From owner-freebsd-questions@freebsd.org Tue Dec 11 11:55:46 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C59FA132D89C for ; Tue, 11 Dec 2018 11:55:45 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:c4ea:bd49:619b:6cb3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1B8536B288 for ; Tue, 11 Dec 2018 11:55:45 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from leaf.local (unknown [88.202.132.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id 3952079C0 for ; Tue, 11 Dec 2018 11:55:42 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=fail (p=none dis=none) header.from=infracaninophile.co.uk Authentication-Results: smtp.infracaninophile.co.uk/3952079C0; dkim=none; dkim-atps=neutral Subject: Re: certbot lost certificates , and registration data To: freebsd-questions@freebsd.org References: <4290f82e-ce3a-0ce3-aab7-df21a9c636e6@ifdnrg.com> <80637ff8-1c6a-d23b-6bda-bc8b48b5c51b@ifdnrg.com> <5314f953-78f4-234a-0a66-5874f9d4fe41@FreeBSD.org> <14e39bc0-6910-e264-e0e5-482cda6b490e@FreeBSD.org> From: Matthew Seaman Message-ID: <6c0308b9-c5a1-705e-71c1-542142e67c12@infracaninophile.co.uk> Date: Tue, 11 Dec 2018 11:55:41 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-GB Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 1B8536B288 X-Spamd-Result: default: False [-2.36 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; NEURAL_HAM_MEDIUM(-0.99)[-0.994,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2001:8b0:151:1:c4ea:bd49:619b:6cb3]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-0.999,0]; NEURAL_SPAM_SHORT(0.47)[0.467,0]; MX_GOOD(-0.01)[smtp.infracaninophile.co.uk]; DMARC_POLICY_ALLOW(-0.50)[infracaninophile.co.uk,none]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; IP_SCORE(-0.02)[country: GB(-0.10)]; ASN(0.00)[asn:20712, ipnet:2001:8b0::/32, country:GB]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_TLS_ALL(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-Rspamd-Server: mx1.freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Dec 2018 11:55:46 -0000 On 11/12/2018 10:57, Carmel NY wrote: > On Mon, 10 Dec 2018 23:14:23 +0000, Matthew Seaman stated: > >> On 10/12/2018 20:46, Carmel NY wrote: >>> On Mon, 10 Dec 2018 17:56:22 +0000, Matthew Seaman stated: >>> >>>> This was due to an upstream change moving where various paths are >>>> defined to a different file, and so making the port's attempt to modify >>>> the settings in the original file pretty futile. I'll be working on a >>>> fix later tonight. >>> >>> I am not sure if all of the py*-certbots are maintained by the same person; >>> but shouldn't they have caught this problem before releasing it? They must >>> have tested it, right? >>> >> >> They're mostly maintained by python@FreeBSD.org which is a group of >> people (See towards the end of https://wiki.freebsd.org/Python). >> >> Yes, ideally this mistake would have been caught before the port was >> updated. It's a slightly tricky thing though -- test building would >> have shown everything was fine. It's only when anyone tried to *run* >> certbot that the problems become apparent, and no-one did that before >> committing the upgrade. For routine updates patch-level updates like >> this one, 99% of the time just doing build tests is sufficient. This >> unluckily happened to be one of the 1%. >> >> If anyone is interested in testing it, I've created a patch which can be >> downloaded from https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=233909 >> >> Cheers, >> >> Matthew > > I tried the patch, and it appears to be working. I'm using py36-certbot with > the apache option if that makes any difference. > Thanks for testing. Just waiting on approval from python@. Cheers, Matthew