Thanks again for quickly helping with this issue everyone.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1875471
Title:
python3-certbot-nginx is incompatible with its dependencies
To manage
This bug was fixed in the package python-certbot-nginx -
0.40.0-0ubuntu0.1
---
python-certbot-nginx (0.40.0-0ubuntu0.1) focal; urgency=medium
* Cope with newer python-acme that dropped TLSSNI01 (LP: #1875471):
- new upstream version: 0.40.0
- d/rules: actually run the tests
Thank you to everyone for testing. I see no need for the usual ageing
period on this SRU, as we're only updating a single package, it has no
reverse dependencies, and it shipped in Focal broken. There doesn't
appear to be any of the usual things to gain from waiting.
--
You received this bug
autopackage tests are also green: https://people.canonical.com/~ubuntu-
archive/proposed-migration/focal/update_excuses.html#python-certbot-
nginx
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1875471
autopackage tests are also green: https://people.canonical.com/~ubuntu-
archive/proposed-migration/focal/update_excuses.html#python-certbot-
nginx
--
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to the bug report.
Checks (a), (b), (c), (d) passed, plus the comments from others who
installed the package on their servers or test rigs. Marking the
verification as succeeded.
** Tags removed: verification-needed-focal
** Tags added: verification-done-focal
--
You received this bug notification because you
a) Run https://wiki.ubuntu.com/StableReleaseUpdates/Certbot/TestScript.
Full output attached.
Package from proposed is installed:
*** 0.40.0-0ubuntu0.1 500
500 http://br.archive.ubuntu.com/ubuntu focal-proposed/universe amd64
Packages
100 /var/lib/dpkg/status
0.39.0-1 500
a) Run https://wiki.ubuntu.com/StableReleaseUpdates/Certbot/TestScript.
Full output attached.
Package from proposed is installed:
*** 0.40.0-0ubuntu0.1 500
500 http://br.archive.ubuntu.com/ubuntu focal-proposed/universe amd64
Packages
100 /var/lib/dpkg/status
0.39.0-1 500
Checks (a), (b), (c), (d) passed, plus the comments from others who
installed the package on their servers or test rigs. Marking the
verification as succeeded.
** Tags removed: verification-needed-focal
** Tags added: verification-done-focal
--
You received this bug notification because you
Focal verification tests (b), (c) and (d) below:
a) Running script from
https://wiki.ubuntu.com/StableReleaseUpdates/Certbot/TestScript
b) Request a registration with nginx
sudo certbot -d certbot-test.justgohome.co.uk --agree-tos --staging
--register-unsafely-without-email --nginx
Focal verification tests (b), (c) and (d) below:
a) Running script from
https://wiki.ubuntu.com/StableReleaseUpdates/Certbot/TestScript
b) Request a registration with nginx
sudo certbot -d certbot-test.justgohome.co.uk --agree-tos --staging
--register-unsafely-without-email --nginx
For me, fixed the issue:
`AttributeError: module 'acme.challenges' has no attribute 'TLSSNI01' `
in Ubuntu 20.04
$ dpkg -l python3-certbot-nginx
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required
I tested the proposed package successfully without any issues.
I also examined the changes to our upstream files included in the
package they are what I expected. It's our 0.40.0 certbot-nginx package
with one test change backported from a newer version.
--
You received this bug notification
The package I tested was python3-certbot-nginx 0.40.0-0ubuntu0.1.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1875471
Title:
python3-certbot-nginx is incompatible with its dependencies
To manage
The fixed version works for me.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1875471
Title:
python3-certbot-nginx is incompatible with its dependencies
To manage notifications about this bug go
This looks good. Thank you to everyone involved for working through such
a complex issue. In particular, since python-certbot-nginx is believed
to be completely broken in Focal at the moment, it is unlikely that we
will regress it further and this is a nice minimal fix, so it seems
unlikely that
** Tags added: focal regression-release
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1875471
Title:
python3-certbot-nginx is incompatible with its dependencies
To manage notifications about this
Uploaded, waiting for SRU team.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1875471
Title:
python3-certbot-nginx is incompatible with its dependencies
To manage notifications about this bug go
Uploaded, waiting for SRU team.
--
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1875471
Title:
python3-certbot-nginx is incompatible with its dependencies
To manage notifications about
** Merge proposal linked:
https://code.launchpad.net/~ahasenack/ubuntu/+source/python-certbot-nginx/+git/python-certbot-nginx/+merge/383529
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1875471
** Merge proposal linked:
https://code.launchpad.net/~ahasenack/ubuntu/+source/python-certbot-nginx/+git/python-certbot-nginx/+merge/383528
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1875471
** Description changed:
This bug tracks an update for python-certbot from 0.39.0 to 0.40.0.
This update includes bugfixes only following the SRU policy exception
defined at https://wiki.ubuntu.com/StableReleaseUpdates/Certbot.
[Impact]
Reguesting a certificate via the nginx
** Description changed:
This bug tracks an update for python-certbot from 0.39.0 to 0.40.0.
This update includes bugfixes only following the SRU policy exception
defined at https://wiki.ubuntu.com/StableReleaseUpdates/Certbot.
[Impact]
Reguesting a certificate via the nginx
** Description changed:
This bug tracks an update for python-certbot from 0.39.0 to 0.40.0.
This update includes bugfixes only following the SRU policy exception
defined at https://wiki.ubuntu.com/StableReleaseUpdates/Certbot.
[Impact]
Reguesting a certificate via the nginx
** Description changed:
This bug tracks an update for python-certbot from 0.39.0 to 0.40.0.
This update includes bugfixes only following the SRU policy exception
defined at https://wiki.ubuntu.com/StableReleaseUpdates/Certbot.
[Impact]
Reguesting a certificate via the nginx
Successful run with apache:
ubuntu@certbot-test:~$ sudo certbot -d certbot-test.justgohome.co.uk
--agree-tos --staging --register-unsafely-without-email --apache
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
Obtaining a new
Successful run with apache:
ubuntu@certbot-test:~$ sudo certbot -d certbot-test.justgohome.co.uk
--agree-tos --staging --register-unsafely-without-email --apache
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
Obtaining a new
** Description changed:
This bug tracks an update for python-certbot from 0.39.0 to 0.40.0.
This update includes bugfixes only following the SRU policy exception
defined at https://wiki.ubuntu.com/StableReleaseUpdates/Certbot.
[Impact]
Not directly applicable; see the exception
** Description changed:
This bug tracks an update for python-certbot from 0.39.0 to 0.40.0.
This update includes bugfixes only following the SRU policy exception
defined at https://wiki.ubuntu.com/StableReleaseUpdates/Certbot.
[Impact]
Not directly applicable; see the exception
** Description changed:
- This issue only affects version 0.39.0-1 of the python-certbot-nginx
- package in Ubuntu 20.04.
+ This bug tracks an update for python-certbot from 0.39.0 to 0.40.0.
+
+ This update includes bugfixes only following the SRU policy exception
+ defined at
** Description changed:
- This issue only affects version 0.39.0-1 of the python-certbot-nginx
- package in Ubuntu 20.04.
+ This bug tracks an update for python-certbot from 0.39.0 to 0.40.0.
+
+ This update includes bugfixes only following the SRU policy exception
+ defined at
Fantastic! Thanks again Andreas.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1875471
Title:
python3-certbot-nginx is incompatible with its dependencies
To manage notifications about this bug go
Staging server test worked just fine. I'll prepare the SRU paperwork.
ubuntu@certbot-test:~$ sudo certbot -d certbot-test.justgohome.co.uk
--agree-tos --staging --register-unsafely-without-email --nginx
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator
Staging server test worked just fine. I'll prepare the SRU paperwork.
ubuntu@certbot-test:~$ sudo certbot -d certbot-test.justgohome.co.uk
--agree-tos --staging --register-unsafely-without-email --nginx
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator
Thanks for the test update, worked great:
(...)
testing section-continuations-2525.conf...passed
testing section-empty-continuations-2731.conf...passed
testing semacode-1598.conf...passed
testing two-blocks-one-line-1693.conf...passed
Success!
Package versions tested:
certbot 0.40.0-1
letsencrypt
Thanks for the test update, worked great:
(...)
testing section-continuations-2525.conf...passed
testing section-empty-continuations-2731.conf...passed
testing semacode-1598.conf...passed
testing two-blocks-one-line-1693.conf...passed
Success!
Package versions tested:
certbot 0.40.0-1
letsencrypt
https://launchpad.net/~ahasenack/+archive/ubuntu/certbot-
tlssni01-1875471-d
--
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1875471
Title:
python3-certbot-nginx is incompatible with its
https://launchpad.net/~ahasenack/+archive/ubuntu/certbot-
tlssni01-1875471-d
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1875471
Title:
python3-certbot-nginx is incompatible with its dependencies
That sounds good, let me prepare a separate ppa for (d)
--
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1875471
Title:
python3-certbot-nginx is incompatible with its dependencies
To manage
That sounds good, let me prepare a separate ppa for (d)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1875471
Title:
python3-certbot-nginx is incompatible with its dependencies
To manage
To offer one other option based on my previous comments while trying to
keep things simple, I think in the short term you could also go with:
d) Update just python-certbot-nginx to 0.40.0 and apply this patch to
python-certbot-nginx's tests:
The testscript at
https://wiki.ubuntu.com/StableReleaseUpdates/Certbot/TestScript no
longer works:
Cloning into '/root/gopath/src/github.com/letsencrypt/boulder'...
remote: Enumerating objects: 2676, done.
remote: Counting objects: 100% (2676/2676), done.
remote: Compressing objects: 100%
The testscript at
https://wiki.ubuntu.com/StableReleaseUpdates/Certbot/TestScript no
longer works:
Cloning into '/root/gopath/src/github.com/letsencrypt/boulder'...
remote: Enumerating objects: 2676, done.
remote: Counting objects: 100% (2676/2676), done.
remote: Compressing objects: 100%
If you want to do a more extensive test, I just added end-to-end nginx
certbot testing in Debian sid. You should be able to pull it out of
the source package and run it by hand just by invoking the script from
the extracted source tarball, as long as you have pebble and the nginx
plugin
Ok, I filed bugs for the FTBFS issues, but per policy, we won't do an
update just to fix failed-to-build-from-source bugs: these should be
updated together with something else.
Thanks for all the options you outlined in comment #8, and for the check
in comment #11.
So to keep things simple:
a)
Ok, I filed bugs for the FTBFS issues, but per policy, we won't do an
update just to fix failed-to-build-from-source bugs: these should be
updated together with something else.
Thanks for all the options you outlined in comment #8, and for the check
in comment #11.
So to keep things simple:
a)
I think changing the build-dep to python3-idna << 2.9 is acceptable. It
looks like we hit a similar problem with the last SRU and I described
the problem and how to fix the specific issue at the time at
https://bugs.launchpad.net/ubuntu/+source/python-
acme/+bug/1836823/comments/23.
In this case,
Quick update on the current focal situation regarding some of these
packages:
These are currently an FTBFS in focal:
- python-certbot 0.40.0-1 (build-time tests fail)
- python-acme 1.1.0-1 (build-dep python3-idna <<2.8 not satisfied. When it was
last built in focal, python3-idna was at 2.6)
-
Quick update on the current focal situation regarding some of these
packages:
These are currently an FTBFS in focal:
- python-certbot 0.40.0-1 (build-time tests fail)
- python-acme 1.1.0-1 (build-dep python3-idna <<2.8 not satisfied. When it was
last built in focal, python3-idna was at 2.6)
-
Sorry for having gone radio silent in the past few days. I'm back on
this tomorrow.
--
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1875471
Title:
python3-certbot-nginx is incompatible with
Sorry for having gone radio silent in the past few days. I'm back on
this tomorrow.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1875471
Title:
python3-certbot-nginx is incompatible with its
Thanks a lot for quickly working on this issue Andreas.
Applying that commit to python-certbot 0.40.0-1 in addition to the
python-certbot-nginx changes would fix both python-certbot and python-
certbot-nginx's tests, however, it would break python-certbot-apache in
normal usage outside of tests
PPA with test packages: https://launchpad.net/~ahasenack/+archive/ubuntu
/certbot-tlssni01-1875471
It has python-certbot with TLSSNI01 removed, probably not necessary for
this bugfix, but it allowed me to re-introduce the build-time tests for
the python-certbot-nginx package.
Will continue
PPA with test packages: https://launchpad.net/~ahasenack/+archive/ubuntu
/certbot-tlssni01-1875471
It has python-certbot with TLSSNI01 removed, probably not necessary for
this bugfix, but it allowed me to re-introduce the build-time tests for
the python-certbot-nginx package.
Will continue
Would this commit be correct to apply on top of 0.40.0 to at least match
python-acme 1.1.0-1 that is in focal w.r.t. TLSSNI01's removal?
https://github.com/certbot/certbot/commit/4b488614cf7749c8139c11f0983fe4b71e29827f
* Remove tls sni common (#7527)
* fixes #7478
* add changelog entry
If
Would this commit be correct to apply on top of 0.40.0 to at least match
python-acme 1.1.0-1 that is in focal w.r.t. TLSSNI01's removal?
https://github.com/certbot/certbot/commit/4b488614cf7749c8139c11f0983fe4b71e29827f
* Remove tls sni common (#7527)
* fixes #7478
* add changelog entry
If
So python-certbot 0.40.0 still has TLSSNI01, but not acme, and so far
only python-certbot-nginx is triggering the error. Probably not worth
bumping python-certbot just to be able to run its tests correctly.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
So python-certbot 0.40.0 still has TLSSNI01, but not acme, and so far
only python-certbot-nginx is triggering the error. Probably not worth
bumping python-certbot just to be able to run its tests correctly.
--
You received this bug notification because you are a member of Ubuntu
Server, which is
> In the current state in Focal/Groovy, the tests we include in our packages
> are broken
> for at least python-certbot, python-certbot-apache, and python-certbot-nginx.
> The python-certbot-dns-* packages themselves are working, but I didn't verify
> whether
> or not the tests are. I can if
> In the current state in Focal/Groovy, the tests we include in our packages
> are broken
> for at least python-certbot, python-certbot-apache, and python-certbot-nginx.
> The python-certbot-dns-* packages themselves are working, but I didn't verify
> whether
> or not the tests are. I can if
The groovy packages are being updated, there are just too many packages
being handled and the machines are very busy.
For focal, we should take the path of updating the nginx subpackage to
0.40.0. I'll handle that and check the tests.
--
You received this bug notification because you are a
The groovy packages are being updated, there are just too many packages
being handled and the machines are very busy.
For focal, we should take the path of updating the nginx subpackage to
0.40.0. I'll handle that and check the tests.
--
You received this bug notification because you are a
** Changed in: python-certbot-nginx (Ubuntu)
Assignee: (unassigned) => Andreas Hasenack (ahasenack)
** Changed in: python-certbot-nginx (Ubuntu)
Importance: Undecided => High
** Changed in: python-certbot-nginx (Ubuntu)
Status: Confirmed => In Progress
--
You received this bug
** Changed in: python-certbot-nginx (Ubuntu)
Assignee: (unassigned) => Andreas Hasenack (ahasenack)
** Changed in: python-certbot-nginx (Ubuntu)
Importance: Undecided => High
** Changed in: python-certbot-nginx (Ubuntu)
Status: Confirmed => In Progress
--
You received this bug
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: python-certbot-nginx (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
At the risk of sending the discussion in this issue off topic, I looked
into other potential problems with the Certbot packages in Focal/Groovy
since they've been being held back. I'm happy to move this discussion
somewhere else if people prefer.
In the current state in Focal/Groovy, the tests we
66 matches
Mail list logo
