From b643c52cf29ce5bbab738b43290af3556efa1ca9 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Wed, 5 Jun 2024 18:18:41 +0200 Subject: Merging upstream version 10.0.0+dfsg. Signed-off-by: Daniel Baumann --- ansible_collections/community/crypto/CHANGELOG.rst | 94 +++++++++++++++++----- 1 file changed, 72 insertions(+), 22 deletions(-) (limited to 'ansible_collections/community/crypto/CHANGELOG.rst') diff --git a/ansible_collections/community/crypto/CHANGELOG.rst b/ansible_collections/community/crypto/CHANGELOG.rst index b2dca8e3f..2ba4c8704 100644 --- a/ansible_collections/community/crypto/CHANGELOG.rst +++ b/ansible_collections/community/crypto/CHANGELOG.rst @@ -4,6 +4,56 @@ Community Crypto Release Notes .. contents:: Topics +v2.20.0 +======= + +Release Summary +--------------- + +Feature and bugfix release. + +The deprecations in this release are only relevant for collections that use shared +code or docs fragments from this collection. + +Minor Changes +------------- + +- acme_certificate - add ``include_renewal_cert_id`` option to allow requesting renewal of a specific certificate according to the current ACME Renewal Information specification draft (https://github.com/ansible-collections/community.crypto/pull/739). + +Deprecated Features +------------------- + +- acme documentation fragment - the default ``community.crypto.acme[.documentation]`` docs fragment is deprecated and will be removed from community.crypto 3.0.0. Replace it with both the new ``community.crypto.acme.basic`` and ``community.crypto.acme.account`` fragments (https://github.com/ansible-collections/community.crypto/pull/735). +- acme.backends module utils - the ``get_cert_information()`` method for a ACME crypto backend must be implemented from community.crypto 3.0.0 on (https://github.com/ansible-collections/community.crypto/pull/736). +- crypto.module_backends.common module utils - the ``crypto.module_backends.common`` module utils is deprecated and will be removed from community.crypto 3.0.0. Use the improved ``argspec`` module util instead (https://github.com/ansible-collections/community.crypto/pull/749). + +Bugfixes +-------- + +- x509_crl, x509_certificate, x509_certificate_info - when parsing absolute timestamps which omitted the second count, the first digit of the minutes was used as a one-digit minutes count, and the second digit of the minutes as a one-digit second count (https://github.com/ansible-collections/community.crypto/pull/745). + +New Modules +----------- + +- community.crypto.acme_ari_info - Retrieves ACME Renewal Information (ARI) for a certificate. +- community.crypto.acme_certificate_deactivate_authz - Deactivate all authz for an ACME v2 order. +- community.crypto.acme_certificate_renewal_info - Determine whether a certificate should be renewed or not. + +v2.19.1 +======= + +Release Summary +--------------- + +Bugfix release. + +Bugfixes +-------- + +- crypto.math module utils - change return values for ``quick_is_not_prime()`` and ``convert_int_to_bytes(0, 0)`` for special cases that do not appear when using the collection (https://github.com/ansible-collections/community.crypto/pull/733). +- ecs_certificate - fixed ``csr`` option to be empty and allow renewal of a specific certificate according to the Renewal Information specification (https://github.com/ansible-collections/community.crypto/pull/740). +- x509_certificate - since community.crypto 2.19.0 the module was no longer idempotent with respect to ``not_before`` and ``not_after`` times. This is now fixed (https://github.com/ansible-collections/community.crypto/issues/753, https://github.com/ansible-collections/community.crypto/pull/754). + v2.19.0 ======= @@ -31,7 +81,7 @@ Bugfixes New Modules ----------- -- x509_certificate_convert - Convert X.509 certificates +- community.crypto.x509_certificate_convert - Convert X.509 certificates v2.18.0 ======= @@ -64,8 +114,8 @@ New Plugins Filter ~~~~~~ -- parse_serial - Convert a serial number as a colon-separated list of hex numbers to an integer -- to_serial - Convert an integer to a colon-separated list of hex numbers +- community.crypto.parse_serial - Convert a serial number as a colon-separated list of hex numbers to an integer +- community.crypto.to_serial - Convert an integer to a colon-separated list of hex numbers v2.17.1 ======= @@ -185,12 +235,12 @@ New Plugins Filter ~~~~~~ -- gpg_fingerprint - Retrieve a GPG fingerprint from a GPG public or private key +- community.crypto.gpg_fingerprint - Retrieve a GPG fingerprint from a GPG public or private key Lookup ~~~~~~ -- gpg_fingerprint - Retrieve a GPG fingerprint from a GPG public or private key file +- community.crypto.gpg_fingerprint - Retrieve a GPG fingerprint from a GPG public or private key file v2.14.1 ======= @@ -333,12 +383,12 @@ New Plugins Filter ~~~~~~ -- openssl_csr_info - Retrieve information from OpenSSL Certificate Signing Requests (CSR) -- openssl_privatekey_info - Retrieve information from OpenSSL private keys -- openssl_publickey_info - Retrieve information from OpenSSL public keys in PEM format -- split_pem - Split PEM file contents into multiple objects -- x509_certificate_info - Retrieve information from X.509 certificates in PEM format -- x509_crl_info - Retrieve information from X.509 CRLs in PEM format +- community.crypto.openssl_csr_info - Retrieve information from OpenSSL Certificate Signing Requests (CSR) +- community.crypto.openssl_privatekey_info - Retrieve information from OpenSSL private keys +- community.crypto.openssl_publickey_info - Retrieve information from OpenSSL public keys in PEM format +- community.crypto.split_pem - Split PEM file contents into multiple objects +- community.crypto.x509_certificate_info - Retrieve information from X.509 certificates in PEM format +- community.crypto.x509_crl_info - Retrieve information from X.509 CRLs in PEM format v2.9.0 ====== @@ -637,8 +687,8 @@ Bugfixes New Modules ----------- -- crypto_info - Retrieve cryptographic capabilities -- openssl_privatekey_convert - Convert OpenSSL private keys +- community.crypto.crypto_info - Retrieve cryptographic capabilities +- community.crypto.openssl_privatekey_convert - Convert OpenSSL private keys v2.0.2 ====== @@ -884,7 +934,7 @@ Bugfixes New Modules ----------- -- openssl_publickey_info - Provide information for OpenSSL public keys +- community.crypto.openssl_publickey_info - Provide information for OpenSSL public keys v1.6.2 ====== @@ -1015,9 +1065,9 @@ Bugfixes New Modules ----------- -- openssl_csr_pipe - Generate OpenSSL Certificate Signing Request (CSR) -- openssl_privatekey_pipe - Generate OpenSSL private keys without disk access -- x509_certificate_pipe - Generate and/or check OpenSSL certificates +- community.crypto.openssl_csr_pipe - Generate OpenSSL Certificate Signing Request (CSR) +- community.crypto.openssl_privatekey_pipe - Generate OpenSSL private keys without disk access +- community.crypto.x509_certificate_pipe - Generate and/or check OpenSSL certificates v1.2.0 ====== @@ -1093,8 +1143,8 @@ Bugfixes New Modules ----------- -- openssl_signature - Sign data with openssl -- openssl_signature_info - Verify signatures with openssl +- community.crypto.openssl_signature - Sign data with openssl +- community.crypto.openssl_signature_info - Verify signatures with openssl v1.0.0 ====== @@ -1169,6 +1219,6 @@ Bugfixes New Modules ----------- -- ecs_domain - Request validation of a domain with the Entrust Certificate Services (ECS) API -- x509_crl - Generate Certificate Revocation Lists (CRLs) -- x509_crl_info - Retrieve information on Certificate Revocation Lists (CRLs) +- community.crypto.ecs_domain - Request validation of a domain with the Entrust Certificate Services (ECS) API +- community.crypto.x509_crl - Generate Certificate Revocation Lists (CRLs) +- community.crypto.x509_crl_info - Retrieve information on Certificate Revocation Lists (CRLs) -- cgit v1.2.3