In short: getting and installing SSL/TLS certificates made easy.
Certbot is a tool to automatically receive and install
X.509 certificates to enable TLS on servers. The client will
interoperate with the Let's Encrypt CA which will be issuing
browser-trusted certificates for free.
It's all automated:
The tool will prove domain control to the CA and submit a CSR
(Certificate Signing Request).
If domain control has been proven, a certificate will get issued and
the tool will automatically install it.
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above. NOTE: This is a Python port. Instead of py312-certbot listed in the above command, you can pick from the names under the Packages section.
===> The following configuration options are available for py312-certbot-4.2.0,2:
MANPAGES=on: Build and/or install manual pages
===> Use 'make config' to modify these settings
security/py-certbot: Revert "added missing runtime dep py-typing-extensions"
This reverts commit 247856f790fa0917e0461097cd6ce64493a6f447.
According to backtrace in commit message of commit 247856f790fa,
typing_extensions is imported from
site-packages/OpenSSL/crypto.py. And it belongs to not certbot but
pyOpenSSL. So devel/py-typing-extensions should be added to
RUN_DEPENDS of security/py-openssl that is indirect runtime dependency
of certbot.
PR: 286283
Approved by: portmgr (implicit, just fix it)
security/py-certbot: added missing runtime dep py-typing-extensions
Fixes error message:
Traceback (most recent call last):
File "/usr/local/bin/certbot", line 5, in <module>
from certbot.main import main
File "/usr/local/lib/python3.11/site-packages/certbot/main.py", line 6, in
<module>
from certbot._internal import main as internal_main
File "/usr/local/lib/python3.11/site-packages/certbot/_internal/main.py", line
20, in <module>
import josepy as jose
File "/usr/local/lib/python3.11/site-packages/josepy/__init__.py", line 41, in
<module>
from josepy.json_util import (
File "/usr/local/lib/python3.11/site-packages/josepy/json_util.py", line 25,
in <module>
from OpenSSL import crypto
File "/usr/local/lib/python3.11/site-packages/OpenSSL/__init__.py", line 8, in
<module>
from OpenSSL import SSL, crypto
File "/usr/local/lib/python3.11/site-packages/OpenSSL/SSL.py", line 42, in
<module>
from OpenSSL.crypto import (
File "/usr/local/lib/python3.11/site-packages/OpenSSL/crypto.py", line 26, in
<module>
from typing_extensions import deprecated
ModuleNotFoundError: No module named 'typing_extensions'
PR: 286283
Reported by: dweimer@dweimer.net
*: Replace USES=pycryptography* with USE_PYTHON=cryptography{,_build,_test}
- Introduce USE_PYTHON=cryptography{,_build,_test}
- Switch all 96 ports from USES=pycryptography to with
USE_PYTHON=cryptography{,_build,_test}
- Remove Mk/Uses/pycryptography.mk
PR: 273727
Approved by: tcberner (portmgr)
Exp-run by: antoine
framework: convert tree to use USES=pycryptography
A future commit will update to security/py-cryptography will introduce a
rust dependency.
PR: 254853
all: remove explicit versions in USES=python for "3.x+"
The logic in USES=python will automatically convert this to 3.8+ by
itself.
Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.
finance/quickfix: mark BROKEN with PYTHON
libtool: compile: c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++
-DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable
-Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong
-fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi
-Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings
-Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x
-MT _quickfix_la-QuickfixPython.lo -MD -MP -MF
.deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp -fPIC -DPIC -o
.libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean
'-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
^~~~~~~~~~
1 warning and 1 error generated.
Reviewed by: portmgr, vishwin, yuri
Differential Revision: <https://reviews.freebsd.org/D40568>
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security/py-certbot: Improve periodic script
This change will keep the default behavior in the periodic script
and will add options to customize each parameter for those who want to:
- weekly_certbot_pre_hook
- weekly_certbot_post_hook
- weekly_certbot_deploy_hook
- weekly_certbot_custom_args
PR: 245674, 245954
Reported by: amdmi3, fjoe
Reviewed by: koobs
Approved by: dbaio, koobs (python, maintainer)
MFH: 2020Q3
Differential Revision: https://reviews.freebsd.org/D25391
security/py-[acme|certbot]: Update to 1.3.0
Add patch to satisfy a 'test' error, our local patch to fix config
file path was reverted upstream, we need some action there.
Changelog: https://github.com/certbot/certbot/releases/tag/v1.3.0
PR: 244826
Approved by: koobs (python, maintainer)
Remove unnecessary PORTREVISION=0
Adding extra PORTREVISION=0 is useful to keep slave ports from unintended or
unnecessary PORTREVISION bump when the master port is changed. But it is not for
this case.
PR: 235637
Submitted by: Yasuhiro KIMURA <yasu@utahime.org>
