Certbot 5.5.0
2026-04-08T08:51:58Z•52de94cbae79047a33502619c8bdf8026e42c8c6373aef8aa2849977455a6eb7
ACMEOCSPapachecertbotcryptographydependency-updatedeprecationhooksip-certificatesnginxpyOpenSSLsnapsupply-chainwebroot
What happened
Series of Certbot releases (v4.2.0 through v5.5.0) with feature additions, refactors, dependency updates, and some security-relevant fixes. Notable security-relevant changes: Certbot’s OCSP code/path is being refactored (certbot.ocsp deprecated) and OCSP revocation checking now always uses the Python cryptography library rather than invoking an OpenSSL binary; the Certbot snap no longer sets PYTHONPATH (mitigates hook environment pollution / local module injection); snaps were rebuilt to include updated dependencies. Other changes: support for IP address SAN issuance and a new --ip-address CLI
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- certbot_releases
- Record identifier
- 52de94cbae79047a33502619c8bdf8026e42c8c6373aef8aa2849977455a6eb7
- Enrichment time
- 2026-04-08T08:51:58Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.