Apologies for the delay here :(

The Certbot locking patch turned out to be more subtle to implement
correctly than we had expected, but we finalised and version and shipped
it in Certbot 0.14.0 last week. The patch is here:
https://github.com/certbot/certbot/pull/4449#issuecomment-299802507

Since that release, there have around 200,000 certificates issued with
Certbot 0.14.0. We have had one user report that the locking patch
caused a problem for them; that user was intentionally running multiple
Certbot instances in parallel for performance reasons. There are
probably no great solutions for such users, since their current
practices are subject to race conditions that might eventually cause
corruption of cert files or even webserver configs.

My instinct is that we should apply the locking patch (perhaps
augmenting the error message to explain that users who want to run
multiple Certbots safely in parallel should supply --config-dir, --work-
dir and --log-dir arguments to each instance), and ship Certbot 0.10.2
to Xenial users ASAP.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1640978

Title:
  [SRU] Backport letsencrypt 0.9.3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-acme/+bug/1640978/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to