chore(ca): remove the discontinued BuyPass Go CA provider (v2.16.1)#316
Merged
Conversation
BuyPass Go SSL has been discontinued: BuyPass stopped accepting new ACME accounts on 2025-09-15, issued its last certificate on 2025-10-31, and terminated the service entirely (all certificates expired) by 2026-04-15. Selecting it can now only fail, so it is removed as a CA option. Removed from the CA registry (ca_manager), the API ca_provider enum (models), the test-ca-provider endpoint (resources), the dashboard and Settings UI (index.html, settings_ca.html, settings.js, dashboard.js), the documented CA list (README), and its unit test. The other CAs (Let's Encrypt, ZeroSSL, Google, Actalis, DigiCert, SSL.com, Private CA) are unaffected. A certificate whose stored metadata still names BuyPass degrades gracefully: `certbot renew` runs against the on-disk config without re-resolving the CA; a reissue surfaces a clear ValueError (caught and audited as a failure) rather than crashing; and the dashboard's CA-info panel now has a default branch that shows "this certificate authority is no longer available; reissue with a supported CA" instead of a blank line. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Bump to 2.16.1 and add RELEASE_NOTES entries for v2.16.1 (BuyPass removal) and v2.16.0 (the agentic audit trail, which shipped as a GitHub release only and was missing from RELEASE_NOTES.md). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
BuyPass Go SSL has been discontinued. Per Buypass: no new ACME accounts since 2025-09-15, last issuance 2025-10-31, and the ACME service terminated with all certificates expired by 2026-04-15. It is now 2026-06, so selecting BuyPass can only fail — this removes it as a CA option (a subtractive cleanup).
Removed
BuyPass dropped from every surface, leaving the other CAs untouched (Let's Encrypt, ZeroSSL, Google, Actalis, DigiCert, SSL.com, Private CA):
modules/core/ca_manager.py— the CA registry entrymodules/api/models.py— theca_providerenummodules/api/resources.py— the test-ca-provider validation branchtemplates/index.html,templates/partials/settings_ca.html— the dropdown option + config blockstatic/js/settings.js(9 sites),static/js/dashboard.js— UI wiring + labelREADME.md— the documented CA listtests/test_ca_provider_test_endpoint.py— the BuyPass testGraceful degradation (verified)
A certificate whose stored metadata still names
buypassdoes not crash:certbot renewagainst the on-disk config without re-resolving the CA;ValueErrorthat is caught and audited as a failure;Verification
test_ca_provider_wiring_consistency.pyderives the provider set fromCAManager.ca_providers.keys()and checks every UI/API surface for missing and phantom providers — green. Full suite 1529 passed.py_compile+node --checkclean.frontend-cssand theme gates green. Nobuypassreference remains outsideRELEASE_NOTES.md(release history, intentionally untouched).Thanks to Joni for flagging the BuyPass discontinuation on LinkedIn.
🤖 Generated with Claude Code