certbot/certbot v4.2.0

Certbot 4.2.0

on GitHub

Added

• Added --eab-hmac-alg parameter to support custom HMAC algorithm for
  External Account Binding.
  (#10281)

Changed

• Catches and ignores errors during the directory fetch for ARI checking so
  that these errors do not hinder the actual certificate issuance.
  (#10342)
• Removed the dependency on pytz.
  (#10350)
• Deprecated acme.crypto_util.probe_sni
  (#10386)
• Support for Python 3.9 was deprecated and will be removed in our next planned
  release. (#10390)

Fixed

• The Certbot snap no longer sets the environment variable PYTHONPATH stopping
  it from picking up Python files in the current directory and polluting the
  environment for Certbot hooks written in Python.
  (#10176,
  #10257)
• Previously, we claimed to set FAILED_DOMAINS and RENEWED_DOMAINS env
  variables for use by post-hooks when certificate renewals fail, but we were
  not actually setting them. Now, we are.
  (#10259)
• Certbot now always uses the server value from the renewal configuration file
  for ARI checks instead of the server value from the current invocation of
  Certbot. This helps prevent ARI requests from going to the wrong server if
  the user changes CAs.
  (#10339)