Bug#1125267: certbot: newer version available with bugfixes for shortlived certificates
On Sat, Apr 4, 2026 at 8:31 PM Harlan Lieberman-Berg wrote: > I will look into how complicated backporting the patch series is to what's > in trixie. > I have filed #1132949 for the trixie update. Sincerely, -- Harlan Lieberman-Berg ~hlieberman
Bug#1125267: certbot: newer version available with bugfixes for shortlived certificates
On Sun, 11 Jan 2026 18:01:32 +0100 Ansgar wrote: > I tried using `--preferred-profile shortlived` with certbot from > Debian trixie. There is a problem with renewal: the profile selection > does not get remembered and on a renewal the default profile is used > instead of the shortlived profile. This is > https://github.com/certbot/certbot/pull/10280 Some progress, here. 5.4.0-4 is now making its way into testing which contains the commits you were concerned about. I will look into how complicated backporting the patch series is to what's in trixie. Sincerely, -- Harlan Lieberman-Berg ~hlieberman
Bug#1125267: certbot: newer version available with bugfixes for shortlived certificates
Source: python-certbot Version: 4.0.0-2 Severity: normal Tags: upstream Hi, I tried using `--preferred-profile shortlived` with certbot from Debian trixie. There is a problem with renewal: the profile selection does not get remembered and on a renewal the default profile is used instead of the shortlived profile. This is https://github.com/certbot/certbot/pull/10280 (And indeed adding `"preferred_profile"` to `STR_CONFIG_ITEMS` seems to make renewal work correctly.) There have been multiple releases upstream since the fix was merged that have not been uploaded to Debian, the last one is 5.2.2 from 2025-12-10. It would be nice if this bug was also fixed in Debian trixie. Ansgar
