certapi 1.1.6__tar.gz → 1.1.7__tar.gz

{certapi-1.1.6/src/certapi.egg-info → certapi-1.1.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: certapi
-Version: 1.1.6
+Version: 1.1.7
 Summary: Python Package for managing keys, request SSL certificates from ACME.
 Home-page: https://github.com/mesudip/certapi
 Author: Sudip Bhattarai
@@ -10,7 +10,7 @@ Classifier: License :: OSI Approved :: MIT License
 Classifier: Operating System :: OS Independent
 Requires-Python: >=3.6
 Description-Content-Type: text/markdown
-Requires-Dist: cryptography
+Requires-Dist: cryptography>=39.0.0
 Requires-Dist: requests
 Dynamic: author
 Dynamic: author-email

{certapi-1.1.6 → certapi-1.1.7}/setup.py

@@ -2,11 +2,11 @@ from setuptools import setup, find_packages
 
 setup(
     name="certapi",
-    version="1.1.6",
+    version="1.1.7",
     packages=find_packages(where="src"),
     package_dir={"": "src"},
     install_requires=[
-        "cryptography",
+        "cryptography>=39.0.0",
         "requests",
     ],
     include_package_data=True,

{certapi-1.1.6 → certapi-1.1.7}/src/certapi/client/renewal_manager.py

@@ -419,8 +419,8 @@ class RenewalManager:
             if (expiry - now).total_seconds() < due_window:
                 due_domains.append(domain)
 
-        for domain in due_domains:
-            self._renew_domain(domain, now)
+        if due_domains:
+            self._renew_domains(due_domains, now)
 
         return len(due_domains)
 
@@ -463,10 +463,12 @@ class RenewalManager:
                     self._cache[domain] = expiry
             self._lock.notify_all()
 
-    def _renew_domain(self, domain: str, now: datetime):
-        domain_had_cached_entry = False
+    def _renew_domains(self, domains: List[str], now: datetime):
+        domains_with_cached_entries = []
         with self._lock:
-            domain_had_cached_entry = domain in self._cache
+            for domain in domains:
+                if domain in self._cache:
+                    domains_with_cached_entries.append(domain)
 
         try:
             renew_threshold_days = self.cert_min_renew_threshold_secs // (24 * 3600)
@@ -475,7 +477,7 @@ class RenewalManager:
                 "expiry_days": self.expiry_days,
                 "renew_threshold_days": renew_threshold_days,
                 "skip_failing": False,
-                "batch_domains": self.batch_domains,
+                "batch_domains": True,
                 "self_verify": self.self_verify,
                 "country": self.country,
                 "state": self.state,
@@ -485,7 +487,7 @@ class RenewalManager:
             }
             res = self._call_certificate_backend(
                 self.cert_manager_client.obtain,
-                [domain],
+                domains,
                 obtain_options,
             )
             if res is None:
@@ -493,11 +495,12 @@ class RenewalManager:
             self._update_expiry_cache(res.issued + res.existing)
         except Exception as e:
             self._set_error(e)
-            self._add_to_blacklist(domain, now)
-            if domain_had_cached_entry or self._has_local_certificate(domain):
-                self._schedule_existing_certificate_retry(domain, now)
-            else:
-                self._register_self_signed(domain)
+            for domain in domains:
+                self._add_to_blacklist(domain, now)
+                if domain in domains_with_cached_entries or self._has_local_certificate(domain):
+                    self._schedule_existing_certificate_retry(domain, now)
+                else:
+                    self._register_self_signed(domain)
 
     def _schedule_existing_certificate_retry(self, domain: str, now: datetime):
         retry_interval_seconds = min(self.renew_retry_interval_seconds, 24 * 3600)

{certapi-1.1.6 → certapi-1.1.7}/src/certapi/issuers/AcmeCertIssuer.py

@@ -95,7 +95,7 @@ class AcmeCertIssuer(CertIssuer):
                     return order.get_certificate()
                 return None
             elif order.status == "processing":
-                return obtain_cert()
+                return obtain_cert(count - 1)
             return None  # TODO: error throwing here
 
         return obtain_cert()

{certapi-1.1.6 → certapi-1.1.7/src/certapi.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: certapi
-Version: 1.1.6
+Version: 1.1.7
 Summary: Python Package for managing keys, request SSL certificates from ACME.
 Home-page: https://github.com/mesudip/certapi
 Author: Sudip Bhattarai
@@ -10,7 +10,7 @@ Classifier: License :: OSI Approved :: MIT License
 Classifier: Operating System :: OS Independent
 Requires-Python: >=3.6
 Description-Content-Type: text/markdown
-Requires-Dist: cryptography
+Requires-Dist: cryptography>=39.0.0
 Requires-Dist: requests
 Dynamic: author
 Dynamic: author-email

certapi-1.1.7/src/certapi.egg-info/requires.txt

@@ -0,0 +1,2 @@
+cryptography>=39.0.0
+requests

{certapi-1.1.6 → certapi-1.1.7}/tests/test_renewal_manager.py

@@ -25,7 +25,7 @@ class DummyClient:
 
     def obtain(self, hosts, **kwargs):
         host = hosts[0] if isinstance(hosts, list) else hosts
-        self.calls.append({"host": host, "kwargs": kwargs})
+        self.calls.append({"host": host, "hosts": hosts, "kwargs": kwargs})
         handler = self._handlers.get(host)
         if handler is None:
             return CertificateResponse()
@@ -47,12 +47,12 @@ class DummyClientWithObtain(DummyClient):
 
     def obtain(self, hosts, **kwargs):
         host = hosts[0] if isinstance(hosts, list) else hosts
-        self.obtain_calls.append({"host": host, "kwargs": kwargs})
+        self.obtain_calls.append({"host": host, "hosts": hosts, "kwargs": kwargs})
         return super().obtain(hosts, **kwargs)
 
     def issue_certificate(self, hosts, **kwargs):
         host = hosts[0] if isinstance(hosts, list) else hosts
-        self.issue_calls.append({"host": host, "kwargs": kwargs})
+        self.issue_calls.append({"host": host, "hosts": hosts, "kwargs": kwargs})
         return super().obtain(hosts, **kwargs)
 
 
@@ -702,3 +702,16 @@ def test_stop_does_not_wait_for_hung_remote_request_thread():
 
     assert not mgr._thread.is_alive()
     release.set()
+
+
+def test_renewal_manager_batches_due_domains():
+    now = datetime(2026, 1, 1, tzinfo=UTC)
+    client = DummyClientWithObtain()
+    client.set_handler("domain1.com", CertificateResponse())
+
+    mgr = RenewalManager(client, renew_threshold_days=30, clock_fn=lambda: now, batch_domains=True)
+    mgr.update_watch_domains(["domain1.com", "domain2.com"])
+
+    assert len(client.obtain_calls) == 1
+    assert "domain1.com" in client.obtain_calls[0]["hosts"]
+    assert "domain2.com" in client.obtain_calls[0]["hosts"]

certapi-1.1.6/src/certapi.egg-info/requires.txt

@@ -1,2 +0,0 @@
-cryptography
-requests