[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #35 from Fedora Update System --- acme-tiny-0.1-10.20160810git5a7b4e7.el7 has been pushed to the Fedora EPEL 7 stable repository. If problems still persist, please make note of it in this bug report. --

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #34 from Fedora Update System --- acme-tiny-0.1-10.20160810git5a7b4e7.el6 has been pushed to the Fedora EPEL 6 stable repository. If problems still persist, please make note of it in this bug report. --

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #33 from Fedora Update System --- acme-tiny-0.1-10.20160810git5a7b4e7.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report. --

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #32 from Fedora Update System --- acme-tiny-0.1-10.20160810git5a7b4e7.fc24 has been pushed to the Fedora 24 stable repository. If problems still persist, please make note of it in this bug report. --

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 Fedora Update System changed: What|Removed |Added Status|ON_QA

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #30 from Stuart D Gathman --- The README advises using semanage to label /var/lib/acme/certs as cert_t so that dovecot and others can use the certs directly. But the package should provide for this. Possible

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #29 from Fedora Update System --- acme-tiny-0.1-10.20160810git5a7b4e7.el6 has been pushed to the Fedora EPEL 6 testing repository. If problems still persist, please make note of it in this bug report.

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #28 from Fedora Update System --- acme-tiny-0.1-10.20160810git5a7b4e7.fc24 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report. See

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #27 from Fedora Update System --- acme-tiny-0.1-10.20160810git5a7b4e7.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report. See

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #26 from Fedora Update System --- acme-tiny-0.1-10.20160810git5a7b4e7.el7 has been pushed to the Fedora EPEL 7 testing repository. If problems still persist, please make note of it in this bug report.

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 Fedora Update System changed: What|Removed |Added Status|POST|ON_QA

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #24 from Jon Ciesla --- Package request has been approved: https://admin.fedoraproject.org/pkgdb/package/rpms/acme-tiny -- You are receiving this mail because: You are on the CC list for the bug. You are

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #23 from Stuart D Gathman --- Oh my. I didn't see that the package was approved! I'll address those nits and get it out there. -- You are receiving this mail because: You are on the CC list for the bug. You

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #22 from Zbigniew Jędrzejewski-Szmek --- Ping? -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 Zbigniew Jędrzejewski-Szmek changed: What|Removed |Added Status|ASSIGNED|POST

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #20 from Zbigniew Jędrzejewski-Szmek --- Sorry for the delay. I'll be offline a few days, but I should get back to this next week. -- You are receiving this mail because: You are on the CC list for the bug.

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #19 from Stuart D Gathman --- On generic solution to programs like sendmail is to drop an incrontab in /etc/incron.d/acme that copies any updated files in /var/lib/acme/certs to /etc/pki/tls/acme-certs. Then

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #18 from Stuart D Gathman --- Testing with sendmail reveals a minor problem: Aug 23 16:19:41 mail sendmail[6198]: STARTTLS=server: file /var/lib/acme/certs/mail.crt unsafe: Permission denied sendmail doesn't

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #17 from Stuart D Gathman --- Spec URL: http://gathman.org/linux/SPECS/acme-tiny.spec SRPM URL: http://gathman.org/linux/el6/src/acme-tiny-0.1-9.git5a7b4e7.fc23.src.rpm I provided symlinks for acme-tiny and

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #16 from Stuart D Gathman --- Actually, the top level exception is extremely clear: ValueError: Wrote file to /var/www/challenges/yl3q4gBjRLn8SjdQ5d_EtnGR1ZJy1QYvrx4P6jr0NfA, but couldn't download

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #15 from Stuart D Gathman --- The tracebacks are a tough one, as that will require another mod to upstream. acme-tiny is becoming acme not as tiny but more friendly. I had hoped to keep the core script

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #14 from Zbigniew Jędrzejewski-Szmek --- There's also https://fedoraproject.org/wiki/Packaging:Initial_Service_Setup. You might want to look at that, although I don't see much benefit in splitting this initial

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #13 from Zbigniew Jędrzejewski-Szmek --- It's simpler to use: %{?systemd_requires} [https://fedoraproject.org/wiki/Packaging:Scriptlets#Systemd] The scriptlets should refer to both units (acme-tiny.service and

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #12 from Stuart D Gathman --- Works! https://nyc.gathman.org/ (note signed by letsencrypt.org) -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #11 from Stuart D Gathman --- Spec URL: http://gathman.org/linux/SPECS/acme-tiny.spec SRPM URL: http://gathman.org/linux/el6/src/acme-tiny-0.1-8.git5a7b4e7.fc23.src.rpm It is still out for testing on my local

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #10 from Zbigniew Jędrzejewski-Szmek --- cert-chain-resolver is 150 lines, so making a package out of it seems a bit overkill. OTOH, it is a separate project. I don't know what the best solution is here. OK, so

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #9 from Stuart D Gathman --- Spec URL: http://gathman.org/linux/SPECS/acme-tiny.spec SRPM URL: http://gathman.org/linux/el6/src/acme-tiny-0.1-6.el6.src.rpm Tested cert-check with python3 AND committed it this

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #8 from Stuart D Gathman --- Arrgh. I *did* test cert-check.py with python3, but neglected to commit the changes... -- You are receiving this mail because: You are on the CC list for the bug. You are always

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #7 from Stuart D Gathman --- Thanks - I'll fix the cert-check script, and I can test it on python3. Also, after some discussion on the acme-tiny github page, I will be removing or changing the patch to append

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 Zbigniew Jędrzejewski-Szmek changed: What|Removed |Added Status|NEW

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #5 from Stuart D Gathman --- Note to reviewers: the python scripts are intended to run on either python2 or python3 - hence it uses the default python. I haven't tested it thoroughly with python3 yet, however.

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #4 from Stuart D Gathman --- (In reply to Zbigniew Jędrzejewski-Szmek from comment #2) > For Fedora it would be nice to replace the cron script with a systemd > timer+service. Cron scripts are more heavyweight,

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #3 from Stuart D Gathman --- Why acme-tiny and not the existing certbot package? Certbot is an all singing, all dancing, configure your web server for you (with plugins for various web servers), ACME client

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 Zbigniew Jędrzejewski-Szmek changed: What|Removed |Added CC|

[Bug 1366355] Review Request: acme-tiny - Tiny auditable ACME script for Let's Encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=1366355 --- Comment #1 from Stuart D Gathman --- Spec URL: http://gathman.org/linux/SPECS/acme-tiny.spec SRPM URL: http://gathman.org/linux/el6/src/acme-tiny-0.1-5.el6.src.rpm New release out for testing on local repo. -- You