Testing this is pretty tricky because it's specific to the setup of
Let's Encrypt's production ACMEv1 endpoint which no longer lets people
create accounts or obtain certificates for new domains and we hardcoded
the server URL.

The way I'd test it is:

1. Obtain a real, trusted certificate from Let's Encrypt's production ACMEv2 
endpoint. This is the default server for Certbot.
2. Run a command like `sudo sed -i 's/acme-v02/acme-v01/g' 
/etc/letsencrypt/renewal/*` to change the saved `server` value from ACMEv2 to 
ACMEv1.
3. Run `sudo certbot renew --force-renewal`.

Pre-patch, Certbot should crash because it tries to use ACMEv1 (and an
account doesn't exist), but post-patch it should switch to ACMEv2 and
successfully renew the certificate.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1893274

Title:
  Certbot will stop working for 23,847 users with upcoming Let's Encrypt
  deprecation

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-certbot/+bug/1893274/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to