ releases: - 701-private_key_info-consistency.yml - 704-x509_certificate-assertonly-privatekey.yml release_date: '2024-01-27' + 1.9.25: + changes: + bugfixes: + - crypto.math module utils - change return values for ``quick_is_not_prime()`` + for special cases that do not appear when using the collection (https://github.com/ansible-collections/community.crypto/pull/733). + - ecs_certificate - fixed ``csr`` option to be empty and allow renewal of a + specific certificate according to the Renewal Information specification (https://github.com/ansible-collections/community.crypto/pull/740). + release_summary: Bugfix release. + fragments: + - 1.9.25.yml + - 733-math-prime.yml + - 740-ecs_certificate-renewal-without-csr.yml + release_date: '2024-05-20' 1.9.3: changes: bugfixes: diff --git a/changelogs/fragments/1.9.25.yml b/changelogs/fragments/1.9.25.yml deleted file mode 100644 index 8ce9aa96..00000000 --- a/changelogs/fragments/1.9.25.yml +++ /dev/null @@ -1 +0,0 @@ -release_summary: Bugfix release. diff --git a/changelogs/fragments/733-math-prime.yml b/changelogs/fragments/733-math-prime.yml deleted file mode 100644 index 3c0e0cd0..00000000 --- a/changelogs/fragments/733-math-prime.yml +++ /dev/null @@ -1,2 +0,0 @@ -bugfixes: - - "crypto.math module utils - change return values for ``quick_is_not_prime()`` for special cases that do not appear when using the collection (https://github.com/ansible-collections/community.crypto/pull/733)." diff --git a/changelogs/fragments/740-ecs_certificate-renewal-without-csr.yml b/changelogs/fragments/740-ecs_certificate-renewal-without-csr.yml deleted file mode 100644 index bb7f15b0..00000000 --- a/changelogs/fragments/740-ecs_certificate-renewal-without-csr.yml +++ /dev/null @@ -1,2 +0,0 @@ -bugfixes: - - "ecs_certificate - fixed ``csr`` option to be empty and allow renewal of a specific certificate according to the Renewal Information specification (https://github.com/ansible-collections/community.crypto/pull/740)."