[contribteam] [Bug 10688] Incorrect CA Setting in config when enabled
https://bugs.contribs.org/show_bug.cgi?id=10688 Bug ID: 10688 Summary: Incorrect CA Setting in config when enabled Classification: Contribs Product: SME Contribs Version: 9.2 Hardware: --- OS: --- Status: UNCONFIRMED Severity: normal Priority: P3 Component: smeserver-letsencrypt Assignee: jcr...@safeandsoundit.co.uk Reporter: t...@berwyn-136.com QA Contact: contribteam@lists.contribs.org Target Milestone: --- When status changed from test to enabled, and API is defined or 1, the CA value within /etc/dehydrated/config does not change and FAKE LE Intermediate X1 certificates are still issued. The 10Default template fragment has the same CA setting value in both test cases - i.e. acme-staging. Should be acme-v01 for when enabled. -- You are receiving this mail because: You are the QA Contact for the bug.___ Mail for each SME Contribs bug report To unsubscribe, e-mail contribteam-unsubscr...@lists.contribs.org Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
[contribteam] [Bug 10688] Incorrect CA Setting in config when enabled
https://bugs.contribs.org/show_bug.cgi?id=10688 John Crisp changed: What|Removed |Added Status|UNCONFIRMED |CONFIRMED Ever confirmed|0 |1 -- You are receiving this mail because: You are the QA Contact for the bug.___ Mail for each SME Contribs bug report To unsubscribe, e-mail contribteam-unsubscr...@lists.contribs.org Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
[contribteam] [Bug 10688] Incorrect CA Setting in config when enabled
https://bugs.contribs.org/show_bug.cgi?id=10688
--- Comment #1 from John Crisp ---
Thanks - good catch.
I must have been tired :-)
Just doing a patch - smeserver-letsencrypt-0.5-9
+++
smeserver-letsencrypt-0.5/root/etc/e-smith/templates/etc/dehydrated/config/10Default
2019-01-04 02:56:51.324075090 +0100
@@ -38,7 +38,7 @@
# If it's v1 then use v1, if v2 then v2, if auto accept the defaults
in the main file
if ( $letsencryptAPI eq '1' ) {
-$OUT .=
"CA=\"https://acme-staging.api.letsencrypt.org/directory\"\n";;
+$OUT .= "CA=\"https://acme-v01.api.letsencrypt.org/directory\"\n";;
}
elsif ( $letsencryptAPI eq '2' ) {
$OUT .= "CA=\"https://acme-v02.api.letsencrypt.org/directory\"\n";;
--
You are receiving this mail because:
You are the QA Contact for the bug.___
Mail for each SME Contribs bug report
To unsubscribe, e-mail contribteam-unsubscr...@lists.contribs.org
Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
[contribteam] [Bug 10688] Incorrect CA Setting in config when enabled
https://bugs.contribs.org/show_bug.cgi?id=10688 John Crisp changed: What|Removed |Added Status|CONFIRMED |IN_PROGRESS --- Comment #2 from John Crisp --- * Fri Jan 04 2019 John Crisp 0.5-9.sme - Fix incorrect CA line in config [SME: 10688] /usr/bin/plague-client build smeserver-letsencrypt smeserver-letsencrypt-0_5-9 contribs9 Package smeserver-letsencrypt enqueued. Job ID: 2007. Should be in smetest soon. yum --enablerepo=smetest install smeserver-letsencrypt I would be really grateful if you could test install this to verify it and make sure it works as Terry has a struggle testing letsencrypt. Once installed trying modifying the settings and the just re-expand the template to check it without actually running dehydrated. e.g. config setprop letsencrypt status test API 1 expand-template /etc/dehydrated/config cat /etc/dehydrated/config Etc etc Many thamks -- You are receiving this mail because: You are the QA Contact for the bug.___ Mail for each SME Contribs bug report To unsubscribe, e-mail contribteam-unsubscr...@lists.contribs.org Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
[contribteam] [Bug 10688] Incorrect CA Setting in config when enabled
https://bugs.contribs.org/show_bug.cgi?id=10688 --- Comment #3 from John Crisp --- Check here https://buildsys.koozali.org/plague/success.psp Currently Needs Signing. When finished it should be available sometime shortly thereafter depending on mirrors -- You are receiving this mail because: You are the QA Contact for the bug.___ Mail for each SME Contribs bug report To unsubscribe, e-mail contribteam-unsubscr...@lists.contribs.org Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
[contribteam] [Bug 10688] Incorrect CA Setting in config when enabled
https://bugs.contribs.org/show_bug.cgi?id=10688 John Crisp changed: What|Removed |Added Flags||help_verify+ -- You are receiving this mail because: You are the QA Contact for the bug.___ Mail for each SME Contribs bug report To unsubscribe, e-mail contribteam-unsubscr...@lists.contribs.org Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
[contribteam] [Bug 10688] Incorrect CA Setting in config when enabled
https://bugs.contribs.org/show_bug.cgi?id=10688 --- Comment #4 from John Crisp --- This is in smetest now. Please let us know if it works correctly now thanks. -- You are receiving this mail because: You are the QA Contact for the bug.___ Mail for each SME Contribs bug report To unsubscribe, e-mail contribteam-unsubscr...@lists.contribs.org Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
[contribteam] [Bug 10688] Incorrect CA Setting in config when enabled
https://bugs.contribs.org/show_bug.cgi?id=10688 --- Comment #5 from tim nash --- VERIFIED After yum update smeserver-letsencrypt --enablerpeo=smetest I did config setprop letsencrypt etc to set status to test or enabled with API undefined, 1 or 2 config show letsencrypt expand-template /etc/dehydrated/config cat /etc/dehydrated/config With status test, with or without API=1, get acme-staging With status test, with API=2, get acme-staging-v02 With status enabled, with or without API=1, get acme-v01 With status enabled, with API=2, get acme-v02 With status enabled, also get BASEDIR, CONTACT_EMAIL, HOOK and API values added to config file. As an aside, if status is set to disabled, immediately after test or enabled, then expansion of the template will be as if enabled and with the relevant API setting as above. Also, setting API=0 will follow the above and give an API=1 result Setting API to > 2 or to auto will follow the above and give an API=auto result -- You are receiving this mail because: You are the QA Contact for the bug.___ Mail for each SME Contribs bug report To unsubscribe, e-mail contribteam-unsubscr...@lists.contribs.org Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
[contribteam] [Bug 10688] Incorrect CA Setting in config when enabled
https://bugs.contribs.org/show_bug.cgi?id=10688 Terry Fage changed: What|Removed |Added Status|IN_PROGRESS |RESOLVED CC||tf...@yahoo.com.au Resolution|--- |FIXED --- Comment #6 from Terry Fage --- Thanks Tim saves a bit of work, sorry for the stuff up, it was a patch I did to fix a url issue and I was not looking at a big enough picture and changed them all, fair bloody dinkumthis will be pushed to updates asap.. Thanks again -- You are receiving this mail because: You are the QA Contact for the bug.___ Mail for each SME Contribs bug report To unsubscribe, e-mail contribteam-unsubscr...@lists.contribs.org Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
[contribteam] [Bug 10688] Incorrect CA Setting in config when enabled
https://bugs.contribs.org/show_bug.cgi?id=10688 Terry Fage changed: What|Removed |Added Status|RESOLVED|VERIFIED --- Comment #7 from Terry Fage --- and verified also see forum post https://forums.contribs.org/index.php/topic,53867.msg280758.html#new -- You are receiving this mail because: You are the QA Contact for the bug.___ Mail for each SME Contribs bug report To unsubscribe, e-mail contribteam-unsubscr...@lists.contribs.org Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
[contribteam] [Bug 10688] Incorrect CA Setting in config when enabled
https://bugs.contribs.org/show_bug.cgi?id=10688 John Crisp changed: What|Removed |Added CC||ch...@ninnes.net --- Comment #8 from John Crisp --- *** Bug 10694 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are the QA Contact for the bug.___ Mail for each SME Contribs bug report To unsubscribe, e-mail contribteam-unsubscr...@lists.contribs.org Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
[contribteam] [Bug 10688] Incorrect CA Setting in config when enabled
https://bugs.contribs.org/show_bug.cgi?id=10688 Terry Fage changed: What|Removed |Added Status|VERIFIED|CLOSED --- Comment #9 from Terry Fage --- Released -- You are receiving this mail because: You are the QA Contact for the bug.___ Mail for each SME Contribs bug report To unsubscribe, e-mail contribteam-unsubscr...@lists.contribs.org Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
