Certbot 5.3.1
2026-03-04T20:25:05Z•eca80313413687de5c7d9e44c85518c92ebb274c8ee8b8e82cf4d31aaca262a3
PYTHONPATHacmearicertbotcrash-fixdependency-updatehooksip-address-sanlets-encryptnginxocspprobe_snipyopensslrelease-notessnaptls-alpn-01
What happened
Release notes for Certbot versions 4.1.0 through 5.3.1. Notable security- and operations-relevant changes: snaps were rebuilt to include updated dependency versions (5.3.1), the Certbot snap no longer sets PYTHONPATH (fixes risk of Python hook code being hijacked from current directory), OCSP checking now uses the cryptography library rather than forcing openssl, and several deprecated/removed crypto-related APIs (pyOpenSSL x509/PKey usage, TLS-ALPN-01 helpers, probe_sni) may affect integrations. ACME Renewal Info (ARI) support and behavior changes (including skipping ARI on dry-run and persis
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- certbot_releases
- Record identifier
- eca80313413687de5c7d9e44c85518c92ebb274c8ee8b8e82cf4d31aaca262a3
- Enrichment time
- 2026-03-04T20:25:05Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.