Public bug reported:

This bug affects the python-certbot packages in Xenial and Bionic.
Cosmic and newer is unaffected.

To do almost anything in the ACME protocol used by Let's Encrypt and
Certbot including obtaining and revoking certificates, you need to first
create an account with the ACME server. Starting in November, Certbot
will no longer be able to do that with its default configuration. This
is because as part of pushing people towards the standardized version of
the protocol, Let's Encrypt is no longer letting people create new
accounts on their ACMEv1 endpoint. More details about this change can be
found at https://community.letsencrypt.org/t/end-of-life-plan-for-
acmev1/88430.

What this means for Ubuntu users is that new Certbot installations on
affected systems would need to be given the URL of an alternative ACME
server in order to work. Existing installations would be unaffected for
now as long as they don't deactivate their account or delete its
credentials. They will have additional problems in the future due to the
additional deprecations described in the link above.

To solve this problem, I recommend backporting the Certbot packages from
Cosmic to Bionic and Xenial. There are no breaking changes to the public
interfaces between versions and I think this results in the smallest
change to the packages that would resolve this problem while sticking to
well tested packages.

** Affects: python-certbot (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: python-certbot (Ubuntu Xenial)
     Importance: High
         Status: Triaged

** Affects: python-certbot (Ubuntu Bionic)
     Importance: High
         Status: Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1837673

Title:
  Certbot will be unable to create new ACME accounts

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-certbot/+bug/1837673/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to