diff --git a/CHANGELOG.md b/CHANGELOG.md
index 65575a37..8ef4c355 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,252 +2,276 @@
**Topics**
-- v2\.22\.3
+- v2\.23\.0
- Release Summary
+ - Minor Changes
+ - Deprecated Features
+- v2\.22\.3
+ - Release Summary
- Bugfixes
- v2\.22\.2
- - Release Summary
+ - Release Summary
- Bugfixes
- v2\.22\.1
- - Release Summary
+ - Release Summary
- Bugfixes
- v2\.22\.0
- - Release Summary
- - Minor Changes
-- v2\.21\.1
- Release Summary
+ - Minor Changes
+- v2\.21\.1
+ - Release Summary
- Bugfixes
- v2\.21\.0
- - Release Summary
- - Minor Changes
-- v2\.20\.0
- Release Summary
- Minor Changes
- - Deprecated Features
+- v2\.20\.0
+ - Release Summary
+ - Minor Changes
+ - Deprecated Features
- Bugfixes
- New Modules
- v2\.19\.1
- - Release Summary
+ - Release Summary
- Bugfixes
- v2\.19\.0
- - Release Summary
- - Minor Changes
- - Deprecated Features
- - Bugfixes
- - New Modules
-- v2\.18\.0
- Release Summary
- Minor Changes
- Deprecated Features
+ - Bugfixes
+ - New Modules
+- v2\.18\.0
+ - Release Summary
+ - Minor Changes
+ - Deprecated Features
- Bugfixes
- New Plugins
- Filter
- v2\.17\.1
- - Release Summary
+ - Release Summary
- Bugfixes
- v2\.17\.0
- - Release Summary
- - Minor Changes
-- v2\.16\.2
- Release Summary
+ - Minor Changes
+- v2\.16\.2
+ - Release Summary
- Bugfixes
- v2\.16\.1
- - Release Summary
+ - Release Summary
- Bugfixes
- v2\.16\.0
- - Release Summary
- - Minor Changes
+ - Release Summary
+ - Minor Changes
- Bugfixes
- v2\.15\.1
- - Release Summary
+ - Release Summary
- Bugfixes
- v2\.15\.0
- - Release Summary
- - Minor Changes
- - Deprecated Features
+ - Release Summary
+ - Minor Changes
+ - Deprecated Features
- Bugfixes
- New Plugins
- Filter
- Lookup
- v2\.14\.1
- - Release Summary
+ - Release Summary
- Bugfixes
- Known Issues
- v2\.14\.0
- - Release Summary
- - Minor Changes
-- v2\.13\.1
- Release Summary
+ - Minor Changes
+- v2\.13\.1
+ - Release Summary
- Bugfixes
- v2\.13\.0
- - Release Summary
- - Minor Changes
- - Deprecated Features
- - Bugfixes
-- v2\.12\.0
- Release Summary
- Minor Changes
-- v2\.11\.1
+ - Deprecated Features
+ - Bugfixes
+- v2\.12\.0
- Release Summary
-- v2\.11\.0
- - Release Summary
- Minor Changes
+- v2\.11\.1
+ - Release Summary
+- v2\.11\.0
+ - Release Summary
+ - Minor Changes
- Bugfixes
- v2\.10\.0
- - Release Summary
+ - Release Summary
- Bugfixes
- New Plugins
- Filter
- v2\.9\.0
- - Release Summary
- - Minor Changes
-- v2\.8\.1
- Release Summary
-- v2\.8\.0
- - Release Summary
- Minor Changes
-- v2\.7\.1
+- v2\.8\.1
+ - Release Summary
+- v2\.8\.0
- Release Summary
+ - Minor Changes
+- v2\.7\.1
+ - Release Summary
- Bugfixes
- v2\.7\.0
- - Release Summary
- - Minor Changes
- - Bugfixes
-- v2\.6\.0
- Release Summary
- Minor Changes
-- v2\.5\.0
+ - Bugfixes
+- v2\.6\.0
- Release Summary
- Minor Changes
-- v2\.4\.0
+- v2\.5\.0
- Release Summary
- - Deprecated Features
+ - Minor Changes
+- v2\.4\.0
+ - Release Summary
+ - Deprecated Features
- Bugfixes
- v2\.3\.4
- - Release Summary
-- v2\.3\.3
- Release Summary
+- v2\.3\.3
+ - Release Summary
- Bugfixes
- v2\.3\.2
- - Release Summary
+ - Release Summary
- Bugfixes
- v2\.3\.1
- - Release Summary
+ - Release Summary
- Bugfixes
- v2\.3\.0
- - Release Summary
- - Minor Changes
+ - Release Summary
+ - Minor Changes
- Bugfixes
- v2\.2\.4
- - Release Summary
+ - Release Summary
- Bugfixes
- v2\.2\.3
- - Release Summary
+ - Release Summary
- Bugfixes
- v2\.2\.2
- - Release Summary
+ - Release Summary
- Bugfixes
- v2\.2\.1
- - Release Summary
+ - Release Summary
- Bugfixes
- v2\.2\.0
- - Release Summary
- - Minor Changes
- - Bugfixes
-- v2\.1\.0
- Release Summary
- Minor Changes
+ - Bugfixes
+- v2\.1\.0
+ - Release Summary
+ - Minor Changes
- Bugfixes
- New Modules
- v2\.0\.2
- - Release Summary
-- v2\.0\.1
- Release Summary
- - Minor Changes
- - Bugfixes
-- v2\.0\.0
+- v2\.0\.1
- Release Summary
- Minor Changes
+ - Bugfixes
+- v2\.0\.0
+ - Release Summary
+ - Minor Changes
- Breaking Changes / Porting Guide
- - Deprecated Features
+ - Deprecated Features
- Removed Features \(previously deprecated\)
- Bugfixes
- v1\.9\.4
- - Release Summary
+ - Release Summary
- Bugfixes
- v1\.9\.3
- - Release Summary
+ - Release Summary
- Bugfixes
- v1\.9\.2
- - Release Summary
-- v1\.9\.1
- Release Summary
-- v1\.9\.0
+- v1\.9\.1
- Release Summary
- - Minor Changes
- - Bugfixes
-- v1\.8\.0
+- v1\.9\.0
- Release Summary
- Minor Changes
+ - Bugfixes
+- v1\.8\.0
+ - Release Summary
+ - Minor Changes
- Bugfixes
- v1\.7\.1
- - Release Summary
+ - Release Summary
- Bugfixes
- v1\.7\.0
- - Release Summary
- - Minor Changes
+ - Release Summary
+ - Minor Changes
- Bugfixes
- New Modules
- v1\.6\.2
- - Release Summary
+ - Release Summary
- Bugfixes
- v1\.6\.1
- - Release Summary
+ - Release Summary
- Bugfixes
- v1\.6\.0
- - Release Summary
- - Minor Changes
- - Deprecated Features
- - Bugfixes
-- v1\.5\.0
- Release Summary
- Minor Changes
- Deprecated Features
- - Bugfixes
-- v1\.4\.0
+ - Bugfixes
+- v1\.5\.0
- Release Summary
- Minor Changes
- - Bugfixes
-- v1\.3\.0
+ - Deprecated Features
+ - Bugfixes
+- v1\.4\.0
- Release Summary
- Minor Changes
+ - Bugfixes
+- v1\.3\.0
+ - Release Summary
+ - Minor Changes
- Bugfixes
- New Modules
- v1\.2\.0
- - Release Summary
- - Minor Changes
+ - Release Summary
+ - Minor Changes
- Security Fixes
- Bugfixes
- v1\.1\.1
- - Release Summary
+ - Release Summary
- Bugfixes
- v1\.1\.0
- - Release Summary
- - Minor Changes
+ - Release Summary
+ - Minor Changes
- Bugfixes
- New Modules
- v1\.0\.0
- - Release Summary
- - Minor Changes
- - Deprecated Features
+ - Release Summary
+ - Minor Changes
+ - Deprecated Features
- Removed Features \(previously deprecated\)
- Bugfixes
- New Modules
+
+## v2\.23\.0
+
+
+### Release Summary
+
+Feature release\.
+
+
+### Minor Changes
+
+* acme\_certificate \- add compatibility for ACME CAs that are not fully RFC8555 compliant and do not provide challenges in authz objects \([https\://github\.com/ansible\-collections/community\.crypto/issues/824](https\://github\.com/ansible\-collections/community\.crypto/issues/824)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/832](https\://github\.com/ansible\-collections/community\.crypto/pull/832)\)\.
+* luks\_device \- allow to provide passphrases base64\-encoded \([https\://github\.com/ansible\-collections/community\.crypto/issues/827](https\://github\.com/ansible\-collections/community\.crypto/issues/827)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/829](https\://github\.com/ansible\-collections/community\.crypto/pull/829)\)\.
+* x509\_certificate\_convert \- add new option verify\_cert\_parsable which allows to check whether the certificate can actually be parsed \([https\://github\.com/ansible\-collections/community\.crypto/issues/809](https\://github\.com/ansible\-collections/community\.crypto/issues/809)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/830](https\://github\.com/ansible\-collections/community\.crypto/pull/830)\)\.
+
+
+### Deprecated Features
+
+* openssl\_pkcs12 \- the PyOpenSSL based backend is deprecated and will be removed from community\.crypto 3\.0\.0\. From that point on you need cryptography 3\.0 or newer to use this module \([https\://github\.com/ansible\-collections/community\.crypto/issues/667](https\://github\.com/ansible\-collections/community\.crypto/issues/667)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/831](https\://github\.com/ansible\-collections/community\.crypto/pull/831)\)\.
+
## v2\.22\.3
-
+
### Release Summary
Bugfix release\.
@@ -261,7 +285,7 @@ Bugfix release\.
## v2\.22\.2
-
+
### Release Summary
Bugfix release\.
@@ -274,7 +298,7 @@ Bugfix release\.
## v2\.22\.1
-
+
### Release Summary
Bugfix release\.
@@ -288,12 +312,12 @@ Bugfix release\.
## v2\.22\.0
-
+
### Release Summary
Feature release\.
-
+
### Minor Changes
* openssl\_privatekey\, openssl\_privatekey\_pipe \- add default value auto for cipher option\, which happens to be the only supported value for this option anyway\. Therefore it is no longer necessary to specify cipher\=auto when providing passphrase \([https\://github\.com/ansible\-collections/community\.crypto/issues/793](https\://github\.com/ansible\-collections/community\.crypto/issues/793)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/794](https\://github\.com/ansible\-collections/community\.crypto/pull/794)\)\.
@@ -301,7 +325,7 @@ Feature release\.
## v2\.21\.1
-
+
### Release Summary
Maintenance release\.
@@ -314,12 +338,12 @@ Maintenance release\.
## v2\.21\.0
-
+
### Release Summary
Feature release\.
-
+
### Minor Changes
* certificate\_complete\_chain \- add ability to identify Ed25519 and Ed448 complete chains \([https\://github\.com/ansible\-collections/community\.crypto/pull/777](https\://github\.com/ansible\-collections/community\.crypto/pull/777)\)\.
@@ -329,7 +353,7 @@ Feature release\.
## v2\.20\.0
-
+
### Release Summary
Feature and bugfix release\.
@@ -337,12 +361,12 @@ Feature and bugfix release\.
The deprecations in this release are only relevant for collections that use shared
code or docs fragments from this collection\.
-
+
### Minor Changes
* acme\_certificate \- add include\_renewal\_cert\_id option to allow requesting renewal of a specific certificate according to the current ACME Renewal Information specification draft \([https\://github\.com/ansible\-collections/community\.crypto/pull/739](https\://github\.com/ansible\-collections/community\.crypto/pull/739)\)\.
-
+
### Deprecated Features
* acme documentation fragment \- the default community\.crypto\.acme\[\.documentation\] docs fragment is deprecated and will be removed from community\.crypto 3\.0\.0\. Replace it with both the new community\.crypto\.acme\.basic and community\.crypto\.acme\.account fragments \([https\://github\.com/ansible\-collections/community\.crypto/pull/735](https\://github\.com/ansible\-collections/community\.crypto/pull/735)\)\.
@@ -364,7 +388,7 @@ code or docs fragments from this collection\.
## v2\.19\.1
-
+
### Release Summary
Bugfix release\.
@@ -379,18 +403,18 @@ Bugfix release\.
## v2\.19\.0
-
+
### Release Summary
Bugfix and feature release\.
-
+
### Minor Changes
* When using cryptography \>\= 42\.0\.0\, use offset\-aware datetime\.datetime objects \(with timezone UTC\) instead of offset\-naive UTC timestamps \([https\://github\.com/ansible\-collections/community\.crypto/issues/726](https\://github\.com/ansible\-collections/community\.crypto/issues/726)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/727](https\://github\.com/ansible\-collections/community\.crypto/pull/727)\)\.
* openssh\_cert \- avoid UTC functions deprecated in Python 3\.12 when using Python 3 \([https\://github\.com/ansible\-collections/community\.crypto/pull/727](https\://github\.com/ansible\-collections/community\.crypto/pull/727)\)\.
-
+
### Deprecated Features
* acme\.backends module utils \- from community\.crypto on\, all implementations of CryptoBackend must override get\_ordered\_csr\_identifiers\(\)\. The current default implementation\, which simply sorts the result of get\_csr\_identifiers\(\)\, will then be removed \([https\://github\.com/ansible\-collections/community\.crypto/pull/725](https\://github\.com/ansible\-collections/community\.crypto/pull/725)\)\.
@@ -408,17 +432,17 @@ Bugfix and feature release\.
## v2\.18\.0
-
+
### Release Summary
Bugfix and feature release\.
-
+
### Minor Changes
* x509\_crl \- the new option serial\_numbers allow to configure in which format serial numbers can be provided to revoked\_certificates\[\]\.serial\_number\. The default is as integers \(serial\_numbers\=integer\) for backwards compatibility\; setting serial\_numbers\=hex\-octets allows to specify colon\-separated hex octet strings like 00\:11\:22\:FF \([https\://github\.com/ansible\-collections/community\.crypto/issues/687](https\://github\.com/ansible\-collections/community\.crypto/issues/687)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/715](https\://github\.com/ansible\-collections/community\.crypto/pull/715)\)\.
-
+
### Deprecated Features
* openssl\_csr\_pipe\, openssl\_privatekey\_pipe\, x509\_certificate\_pipe \- the current behavior of check mode is deprecated and will change in community\.crypto 3\.0\.0\. The current behavior is similar to the modules without \_pipe\: if the object needs to be \(re\-\)generated\, only the changed status is set\, but the object is not updated\. From community\.crypto 3\.0\.0 on\, the modules will ignore check mode and always act as if check mode is not active\. This behavior can already achieved now by adding check\_mode\: false to the task\. If you think this breaks your use\-case of this module\, please [create an issue in the community\.crypto repository](https\://github\.com/ansible\-collections/community\.crypto/issues/new/choose) \([https\://github\.com/ansible\-collections/community\.crypto/issues/712](https\://github\.com/ansible\-collections/community\.crypto/issues/712)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/714](https\://github\.com/ansible\-collections/community\.crypto/pull/714)\)\.
@@ -442,7 +466,7 @@ Bugfix and feature release\.
## v2\.17\.1
-
+
### Release Summary
Bugfix release for compatibility with cryptography 42\.0\.0\.
@@ -457,12 +481,12 @@ Bugfix release for compatibility with cryptography 42\.0\.0\.
## v2\.17\.0
-
+
### Release Summary
Feature release\.
-
+
### Minor Changes
* luks\_device \- add allow discards option \([https\://github\.com/ansible\-collections/community\.crypto/pull/693](https\://github\.com/ansible\-collections/community\.crypto/pull/693)\)\.
@@ -470,7 +494,7 @@ Feature release\.
## v2\.16\.2
-
+
### Release Summary
Bugfix release\.
@@ -486,7 +510,7 @@ Bugfix release\.
## v2\.16\.1
-
+
### Release Summary
Bugfix release\.
@@ -499,12 +523,12 @@ Bugfix release\.
## v2\.16\.0
-
+
### Release Summary
Bugfix release\.
-
+
### Minor Changes
* luks\_devices \- add new options keyslot\, new\_keyslot\, and remove\_keyslot to allow adding/removing keys to/from specific keyslots \([https\://github\.com/ansible\-collections/community\.crypto/pull/664](https\://github\.com/ansible\-collections/community\.crypto/pull/664)\)\.
@@ -517,7 +541,7 @@ Bugfix release\.
## v2\.15\.1
-
+
### Release Summary
Bugfix release\.
@@ -530,17 +554,17 @@ Bugfix release\.
## v2\.15\.0
-
+
### Release Summary
Bugfix and feature release\.
-
+
### Minor Changes
* openssh\_keypair \- fail when comment cannot be updated \([https\://github\.com/ansible\-collections/community\.crypto/pull/646](https\://github\.com/ansible\-collections/community\.crypto/pull/646)\)\.
-
+
### Deprecated Features
* get\_certificate \- the default false of the asn1\_base64 option is deprecated and will change to true in community\.crypto 3\.0\.0 \([https\://github\.com/ansible\-collections/community\.crypto/pull/600](https\://github\.com/ansible\-collections/community\.crypto/pull/600)\)\.
@@ -567,7 +591,7 @@ Bugfix and feature release\.
## v2\.14\.1
-
+
### Release Summary
Bugfix and maintenance release with updated documentation\.
@@ -593,12 +617,12 @@ for the rendered HTML version of the documentation of the latest release\.
## v2\.14\.0
-
+
### Release Summary
Feature release\.
-
+
### Minor Changes
* acme\_certificate \- allow to use no challenge by providing no challenge for the challenge option\. This is needed for ACME servers where validation is done without challenges \([https\://github\.com/ansible\-collections/community\.crypto/issues/613](https\://github\.com/ansible\-collections/community\.crypto/issues/613)\, [https\://github\.com/ansible\-collections/community\.crypto/pull/615](https\://github\.com/ansible\-collections/community\.crypto/pull/615)\)\.
@@ -608,7 +632,7 @@ Feature release\.
## v2\.13\.1
-
+
### Release Summary
Bugfix release\.
@@ -622,17 +646,17 @@ Bugfix release\.
## v2\.13\.0
-
+
### Release Summary
Bugfix and maintenance release\.
-
+
### Minor Changes
* x509\_crl \- the crl\_mode option has been added to replace the existing mode option \([https\://github\.com/ansible\-collections/community\.crypto/issues/596](https\://github\.com/ansible\-collections/community\.crypto/issues/596)\)\.
-
+
### Deprecated Features
* x509\_crl \- the mode option is deprecated\; use crl\_mode instead\. The mode option will change its meaning in community\.crypto 3\.0\.0\, and will refer to the CRL file\'s mode instead \([https\://github\.com/ansible\-collections/community\.crypto/issues/596](https\://github\.com/ansible\-collections/community\.crypto/issues/596)\)\.
@@ -646,12 +670,12 @@ Bugfix and maintenance release\.
## v2\.12\.0
-
+
### Release Summary
Feature release\.
-
+
### Minor Changes
* get\_certificate \- add asn1\_base64 option to control whether the ASN\.1 included in the extensions return value is binary data or Base64 encoded \([https\://github\.com/ansible\-collections/community\.crypto/pull/592](https\://github\.com/ansible\-collections/community\.crypto/pull/592)\)\.
@@ -659,7 +683,7 @@ Feature release\.
## v2\.11\.1
-
+
### Release Summary
Maintenance release with improved documentation\.
@@ -667,12 +691,12 @@ Maintenance release with improved documentation\.
## v2\.11\.0
-
+
### Release Summary
Feature and bugfix release\.
-
+
### Minor Changes
* get\_certificate \- adds ciphers option for custom cipher selection \([https\://github\.com/ansible\-collections/community\.crypto/pull/571](https\://github\.com/ansible\-collections/community\.crypto/pull/571)\)\.
@@ -687,7 +711,7 @@ Feature and bugfix release\.
## v2\.10\.0
-
+
### Release Summary
Bugfix and feature release\.
@@ -714,12 +738,12 @@ Bugfix and feature release\.
## v2\.9\.0
-
+
### Release Summary
Regular feature release\.
-
+
### Minor Changes
* x509\_certificate\_info \- adds issuer\_uri field in return value based on Authority Information Access data \([https\://github\.com/ansible\-collections/community\.crypto/pull/530](https\://github\.com/ansible\-collections/community\.crypto/pull/530)\)\.
@@ -727,7 +751,7 @@ Regular feature release\.
## v2\.8\.1
-
+
### Release Summary
Maintenance release with improved documentation\.
@@ -735,12 +759,12 @@ Maintenance release with improved documentation\.
## v2\.8\.0
-
+
### Release Summary
Feature release\.
-
+
### Minor Changes
* acme\_\* modules \- handle more gracefully if CA\'s new nonce call does not return a nonce \([https\://github\.com/ansible\-collections/community\.crypto/pull/525](https\://github\.com/ansible\-collections/community\.crypto/pull/525)\)\.
@@ -750,7 +774,7 @@ Feature release\.
## v2\.7\.1
-
+
### Release Summary
Maintenance release\.
@@ -763,12 +787,12 @@ Maintenance release\.
## v2\.7\.0
-
+
### Release Summary
Feature release\.
-
+
### Minor Changes
* acme\* modules \- also support the HTTP 503 Service Unavailable and 408 Request Timeout response status for automatic retries \([https\://github\.com/ansible\-collections/community\.crypto/pull/513](https\://github\.com/ansible\-collections/community\.crypto/pull/513)\)\.
@@ -781,12 +805,12 @@ Feature release\.
## v2\.6\.0
-
+
### Release Summary
Feature release\.
-
+
### Minor Changes
* acme\* modules \- support the HTTP 429 Too Many Requests response status \([https\://github\.com/ansible\-collections/community\.crypto/pull/508](https\://github\.com/ansible\-collections/community\.crypto/pull/508)\)\.
@@ -795,12 +819,12 @@ Feature release\.
## v2\.5\.0
-
+
### Release Summary
Maintenance release with improved licensing declaration and documentation fixes\.
-
+
### Minor Changes
* All software licenses are now in the LICENSES/ directory of the collection root\. Moreover\, SPDX\-License\-Identifier\: is used to declare the applicable license for every file that is not automatically generated \([https\://github\.com/ansible\-collections/community\.crypto/pull/491](https\://github\.com/ansible\-collections/community\.crypto/pull/491)\)\.
@@ -808,12 +832,12 @@ Maintenance release with improved licensing declaration and documentation fixes\
## v2\.4\.0
-
+
### Release Summary
Deprecation and bugfix release\. No new features this time\.
-
+
### Deprecated Features
* Support for Ansible 2\.9 and ansible\-base 2\.10 is deprecated\, and will be removed in the next major release \(community\.crypto 3\.0\.0\)\. Some modules might still work with these versions afterwards\, but we will no longer keep compatibility code that was needed to support them \([https\://github\.com/ansible\-collections/community\.crypto/pull/460](https\://github\.com/ansible\-collections/community\.crypto/pull/460)\)\.
@@ -826,7 +850,7 @@ Deprecation and bugfix release\. No new features this time\.
## v2\.3\.4
-
+
### Release Summary
Re\-release of what was intended to be 2\.3\.3\.
@@ -842,7 +866,7 @@ has been added\.
## v2\.3\.3
-
+
### Release Summary
Bugfix release\.
@@ -857,7 +881,7 @@ Bugfix release\.
## v2\.3\.2
-
+
### Release Summary
Maintenance and bugfix release\.
@@ -871,7 +895,7 @@ Maintenance and bugfix release\.
## v2\.3\.1
-
+
### Release Summary
Maintenance release\.
@@ -884,12 +908,12 @@ Maintenance release\.
## v2\.3\.0
-
+
### Release Summary
Feature and bugfix release\.
-
+
### Minor Changes
* Prepare collection for inclusion in an Execution Environment by declaring its dependencies\. Please note that system packages are used for cryptography and PyOpenSSL\, which can be rather limited\. If you need features from newer cryptography versions\, you will have to manually force a newer version to be installed by pip by specifying something like cryptography \>\= 37\.0\.0 in your Execution Environment\'s Python dependencies file \([https\://github\.com/ansible\-collections/community\.crypto/pull/440](https\://github\.com/ansible\-collections/community\.crypto/pull/440)\)\.
@@ -912,7 +936,7 @@ Feature and bugfix release\.
## v2\.2\.4
-
+
### Release Summary
Regular maintenance release\.
@@ -925,7 +949,7 @@ Regular maintenance release\.
## v2\.2\.3
-
+
### Release Summary
Regular bugfix release\.
@@ -938,7 +962,7 @@ Regular bugfix release\.
## v2\.2\.2
-
+
### Release Summary
Regular bugfix release\.
@@ -957,7 +981,7 @@ In this release\, we extended the test matrix to include Alpine 3\, ArchLinux\,
## v2\.2\.1
-
+
### Release Summary
Bugfix release\.
@@ -970,12 +994,12 @@ Bugfix release\.
## v2\.2\.0
-
+
### Release Summary
Regular bugfix and feature release\.
-
+
### Minor Changes
* openssh\_cert \- added ignore\_timestamps parameter so it can be used semi\-idempotent with relative timestamps in valid\_to/valid\_from \([https\://github\.com/ansible\-collections/community\.crypto/issues/379](https\://github\.com/ansible\-collections/community\.crypto/issues/379)\)\.
@@ -988,12 +1012,12 @@ Regular bugfix and feature release\.
## v2\.1\.0
-
+
### Release Summary
Feature and bugfix release\.
-
+
### Minor Changes
* Adjust error messages that indicate cryptography is not installed from Can\'t to Cannot \([https\://github\.com/ansible\-collections/community\.crypto/pull/374](https\://github\.com/ansible\-collections/community\.crypto/pull/374)\)\.
@@ -1014,7 +1038,7 @@ Feature and bugfix release\.
## v2\.0\.2
-
+
### Release Summary
Documentation fix release\. No actual code changes\.
@@ -1022,12 +1046,12 @@ Documentation fix release\. No actual code changes\.
## v2\.0\.1
-
+
### Release Summary
Bugfix release with extra forward compatibility for newer versions of cryptography\.
-
+
### Minor Changes
* acme\_\* modules \- fix usage of fetch\_url with changes in latest ansible\-core devel branch \([https\://github\.com/ansible\-collections/community\.crypto/pull/339](https\://github\.com/ansible\-collections/community\.crypto/pull/339)\)\.
@@ -1043,12 +1067,12 @@ Bugfix release with extra forward compatibility for newer versions of cryptograp
## v2\.0\.0
-
+
### Release Summary
A new major release of the community\.crypto collection\. The main changes are removal of the PyOpenSSL backends for almost all modules \(openssl\_pkcs12 being the only exception\)\, and removal of the assertonly provider in the x509\_certificate provider\. There are also some other breaking changes which should improve the user interface/experience of this collection long\-term\.
-
+
### Minor Changes
* acme\_certificate \- the subject and issuer fields in in the select\_chain entries are now more strictly validated \([https\://github\.com/ansible\-collections/community\.crypto/pull/316](https\://github\.com/ansible\-collections/community\.crypto/pull/316)\)\.
@@ -1073,7 +1097,7 @@ A new major release of the community\.crypto collection\. The main
* openssl\_privatekey\_info \- by default consistency checks are not run\; they need to be explicitly requested by passing check\_consistency\=true \([https\://github\.com/ansible\-collections/community\.crypto/pull/309](https\://github\.com/ansible\-collections/community\.crypto/pull/309)\)\.
* x509\_crl \- for idempotency checks\, the issuer order is ignored\. If order is important\, use the new issuer\_ordered option \([https\://github\.com/ansible\-collections/community\.crypto/pull/316](https\://github\.com/ansible\-collections/community\.crypto/pull/316)\)\.
-
+
### Deprecated Features
* acme\_\* modules \- ACME version 1 is now deprecated and support for it will be removed in community\.crypto 2\.0\.0 \([https\://github\.com/ansible\-collections/community\.crypto/pull/288](https\://github\.com/ansible\-collections/community\.crypto/pull/288)\)\.
@@ -1117,7 +1141,7 @@ A new major release of the community\.crypto collection\. The main
## v1\.9\.4
-
+
### Release Summary
Regular bugfix release\.
@@ -1131,7 +1155,7 @@ Regular bugfix release\.
## v1\.9\.3
-
+
### Release Summary
Regular bugfix release\.
@@ -1144,7 +1168,7 @@ Regular bugfix release\.
## v1\.9\.2
-
+
### Release Summary
Bugfix release to fix the changelog\. No other change compared to 1\.9\.0\.
@@ -1152,7 +1176,7 @@ Bugfix release to fix the changelog\. No other change compared to 1\.9\.0\.
## v1\.9\.1
-
+
### Release Summary
Accidental 1\.9\.1 release\. Identical to 1\.9\.0\.
@@ -1160,12 +1184,12 @@ Accidental 1\.9\.1 release\. Identical to 1\.9\.0\.
## v1\.9\.0
-
+
### Release Summary
Regular feature release\.
-
+
### Minor Changes
* get\_certificate \- added starttls option to retrieve certificates from servers which require clients to request an encrypted connection \([https\://github\.com/ansible\-collections/community\.crypto/pull/264](https\://github\.com/ansible\-collections/community\.crypto/pull/264)\)\.
@@ -1182,12 +1206,12 @@ Regular feature release\.
## v1\.8\.0
-
+
### Release Summary
Regular bugfix and feature release\.
-
+
### Minor Changes
* Avoid internal ansible\-core module\_utils in favor of equivalent public API available since at least Ansible 2\.9 \([https\://github\.com/ansible\-collections/community\.crypto/pull/253](https\://github\.com/ansible\-collections/community\.crypto/pull/253)\)\.
@@ -1204,7 +1228,7 @@ Regular bugfix and feature release\.
## v1\.7\.1
-
+
### Release Summary
Bugfix release\.
@@ -1217,12 +1241,12 @@ Bugfix release\.
## v1\.7\.0
-
+
### Release Summary
Regular feature and bugfix release\.
-
+
### Minor Changes
* cryptography\_openssh module utils \- new module\_utils for managing asymmetric keypairs and OpenSSH formatted/encoded asymmetric keypairs \([https\://github\.com/ansible\-collections/community\.crypto/pull/213](https\://github\.com/ansible\-collections/community\.crypto/pull/213)\)\.
@@ -1260,7 +1284,7 @@ Regular feature and bugfix release\.
## v1\.6\.2
-
+
### Release Summary
Bugfix release\. Fixes compatibility issue of ACME modules with step\-ca\.
@@ -1273,7 +1297,7 @@ Bugfix release\. Fixes compatibility issue of ACME modules with step\-ca\.
## v1\.6\.1
-
+
### Release Summary
Bugfix release\.
@@ -1286,12 +1310,12 @@ Bugfix release\.
## v1\.6\.0
-
+
### Release Summary
Fixes compatibility issues with the latest ansible\-core 2\.11 beta\, and contains a lot of internal refactoring for the ACME modules and support for private key passphrases for them\.
-
+
### Minor Changes
* acme module\_utils \- the acme module\_utils has been split up into several Python modules \([https\://github\.com/ansible\-collections/community\.crypto/pull/184](https\://github\.com/ansible\-collections/community\.crypto/pull/184)\)\.
@@ -1300,7 +1324,7 @@ Fixes compatibility issues with the latest ansible\-core 2\.11 beta\, and contai
* acme\_certificate\_revoke \- support revoking by private keys that are passphrase protected for cryptography backend \([https\://github\.com/ansible\-collections/community\.crypto/pull/207](https\://github\.com/ansible\-collections/community\.crypto/pull/207)\)\.
* acme\_challenge\_cert\_helper \- add private\_key\_passphrase parameter \([https\://github\.com/ansible\-collections/community\.crypto/pull/207](https\://github\.com/ansible\-collections/community\.crypto/pull/207)\)\.
-
+
### Deprecated Features
* acme module\_utils \- the acme module\_utils \(ansible\_collections\.community\.crypto\.plugins\.module\_utils\.acme\) is deprecated and will be removed in community\.crypto 2\.0\.0\. Use the new Python modules in the acme package instead \(ansible\_collections\.community\.crypto\.plugins\.module\_utils\.acme\.xxx\) \([https\://github\.com/ansible\-collections/community\.crypto/pull/184](https\://github\.com/ansible\-collections/community\.crypto/pull/184)\)\.
@@ -1314,18 +1338,18 @@ Fixes compatibility issues with the latest ansible\-core 2\.11 beta\, and contai
## v1\.5\.0
-
+
### Release Summary
Regular feature and bugfix release\. Deprecates a return value\.
-
+
### Minor Changes
* acme\_account\_info \- when retrieve\_orders is not ignore and the ACME server allows to query orders\, the new return value order\_uris is always populated with a list of URIs \([https\://github\.com/ansible\-collections/community\.crypto/pull/178](https\://github\.com/ansible\-collections/community\.crypto/pull/178)\)\.
* luks\_device \- allow to specify sector size for LUKS2 containers with new sector\_size parameter \([https\://github\.com/ansible\-collections/community\.crypto/pull/193](https\://github\.com/ansible\-collections/community\.crypto/pull/193)\)\.
-
+
### Deprecated Features
* acme\_account\_info \- when retrieve\_orders\=url\_list\, orders will no longer be returned in community\.crypto 2\.0\.0\. Use order\_uris instead \([https\://github\.com/ansible\-collections/community\.crypto/pull/178](https\://github\.com/ansible\-collections/community\.crypto/pull/178)\)\.
@@ -1338,12 +1362,12 @@ Regular feature and bugfix release\. Deprecates a return value\.
## v1\.4\.0
-
+
### Release Summary
Release with several new features and bugfixes\.
-
+
### Minor Changes
* The ACME module\_utils has been relicensed back from the Simplified BSD License \([https\://opensource\.org/licenses/BSD\-2\-Clause](https\://opensource\.org/licenses/BSD\-2\-Clause)\) to the GPLv3\+ \(same license used by most other code in this collection\)\. This undoes a licensing change when the original GPLv3\+ licensed code was moved to module\_utils in [https\://github\.com/ansible/ansible/pull/40697](https\://github\.com/ansible/ansible/pull/40697) \([https\://github\.com/ansible\-collections/community\.crypto/pull/165](https\://github\.com/ansible\-collections/community\.crypto/pull/165)\)\.
@@ -1361,12 +1385,12 @@ Release with several new features and bugfixes\.
## v1\.3\.0
-
+
### Release Summary
Contains new modules openssl\_privatekey\_pipe\, openssl\_csr\_pipe and x509\_certificate\_pipe which allow to create or update private keys\, CSRs and X\.509 certificates without having to write them to disk\.
-
+
### Minor Changes
* openssh\_cert \- add module parameter use\_agent to enable using signing keys stored in ssh\-agent \([https\://github\.com/ansible\-collections/community\.crypto/issues/116](https\://github\.com/ansible\-collections/community\.crypto/issues/116)\)\.
@@ -1393,12 +1417,12 @@ Contains new modules openssl\_privatekey\_pipe\, openssl\_csr
## v1\.2\.0
-
+
### Release Summary
Please note that this release fixes a security issue \(CVE\-2020\-25646\)\.
-
+
### Minor Changes
* acme\_certificate \- allow to pass CSR file as content with new option csr\_content \([https\://github\.com/ansible\-collections/community\.crypto/pull/115](https\://github\.com/ansible\-collections/community\.crypto/pull/115)\)\.
@@ -1422,7 +1446,7 @@ Please note that this release fixes a security issue \(CVE\-2020\-25646\)\.
## v1\.1\.1
-
+
### Release Summary
Bugfixes for Ansible 2\.10\.0\.
@@ -1436,12 +1460,12 @@ Bugfixes for Ansible 2\.10\.0\.
## v1\.1\.0
-
+
### Release Summary
Release for Ansible 2\.10\.0\.
-
+
### Minor Changes
* acme\_account \- add external\_account\_binding option to allow creation of ACME accounts with External Account Binding \([https\://github\.com/ansible\-collections/community\.crypto/issues/89](https\://github\.com/ansible\-collections/community\.crypto/issues/89)\)\.
@@ -1470,12 +1494,12 @@ Release for Ansible 2\.10\.0\.
## v1\.0\.0
-
+
### Release Summary
This is the first proper release of the community\.crypto collection\. This changelog contains all changes to the modules in this collection that were added after the release of Ansible 2\.9\.0\.
-
+
### Minor Changes
* luks\_device \- accept passphrase\, new\_passphrase and remove\_passphrase\.
@@ -1504,7 +1528,7 @@ This is the first proper release of the community\.crypto collectio
* openssl\_publickey \- allow to provide private key content via private\_key\_content option\.
* openssl\_publickey \- allow to return the existing/generated public key directly as publickey by setting return\_content to yes\.
-
+
### Deprecated Features
* openssl\_csr \- all values for the version option except 1 are deprecated\. The value 1 denotes the current only standardized CSR version\.
diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 5e317453..673c6a61 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -4,6 +4,26 @@ Community Crypto Release Notes
.. contents:: Topics
+v2.23.0
+=======
+
+Release Summary
+---------------
+
+Feature release.
+
+Minor Changes
+-------------
+
+- acme_certificate - add compatibility for ACME CAs that are not fully RFC8555 compliant and do not provide ``challenges`` in authz objects (https://github.com/ansible-collections/community.crypto/issues/824, https://github.com/ansible-collections/community.crypto/pull/832).
+- luks_device - allow to provide passphrases base64-encoded (https://github.com/ansible-collections/community.crypto/issues/827, https://github.com/ansible-collections/community.crypto/pull/829).
+- x509_certificate_convert - add new option ``verify_cert_parsable`` which allows to check whether the certificate can actually be parsed (https://github.com/ansible-collections/community.crypto/issues/809, https://github.com/ansible-collections/community.crypto/pull/830).
+
+Deprecated Features
+-------------------
+
+- openssl_pkcs12 - the PyOpenSSL based backend is deprecated and will be removed from community.crypto 3.0.0. From that point on you need cryptography 3.0 or newer to use this module (https://github.com/ansible-collections/community.crypto/issues/667, https://github.com/ansible-collections/community.crypto/pull/831).
+
v2.22.3
=======
diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml
index 50fbdca3..d0cf2906 100644
--- a/changelogs/changelog.yaml
+++ b/changelogs/changelog.yaml
@@ -1529,3 +1529,27 @@ releases:
- 810-time.yml
- 811-openssl-timezone.yml
release_date: '2024-10-27'
+ 2.23.0:
+ changes:
+ deprecated_features:
+ - openssl_pkcs12 - the PyOpenSSL based backend is deprecated and will be removed
+ from community.crypto 3.0.0. From that point on you need cryptography 3.0
+ or newer to use this module (https://github.com/ansible-collections/community.crypto/issues/667,
+ https://github.com/ansible-collections/community.crypto/pull/831).
+ minor_changes:
+ - acme_certificate - add compatibility for ACME CAs that are not fully RFC8555
+ compliant and do not provide ``challenges`` in authz objects (https://github.com/ansible-collections/community.crypto/issues/824,
+ https://github.com/ansible-collections/community.crypto/pull/832).
+ - luks_device - allow to provide passphrases base64-encoded (https://github.com/ansible-collections/community.crypto/issues/827,
+ https://github.com/ansible-collections/community.crypto/pull/829).
+ - x509_certificate_convert - add new option ``verify_cert_parsable`` which
+ allows to check whether the certificate can actually be parsed (https://github.com/ansible-collections/community.crypto/issues/809,
+ https://github.com/ansible-collections/community.crypto/pull/830).
+ release_summary: Feature release.
+ fragments:
+ - 2.23.0.yml
+ - 829-luks_device-passphrase-base64.yml
+ - 830-x509-convert-verify.yml
+ - 831-openssl_pkcs12-deprecate-pyopenssl.yml
+ - 832-acme-challenges.yml
+ release_date: '2024-12-30'
diff --git a/changelogs/fragments/2.23.0.yml b/changelogs/fragments/2.23.0.yml
deleted file mode 100644
index 512efc99..00000000
--- a/changelogs/fragments/2.23.0.yml
+++ /dev/null
@@ -1 +0,0 @@
-release_summary: Feature release.
diff --git a/changelogs/fragments/829-luks_device-passphrase-base64.yml b/changelogs/fragments/829-luks_device-passphrase-base64.yml
deleted file mode 100644
index b46fdf2b..00000000
--- a/changelogs/fragments/829-luks_device-passphrase-base64.yml
+++ /dev/null
@@ -1,3 +0,0 @@
-minor_changes:
- - "luks_device - allow to provide passphrases base64-encoded
- (https://github.com/ansible-collections/community.crypto/issues/827, https://github.com/ansible-collections/community.crypto/pull/829)."
diff --git a/changelogs/fragments/830-x509-convert-verify.yml b/changelogs/fragments/830-x509-convert-verify.yml
deleted file mode 100644
index ef3a803c..00000000
--- a/changelogs/fragments/830-x509-convert-verify.yml
+++ /dev/null
@@ -1,3 +0,0 @@
-minor_changes:
- - "x509_certificate_convert - add new option ``verify_cert_parsable`` which allows to check whether the certificate can actually be parsed
- (https://github.com/ansible-collections/community.crypto/issues/809, https://github.com/ansible-collections/community.crypto/pull/830)."
diff --git a/changelogs/fragments/831-openssl_pkcs12-deprecate-pyopenssl.yml b/changelogs/fragments/831-openssl_pkcs12-deprecate-pyopenssl.yml
deleted file mode 100644
index 769938a3..00000000
--- a/changelogs/fragments/831-openssl_pkcs12-deprecate-pyopenssl.yml
+++ /dev/null
@@ -1,4 +0,0 @@
-deprecated_features:
- - "openssl_pkcs12 - the PyOpenSSL based backend is deprecated and will be removed from community.crypto 3.0.0.
- From that point on you need cryptography 3.0 or newer to use this module
- (https://github.com/ansible-collections/community.crypto/issues/667, https://github.com/ansible-collections/community.crypto/pull/831)."
diff --git a/changelogs/fragments/832-acme-challenges.yml b/changelogs/fragments/832-acme-challenges.yml
deleted file mode 100644
index bf3f1fc5..00000000
--- a/changelogs/fragments/832-acme-challenges.yml
+++ /dev/null
@@ -1,3 +0,0 @@
-minor_changes:
- - "acme_certificate - add compatibility for ACME CAs that are not fully RFC8555 compliant and do not provide ``challenges`` in authz objects
- (https://github.com/ansible-collections/community.crypto/issues/824, https://github.com/ansible-collections/community.crypto/pull/832)."