Changed
- certbot-nginx no longer creates and uses self-signed certificates as an
intermediate step when installing certificates. The certificates the user
requested Certbot install are now always used instead.
(#10465) - The function
acme.crypto_util.make_self_signed_cert
was deprecated and will
be removed in a future release.
(#10466)
Fixed
- Fixed a bug in certbot-nginx that'd leave nginx configured with self-signed
certificates if a user rancertbot enhance
and they didn't have matching
SSL server blocks.certbot enhance
now requires the user to have a matching
SSL server block to enable HSTS or OCSP stapling enhancements.
(#10455)