Added
- Added timeout to DNS query function calls for dns-rfc2136 plugin.
- Confirmation when deleting certificates
- CLI flag
--key-type
has been added to specify 'rsa' or 'ecdsa' (default 'rsa'). - CLI flag
--elliptic-curve
has been added which takes an NIST/SECG elliptic curve. Any of
secp256r1
,secp284r1
andsecp521r1
are accepted values. - The command
certbot certficates
lists the which type of the private key that was used
for the private key. - Support for Python 3.9 was added to Certbot and all of its components.
Changed
- certbot-auto was deprecated on Debian based systems.
- CLI flag
--manual-public-ip-logging-ok
is now a no-op, generates a
deprecation warning, and will be removed in a future release.
Fixed
- Fixed a Unicode-related crash in the nginx plugin when running under Python 2.
More details about these changes can be found on our GitHub repo.