diff --git a/CHANGELOG.rst b/CHANGELOG.rst index cf04b07a..dee3666d 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -5,6 +5,81 @@ Community Crypto Release Notes .. contents:: Topics +v2.0.0 +====== + +Release Summary +--------------- + +A new major release of the ``community.crypto`` collection. The main changes are removal of the PyOpenSSL backends for almost all modules (``openssl_pkcs12`` being the only exception), and removal of the ``assertonly`` provider in the ``x509_certificate`` provider. There are also some other breaking changes which should improve the user interface/experience of this collection long-term. + + +Minor Changes +------------- + +- acme_certificate - the ``subject`` and ``issuer`` fields in in the ``select_chain`` entries are now more strictly validated (https://github.com/ansible-collections/community.crypto/pull/316). +- openssl_csr, openssl_csr_pipe - provide a new ``subject_ordered`` option if the order of the components in the subject is of importance (https://github.com/ansible-collections/community.crypto/issues/291, https://github.com/ansible-collections/community.crypto/pull/316). +- openssl_csr, openssl_csr_pipe - there is now stricter validation of the values of the ``subject`` option (https://github.com/ansible-collections/community.crypto/pull/316). +- openssl_privatekey_info - add ``check_consistency`` option to request private key consistency checks to be done (https://github.com/ansible-collections/community.crypto/pull/309). +- x509_certificate, x509_certificate_pipe - add ``ignore_timestamps`` option which allows to enable idempotency for 'not before' and 'not after' options (https://github.com/ansible-collections/community.crypto/issues/295, https://github.com/ansible-collections/community.crypto/pull/317). +- x509_crl - provide a new ``issuer_ordered`` option if the order of the components in the issuer is of importance (https://github.com/ansible-collections/community.crypto/issues/291, https://github.com/ansible-collections/community.crypto/pull/316). +- x509_crl - there is now stricter validation of the values of the ``issuer`` option (https://github.com/ansible-collections/community.crypto/pull/316). + +Breaking Changes / Porting Guide +-------------------------------- + +- Adjust ``dirName`` text parsing and to text converting code to conform to `Sections 2 and 3 of RFC 4514 `_. This is similar to how `cryptography handles this `_ (https://github.com/ansible-collections/community.crypto/pull/274). +- acme module utils - removing compatibility code (https://github.com/ansible-collections/community.crypto/pull/290). +- acme_* modules - removed vendored copy of the Python library ``ipaddress``. If you are using Python 2.x, please make sure to install the library (https://github.com/ansible-collections/community.crypto/pull/287). +- compatibility module_utils - removed vendored copy of the Python library ``ipaddress`` (https://github.com/ansible-collections/community.crypto/pull/287). +- crypto module utils - removing compatibility code (https://github.com/ansible-collections/community.crypto/pull/290). +- get_certificate, openssl_csr_info, x509_certificate_info - depending on the ``cryptography`` version used, the modules might not return the ASN.1 value for an extension as contained in the certificate respectively CSR, but a re-encoded version of it. This should usually be identical to the value contained in the source file, unless the value was malformed. For extensions not handled by C(cryptography) the value contained in the source file is always returned unaltered (https://github.com/ansible-collections/community.crypto/pull/318). +- module_utils - removed various PyOpenSSL support functions and default backend values that are not needed for the openssl_pkcs12 module (https://github.com/ansible-collections/community.crypto/pull/273). +- openssl_csr, openssl_csr_pipe, x509_crl - the ``subject`` respectively ``issuer`` fields no longer ignore empty values, but instead fail when encountering them (https://github.com/ansible-collections/community.crypto/pull/316). +- openssl_privatekey_info - by default consistency checks are not run; they need to be explicitly requested by passing ``check_consistency=true`` (https://github.com/ansible-collections/community.crypto/pull/309). +- x509_crl - for idempotency checks, the ``issuer`` order is ignored. If order is important, use the new ``issuer_ordered`` option (https://github.com/ansible-collections/community.crypto/pull/316). + +Deprecated Features +------------------- + +- acme_* modules - ACME version 1 is now deprecated and support for it will be removed in community.crypto 2.0.0 (https://github.com/ansible-collections/community.crypto/pull/288). + +Removed Features (previously deprecated) +---------------------------------------- + +- acme_* modules - the ``acme_directory`` option is now required (https://github.com/ansible-collections/community.crypto/pull/290). +- acme_* modules - the ``acme_version`` option is now required (https://github.com/ansible-collections/community.crypto/pull/290). +- acme_account_facts - the deprecated redirect has been removed. Use community.crypto.acme_account_info instead (https://github.com/ansible-collections/community.crypto/pull/290). +- acme_account_info - ``retrieve_orders=url_list`` no longer returns the return value ``orders``. Use the ``order_uris`` return value instead (https://github.com/ansible-collections/community.crypto/pull/290). +- crypto.info module utils - the deprecated redirect has been removed. Use ``crypto.pem`` instead (https://github.com/ansible-collections/community.crypto/pull/290). +- get_certificate - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). +- openssl_certificate - the deprecated redirect has been removed. Use community.crypto.x509_certificate instead (https://github.com/ansible-collections/community.crypto/pull/290). +- openssl_certificate_info - the deprecated redirect has been removed. Use community.crypto.x509_certificate_info instead (https://github.com/ansible-collections/community.crypto/pull/290). +- openssl_csr - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). +- openssl_csr and openssl_csr_pipe - ``version`` now only accepts the (default) value 1 (https://github.com/ansible-collections/community.crypto/pull/290). +- openssl_csr_info - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). +- openssl_csr_pipe - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). +- openssl_privatekey - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). +- openssl_privatekey_info - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). +- openssl_privatekey_pipe - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). +- openssl_publickey - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). +- openssl_publickey_info - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). +- openssl_signature - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). +- openssl_signature_info - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). +- x509_certificate - remove ``assertonly`` provider (https://github.com/ansible-collections/community.crypto/pull/289). +- x509_certificate - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). +- x509_certificate_info - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). +- x509_certificate_pipe - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). + +Bugfixes +-------- + +- cryptography backend - improve Unicode handling for Python 2 (https://github.com/ansible-collections/community.crypto/pull/313). +- get_certificate - fix compatibility with the cryptography 35.0.0 release (https://github.com/ansible-collections/community.crypto/pull/294). +- openssl_csr_info - fix compatibility with the cryptography 35.0.0 release (https://github.com/ansible-collections/community.crypto/pull/294). +- openssl_pkcs12 - fix compatibility with the cryptography 35.0.0 release (https://github.com/ansible-collections/community.crypto/pull/296). +- x509_certificate_info - fix compatibility with the cryptography 35.0.0 release (https://github.com/ansible-collections/community.crypto/pull/294). + v1.9.4 ====== diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml index f51a6adf..88d839d5 100644 --- a/changelogs/changelog.yaml +++ b/changelogs/changelog.yaml @@ -562,3 +562,115 @@ releases: - 279-acme-openssl.yml - 282-acme_challenge_cert_helper-error.yml release_date: '2021-09-28' + 2.0.0: + changes: + breaking_changes: + - Adjust ``dirName`` text parsing and to text converting code to conform to + `Sections 2 and 3 of RFC 4514 `_. + This is similar to how `cryptography handles this `_ + (https://github.com/ansible-collections/community.crypto/pull/274). + - acme module utils - removing compatibility code (https://github.com/ansible-collections/community.crypto/pull/290). + - acme_* modules - removed vendored copy of the Python library ``ipaddress``. + If you are using Python 2.x, please make sure to install the library (https://github.com/ansible-collections/community.crypto/pull/287). + - compatibility module_utils - removed vendored copy of the Python library ``ipaddress`` + (https://github.com/ansible-collections/community.crypto/pull/287). + - crypto module utils - removing compatibility code (https://github.com/ansible-collections/community.crypto/pull/290). + - get_certificate, openssl_csr_info, x509_certificate_info - depending on the + ``cryptography`` version used, the modules might not return the ASN.1 value + for an extension as contained in the certificate respectively CSR, but a re-encoded + version of it. This should usually be identical to the value contained in + the source file, unless the value was malformed. For extensions not handled + by C(cryptography) the value contained in the source file is always returned + unaltered (https://github.com/ansible-collections/community.crypto/pull/318). + - module_utils - removed various PyOpenSSL support functions and default backend + values that are not needed for the openssl_pkcs12 module (https://github.com/ansible-collections/community.crypto/pull/273). + - openssl_csr, openssl_csr_pipe, x509_crl - the ``subject`` respectively ``issuer`` + fields no longer ignore empty values, but instead fail when encountering them + (https://github.com/ansible-collections/community.crypto/pull/316). + - openssl_privatekey_info - by default consistency checks are not run; they + need to be explicitly requested by passing ``check_consistency=true`` (https://github.com/ansible-collections/community.crypto/pull/309). + - x509_crl - for idempotency checks, the ``issuer`` order is ignored. If order + is important, use the new ``issuer_ordered`` option (https://github.com/ansible-collections/community.crypto/pull/316). + bugfixes: + - cryptography backend - improve Unicode handling for Python 2 (https://github.com/ansible-collections/community.crypto/pull/313). + - get_certificate - fix compatibility with the cryptography 35.0.0 release (https://github.com/ansible-collections/community.crypto/pull/294). + - openssl_csr_info - fix compatibility with the cryptography 35.0.0 release + (https://github.com/ansible-collections/community.crypto/pull/294). + - openssl_pkcs12 - fix compatibility with the cryptography 35.0.0 release (https://github.com/ansible-collections/community.crypto/pull/296). + - x509_certificate_info - fix compatibility with the cryptography 35.0.0 release + (https://github.com/ansible-collections/community.crypto/pull/294). + deprecated_features: + - acme_* modules - ACME version 1 is now deprecated and support for it will + be removed in community.crypto 2.0.0 (https://github.com/ansible-collections/community.crypto/pull/288). + minor_changes: + - acme_certificate - the ``subject`` and ``issuer`` fields in in the ``select_chain`` + entries are now more strictly validated (https://github.com/ansible-collections/community.crypto/pull/316). + - openssl_csr, openssl_csr_pipe - provide a new ``subject_ordered`` option if + the order of the components in the subject is of importance (https://github.com/ansible-collections/community.crypto/issues/291, + https://github.com/ansible-collections/community.crypto/pull/316). + - openssl_csr, openssl_csr_pipe - there is now stricter validation of the values + of the ``subject`` option (https://github.com/ansible-collections/community.crypto/pull/316). + - openssl_privatekey_info - add ``check_consistency`` option to request private + key consistency checks to be done (https://github.com/ansible-collections/community.crypto/pull/309). + - x509_certificate, x509_certificate_pipe - add ``ignore_timestamps`` option + which allows to enable idempotency for 'not before' and 'not after' options + (https://github.com/ansible-collections/community.crypto/issues/295, https://github.com/ansible-collections/community.crypto/pull/317). + - x509_crl - provide a new ``issuer_ordered`` option if the order of the components + in the issuer is of importance (https://github.com/ansible-collections/community.crypto/issues/291, + https://github.com/ansible-collections/community.crypto/pull/316). + - x509_crl - there is now stricter validation of the values of the ``issuer`` + option (https://github.com/ansible-collections/community.crypto/pull/316). + release_summary: 'A new major release of the ``community.crypto`` collection. + The main changes are removal of the PyOpenSSL backends for almost all modules + (``openssl_pkcs12`` being the only exception), and removal of the ``assertonly`` + provider in the ``x509_certificate`` provider. There are also some other breaking + changes which should improve the user interface/experience of this collection + long-term. + + ' + removed_features: + - acme_* modules - the ``acme_directory`` option is now required (https://github.com/ansible-collections/community.crypto/pull/290). + - acme_* modules - the ``acme_version`` option is now required (https://github.com/ansible-collections/community.crypto/pull/290). + - acme_account_facts - the deprecated redirect has been removed. Use community.crypto.acme_account_info + instead (https://github.com/ansible-collections/community.crypto/pull/290). + - acme_account_info - ``retrieve_orders=url_list`` no longer returns the return + value ``orders``. Use the ``order_uris`` return value instead (https://github.com/ansible-collections/community.crypto/pull/290). + - crypto.info module utils - the deprecated redirect has been removed. Use ``crypto.pem`` + instead (https://github.com/ansible-collections/community.crypto/pull/290). + - get_certificate - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). + - openssl_certificate - the deprecated redirect has been removed. Use community.crypto.x509_certificate + instead (https://github.com/ansible-collections/community.crypto/pull/290). + - openssl_certificate_info - the deprecated redirect has been removed. Use community.crypto.x509_certificate_info + instead (https://github.com/ansible-collections/community.crypto/pull/290). + - openssl_csr - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). + - openssl_csr and openssl_csr_pipe - ``version`` now only accepts the (default) + value 1 (https://github.com/ansible-collections/community.crypto/pull/290). + - openssl_csr_info - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). + - openssl_csr_pipe - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). + - openssl_privatekey - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). + - openssl_privatekey_info - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). + - openssl_privatekey_pipe - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). + - openssl_publickey - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). + - openssl_publickey_info - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). + - openssl_signature - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). + - openssl_signature_info - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). + - x509_certificate - remove ``assertonly`` provider (https://github.com/ansible-collections/community.crypto/pull/289). + - x509_certificate - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). + - x509_certificate_info - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). + - x509_certificate_pipe - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273). + fragments: + - 2.0.0.yml + - 273-pyopenssl-removal.yml + - 274-dirname-rfc4514.yml + - 287-remove-ipaddress.yml + - 288-depecate-acme-v1.yml + - 289-assertonly-removed.yml + - 290-remove-deprecations.yml + - 294-cryptography-35.0.0.yml + - 296-openssl_pkcs12-cryptography-35.yml + - 309-openssl_privatekey_info-consistency.yml + - 313-unicode-names.yml + - 315-ordered-names.yml + - 317-ignore-timestamps.yml + - 318-extension-value-note.yml + release_date: '2021-11-01' diff --git a/changelogs/fragments/2.0.0.yml b/changelogs/fragments/2.0.0.yml deleted file mode 100644 index cc291c49..00000000 --- a/changelogs/fragments/2.0.0.yml +++ /dev/null @@ -1,5 +0,0 @@ -release_summary: > - A new major release of the ``community.crypto`` collection. - The main changes are removal of the PyOpenSSL backends for almost all modules (``openssl_pkcs12`` being the only exception), - and removal of the ``assertonly`` provider in the ``x509_certificate`` provider. - There are also some other breaking changes which should improve the user interface/experience of this collection long-term. diff --git a/changelogs/fragments/273-pyopenssl-removal.yml b/changelogs/fragments/273-pyopenssl-removal.yml deleted file mode 100644 index 513b48d9..00000000 --- a/changelogs/fragments/273-pyopenssl-removal.yml +++ /dev/null @@ -1,17 +0,0 @@ -removed_features: - - "get_certificate - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273)." - - "openssl_csr - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273)." - - "openssl_csr_info - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273)." - - "openssl_csr_pipe - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273)." - - "openssl_privatekey - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273)." - - "openssl_privatekey_info - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273)." - - "openssl_privatekey_pipe - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273)." - - "openssl_publickey - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273)." - - "openssl_publickey_info - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273)." - - "openssl_signature - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273)." - - "openssl_signature_info - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273)." - - "x509_certificate - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273)." - - "x509_certificate_info - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273)." - - "x509_certificate_pipe - removed the ``pyopenssl`` backend (https://github.com/ansible-collections/community.crypto/pull/273)." -breaking_changes: - - "module_utils - removed various PyOpenSSL support functions and default backend values that are not needed for the openssl_pkcs12 module (https://github.com/ansible-collections/community.crypto/pull/273)." diff --git a/changelogs/fragments/274-dirname-rfc4514.yml b/changelogs/fragments/274-dirname-rfc4514.yml deleted file mode 100644 index 23750439..00000000 --- a/changelogs/fragments/274-dirname-rfc4514.yml +++ /dev/null @@ -1,2 +0,0 @@ -breaking_changes: -- "Adjust ``dirName`` text parsing and to text converting code to conform to `Sections 2 and 3 of RFC 4514 `_. This is similar to how `cryptography handles this `_ (https://github.com/ansible-collections/community.crypto/pull/274)." diff --git a/changelogs/fragments/287-remove-ipaddress.yml b/changelogs/fragments/287-remove-ipaddress.yml deleted file mode 100644 index 65643625..00000000 --- a/changelogs/fragments/287-remove-ipaddress.yml +++ /dev/null @@ -1,3 +0,0 @@ -breaking_changes: - - "acme_* modules - removed vendored copy of the Python library ``ipaddress``. If you are using Python 2.x, please make sure to install the library (https://github.com/ansible-collections/community.crypto/pull/287)." - - "compatibility module_utils - removed vendored copy of the Python library ``ipaddress`` (https://github.com/ansible-collections/community.crypto/pull/287)." diff --git a/changelogs/fragments/288-depecate-acme-v1.yml b/changelogs/fragments/288-depecate-acme-v1.yml deleted file mode 100644 index 9f48bf9e..00000000 --- a/changelogs/fragments/288-depecate-acme-v1.yml +++ /dev/null @@ -1,2 +0,0 @@ -deprecated_features: - - "acme_* modules - ACME version 1 is now deprecated and support for it will be removed in community.crypto 2.0.0 (https://github.com/ansible-collections/community.crypto/pull/288)." diff --git a/changelogs/fragments/289-assertonly-removed.yml b/changelogs/fragments/289-assertonly-removed.yml deleted file mode 100644 index 234d04b3..00000000 --- a/changelogs/fragments/289-assertonly-removed.yml +++ /dev/null @@ -1,2 +0,0 @@ -removed_features: - - "x509_certificate - remove ``assertonly`` provider (https://github.com/ansible-collections/community.crypto/pull/289)." diff --git a/changelogs/fragments/290-remove-deprecations.yml b/changelogs/fragments/290-remove-deprecations.yml deleted file mode 100644 index d31f1dcd..00000000 --- a/changelogs/fragments/290-remove-deprecations.yml +++ /dev/null @@ -1,12 +0,0 @@ -removed_features: - - "acme_* modules - the ``acme_version`` option is now required (https://github.com/ansible-collections/community.crypto/pull/290)." - - "acme_* modules - the ``acme_directory`` option is now required (https://github.com/ansible-collections/community.crypto/pull/290)." - - "openssl_csr and openssl_csr_pipe - ``version`` now only accepts the (default) value 1 (https://github.com/ansible-collections/community.crypto/pull/290)." - - "acme_account_info - ``retrieve_orders=url_list`` no longer returns the return value ``orders``. Use the ``order_uris`` return value instead (https://github.com/ansible-collections/community.crypto/pull/290)." - - "acme_account_facts - the deprecated redirect has been removed. Use community.crypto.acme_account_info instead (https://github.com/ansible-collections/community.crypto/pull/290)." - - "openssl_certificate - the deprecated redirect has been removed. Use community.crypto.x509_certificate instead (https://github.com/ansible-collections/community.crypto/pull/290)." - - "openssl_certificate_info - the deprecated redirect has been removed. Use community.crypto.x509_certificate_info instead (https://github.com/ansible-collections/community.crypto/pull/290)." - - "crypto.info module utils - the deprecated redirect has been removed. Use ``crypto.pem`` instead (https://github.com/ansible-collections/community.crypto/pull/290)." -breaking_changes: - - "acme module utils - removing compatibility code (https://github.com/ansible-collections/community.crypto/pull/290)." - - "crypto module utils - removing compatibility code (https://github.com/ansible-collections/community.crypto/pull/290)." diff --git a/changelogs/fragments/294-cryptography-35.0.0.yml b/changelogs/fragments/294-cryptography-35.0.0.yml deleted file mode 100644 index 6f99a4f7..00000000 --- a/changelogs/fragments/294-cryptography-35.0.0.yml +++ /dev/null @@ -1,4 +0,0 @@ -bugfixes: - - "get_certificate - fix compatibility with the cryptography 35.0.0 release (https://github.com/ansible-collections/community.crypto/pull/294)." - - "openssl_csr_info - fix compatibility with the cryptography 35.0.0 release (https://github.com/ansible-collections/community.crypto/pull/294)." - - "x509_certificate_info - fix compatibility with the cryptography 35.0.0 release (https://github.com/ansible-collections/community.crypto/pull/294)." diff --git a/changelogs/fragments/296-openssl_pkcs12-cryptography-35.yml b/changelogs/fragments/296-openssl_pkcs12-cryptography-35.yml deleted file mode 100644 index 63f90aa3..00000000 --- a/changelogs/fragments/296-openssl_pkcs12-cryptography-35.yml +++ /dev/null @@ -1,2 +0,0 @@ -bugfixes: - - "openssl_pkcs12 - fix compatibility with the cryptography 35.0.0 release (https://github.com/ansible-collections/community.crypto/pull/296)." diff --git a/changelogs/fragments/309-openssl_privatekey_info-consistency.yml b/changelogs/fragments/309-openssl_privatekey_info-consistency.yml deleted file mode 100644 index b62e2758..00000000 --- a/changelogs/fragments/309-openssl_privatekey_info-consistency.yml +++ /dev/null @@ -1,4 +0,0 @@ -minor_changes: - - openssl_privatekey_info - add ``check_consistency`` option to request private key consistency checks to be done (https://github.com/ansible-collections/community.crypto/pull/309). -breaking_changes: - - openssl_privatekey_info - by default consistency checks are not run; they need to be explicitly requested by passing ``check_consistency=true`` (https://github.com/ansible-collections/community.crypto/pull/309). diff --git a/changelogs/fragments/313-unicode-names.yml b/changelogs/fragments/313-unicode-names.yml deleted file mode 100644 index 759b4595..00000000 --- a/changelogs/fragments/313-unicode-names.yml +++ /dev/null @@ -1,2 +0,0 @@ -bugfixes: - - "cryptography backend - improve Unicode handling for Python 2 (https://github.com/ansible-collections/community.crypto/pull/313)." diff --git a/changelogs/fragments/315-ordered-names.yml b/changelogs/fragments/315-ordered-names.yml deleted file mode 100644 index f4416e07..00000000 --- a/changelogs/fragments/315-ordered-names.yml +++ /dev/null @@ -1,9 +0,0 @@ -minor_changes: - - "acme_certificate - the ``subject`` and ``issuer`` fields in in the ``select_chain`` entries are now more strictly validated (https://github.com/ansible-collections/community.crypto/pull/316)." - - "openssl_csr, openssl_csr_pipe - there is now stricter validation of the values of the ``subject`` option (https://github.com/ansible-collections/community.crypto/pull/316)." - - "openssl_csr, openssl_csr_pipe - provide a new ``subject_ordered`` option if the order of the components in the subject is of importance (https://github.com/ansible-collections/community.crypto/issues/291, https://github.com/ansible-collections/community.crypto/pull/316)." - - "x509_crl - there is now stricter validation of the values of the ``issuer`` option (https://github.com/ansible-collections/community.crypto/pull/316)." - - "x509_crl - provide a new ``issuer_ordered`` option if the order of the components in the issuer is of importance (https://github.com/ansible-collections/community.crypto/issues/291, https://github.com/ansible-collections/community.crypto/pull/316)." -breaking_changes: - - "openssl_csr, openssl_csr_pipe, x509_crl - the ``subject`` respectively ``issuer`` fields no longer ignore empty values, but instead fail when encountering them (https://github.com/ansible-collections/community.crypto/pull/316)." - - "x509_crl - for idempotency checks, the ``issuer`` order is ignored. If order is important, use the new ``issuer_ordered`` option (https://github.com/ansible-collections/community.crypto/pull/316)." diff --git a/changelogs/fragments/317-ignore-timestamps.yml b/changelogs/fragments/317-ignore-timestamps.yml deleted file mode 100644 index 4631ffa6..00000000 --- a/changelogs/fragments/317-ignore-timestamps.yml +++ /dev/null @@ -1,2 +0,0 @@ -minor_changes: - - "x509_certificate, x509_certificate_pipe - add ``ignore_timestamps`` option which allows to enable idempotency for 'not before' and 'not after' options (https://github.com/ansible-collections/community.crypto/issues/295, https://github.com/ansible-collections/community.crypto/pull/317)." diff --git a/changelogs/fragments/318-extension-value-note.yml b/changelogs/fragments/318-extension-value-note.yml deleted file mode 100644 index 11ab6203..00000000 --- a/changelogs/fragments/318-extension-value-note.yml +++ /dev/null @@ -1,6 +0,0 @@ -breaking_changes: - - "get_certificate, openssl_csr_info, x509_certificate_info - depending on the ``cryptography`` version used, - the modules might not return the ASN.1 value for an extension as contained in the certificate respectively CSR, - but a re-encoded version of it. This should usually be identical to the value contained in the source file, - unless the value was malformed. For extensions not handled by C(cryptography) the value contained in - the source file is always returned unaltered (https://github.com/ansible-collections/community.crypto/pull/318)."