Certbot_Renew_Error
をテンプレートにして作成
[
トップ
] [
新規
|
一覧
|
検索
|
最終更新
|
ヘルプ
|
ログイン
]
開始行:
CONTENTS
#contents
----
Lastmodified &lastmod;
----
*Certbot_Renew_Error [#z656048b]
FreeBSD Base system の OpenSSLを使用している py-certbot ...
/etc/make.conf
NO_SENDMAIL= true
DEFAULT_VERSIONS+= perl5=5.34
# DEFAULT_VERSIONS+=ruby=2.7
DEFAULT_VERSIONS+=ssl=openssl ← これ
OPTIONS_UNSET+=X11
#FORCE_PKG_REGISTER=yes
#OPTIONS_UNSET+=GUI
DEFAULT_VERSIONS+= bdb=18
WITH_BDB6_PERMITTED=yes
の様に、ports でインストールしたOpenSSLで、certbot renew ...
# /root/bin/Certbot_Renew.sh
Traceback (most recent call last):
File "/usr/local/bin/certbot", line 33, in <module>
sys.exit(load_entry_point('certbot==2.7.4', 'console_...
File "/usr/local/bin/certbot", line 25, in importlib_lo...
return next(matches).load()
File "/usr/local/lib/python3.9/importlib/metadata.py", ...
module = import_module(match.group('module'))
File "/usr/local/lib/python3.9/importlib/__init__.py", ...
return _bootstrap._gcd_import(name[level:], package, ...
File "<frozen importlib._bootstrap>", line 1030, in _gc...
File "<frozen importlib._bootstrap>", line 1007, in _fi...
File "<frozen importlib._bootstrap>", line 986, in _fin...
File "<frozen importlib._bootstrap>", line 680, in _loa...
File "<frozen importlib._bootstrap_external>", line 850...
File "<frozen importlib._bootstrap>", line 228, in _cal...
File "/usr/local/lib/python3.9/site-packages/certbot/ma...
from certbot._internal import main as internal_main
File "/usr/local/lib/python3.9/site-packages/certbot/_i...
import josepy as jose
File "/usr/local/lib/python3.9/site-packages/josepy/__i...
from josepy.json_util import (
File "/usr/local/lib/python3.9/site-packages/josepy/jso...
from OpenSSL import crypto
File "/usr/local/lib/python3.9/site-packages/OpenSSL/__...
from OpenSSL import SSL, crypto
File "/usr/local/lib/python3.9/site-packages/OpenSSL/SS...
from OpenSSL._util import (
File "/usr/local/lib/python3.9/site-packages/OpenSSL/_u...
from cryptography.hazmat.bindings.openssl.binding imp...
File "/usr/local/lib/python3.9/site-packages/cryptograp...
from cryptography.exceptions import InternalError
File "/usr/local/lib/python3.9/site-packages/cryptograp...
from cryptography.hazmat.bindings._rust import except...
ImportError: /usr/local/lib/python3.9/site-packages/cryp...
root@blackcube:~:23_11_28:9:07 #
同じようなエラーが、https://freebsd.sing.ne.jp/daily/13/1...
こちらの記事では、cryptography をPIPインストールして最新...
// root@blackhole:/usr/ports/security/openssl:23_11_28:14...
// openssl-3.0.12_1,1:
// postgresql12-client-12.17
// php81-imap-8.1.26
// php81-snmp-8.1.26
// php81-ftp-8.1.26
// php81-8.1.26
// py39-cryptography-41.0.5,1
// rust-1.73.0
// cmake-core-3.27.8
// python39-3.9.18
// postfix-3.8.2,1
// freetds-1.4.6,1
// mod_php81-8.1.25
// apache24-2.4.58_1
// p5-Net-SSLeay-1.92
// cyrus-sasl-saslauthd-2.1.28
// monit-5.33.0
// root@blackhole:/usr/ports/security/openssl:23_11_28:DI...
// openssl-3.0.12_1,1:
//// postgresql12-client php81-imap php81-snmp-8.1.26 php...
** OpenSSL のコンパイルオプションで対応 [#vdc591d0]
エラー内様で "EVP_default_properties_is_fips_enabled" ...
https://community.letsencrypt.org/t/did-openssl-3-0-break...
に記載があるので、LEGACY にチェックをいれてみる、と・・・
&ref(OpenSSL_config.PNG); FIPS のチェックを外し、LEGACY ...
cd /usr/ports/security/openssl
make deinstall
make install clean
エラー回避出来た！
# /root/bin/Certbot_Renew.sh
Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - - - - - - - - - - - - - - - - - - - - - - - - - ...
Processing /usr/local/etc/letsencrypt/renewal/blackhole....
- - - - - - - - - - - - - - - - - - - - - - - - - - - - ...
Hook 'pre-hook' ran with output:
Stopping apache24.
Waiting for PIDS: 29144.
Renewing an existing certificate for blackhole.smb.net
- - - - - - - - - - - - - - - - - - - - - - - - - - - - ...
Congratulations, all renewals succeeded:
/usr/local/etc/letsencrypt/live/blackhole.smb.net/full...
- - - - - - - - - - - - - - - - - - - - - - - - - - - - ...
Hook 'post-hook' ran with output:
Performing sanity check on apache24 configuration:
Starting apache24.
Hook 'post-hook' ran with error output:
Syntax OK
**ところが、これをしても、エラーが出る機体がある。 [#m258...
%% # cd /usr/ports/security/openssl %%~
%% make deinstall%%
%%/etc/make.conf%%~
%% DEFAULT_VERSIONS+=ssl=openssl ← コメントアウトする%%~
%% reboot%%
あれこれ試すも、エラー回避出来たのが、
%% # portupgrade -rfR py39-certbot-2.7.4,1 --batch%%~
%%NG!%%
# portupgrade -rfR py39-cryptography --batch
で、エラー回避できた。OK
*** py-cryptgraphy ver up 最終手段？ [#jf00d1f6]
[[PIP]]を用いる方法。別ページに記載
----
Total access &counter(total);：本日 &counter(today);：昨...
#counter([total|today|yesterday]);
終了行:
CONTENTS
#contents
----
Lastmodified &lastmod;
----
*Certbot_Renew_Error [#z656048b]
FreeBSD Base system の OpenSSLを使用している py-certbot ...
/etc/make.conf
NO_SENDMAIL= true
DEFAULT_VERSIONS+= perl5=5.34
# DEFAULT_VERSIONS+=ruby=2.7
DEFAULT_VERSIONS+=ssl=openssl ← これ
OPTIONS_UNSET+=X11
#FORCE_PKG_REGISTER=yes
#OPTIONS_UNSET+=GUI
DEFAULT_VERSIONS+= bdb=18
WITH_BDB6_PERMITTED=yes
の様に、ports でインストールしたOpenSSLで、certbot renew ...
# /root/bin/Certbot_Renew.sh
Traceback (most recent call last):
File "/usr/local/bin/certbot", line 33, in <module>
sys.exit(load_entry_point('certbot==2.7.4', 'console_...
File "/usr/local/bin/certbot", line 25, in importlib_lo...
return next(matches).load()
File "/usr/local/lib/python3.9/importlib/metadata.py", ...
module = import_module(match.group('module'))
File "/usr/local/lib/python3.9/importlib/__init__.py", ...
return _bootstrap._gcd_import(name[level:], package, ...
File "<frozen importlib._bootstrap>", line 1030, in _gc...
File "<frozen importlib._bootstrap>", line 1007, in _fi...
File "<frozen importlib._bootstrap>", line 986, in _fin...
File "<frozen importlib._bootstrap>", line 680, in _loa...
File "<frozen importlib._bootstrap_external>", line 850...
File "<frozen importlib._bootstrap>", line 228, in _cal...
File "/usr/local/lib/python3.9/site-packages/certbot/ma...
from certbot._internal import main as internal_main
File "/usr/local/lib/python3.9/site-packages/certbot/_i...
import josepy as jose
File "/usr/local/lib/python3.9/site-packages/josepy/__i...
from josepy.json_util import (
File "/usr/local/lib/python3.9/site-packages/josepy/jso...
from OpenSSL import crypto
File "/usr/local/lib/python3.9/site-packages/OpenSSL/__...
from OpenSSL import SSL, crypto
File "/usr/local/lib/python3.9/site-packages/OpenSSL/SS...
from OpenSSL._util import (
File "/usr/local/lib/python3.9/site-packages/OpenSSL/_u...
from cryptography.hazmat.bindings.openssl.binding imp...
File "/usr/local/lib/python3.9/site-packages/cryptograp...
from cryptography.exceptions import InternalError
File "/usr/local/lib/python3.9/site-packages/cryptograp...
from cryptography.hazmat.bindings._rust import except...
ImportError: /usr/local/lib/python3.9/site-packages/cryp...
root@blackcube:~:23_11_28:9:07 #
同じようなエラーが、https://freebsd.sing.ne.jp/daily/13/1...
こちらの記事では、cryptography をPIPインストールして最新...
// root@blackhole:/usr/ports/security/openssl:23_11_28:14...
// openssl-3.0.12_1,1:
// postgresql12-client-12.17
// php81-imap-8.1.26
// php81-snmp-8.1.26
// php81-ftp-8.1.26
// php81-8.1.26
// py39-cryptography-41.0.5,1
// rust-1.73.0
// cmake-core-3.27.8
// python39-3.9.18
// postfix-3.8.2,1
// freetds-1.4.6,1
// mod_php81-8.1.25
// apache24-2.4.58_1
// p5-Net-SSLeay-1.92
// cyrus-sasl-saslauthd-2.1.28
// monit-5.33.0
// root@blackhole:/usr/ports/security/openssl:23_11_28:DI...
// openssl-3.0.12_1,1:
//// postgresql12-client php81-imap php81-snmp-8.1.26 php...
** OpenSSL のコンパイルオプションで対応 [#vdc591d0]
エラー内様で "EVP_default_properties_is_fips_enabled" ...
https://community.letsencrypt.org/t/did-openssl-3-0-break...
に記載があるので、LEGACY にチェックをいれてみる、と・・・
&ref(OpenSSL_config.PNG); FIPS のチェックを外し、LEGACY ...
cd /usr/ports/security/openssl
make deinstall
make install clean
エラー回避出来た！
# /root/bin/Certbot_Renew.sh
Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - - - - - - - - - - - - - - - - - - - - - - - - - ...
Processing /usr/local/etc/letsencrypt/renewal/blackhole....
- - - - - - - - - - - - - - - - - - - - - - - - - - - - ...
Hook 'pre-hook' ran with output:
Stopping apache24.
Waiting for PIDS: 29144.
Renewing an existing certificate for blackhole.smb.net
- - - - - - - - - - - - - - - - - - - - - - - - - - - - ...
Congratulations, all renewals succeeded:
/usr/local/etc/letsencrypt/live/blackhole.smb.net/full...
- - - - - - - - - - - - - - - - - - - - - - - - - - - - ...
Hook 'post-hook' ran with output:
Performing sanity check on apache24 configuration:
Starting apache24.
Hook 'post-hook' ran with error output:
Syntax OK
**ところが、これをしても、エラーが出る機体がある。 [#m258...
%% # cd /usr/ports/security/openssl %%~
%% make deinstall%%
%%/etc/make.conf%%~
%% DEFAULT_VERSIONS+=ssl=openssl ← コメントアウトする%%~
%% reboot%%
あれこれ試すも、エラー回避出来たのが、
%% # portupgrade -rfR py39-certbot-2.7.4,1 --batch%%~
%%NG!%%
# portupgrade -rfR py39-cryptography --batch
で、エラー回避できた。OK
*** py-cryptgraphy ver up 最終手段？ [#jf00d1f6]
[[PIP]]を用いる方法。別ページに記載
----
Total access &counter(total);：本日 &counter(today);：昨...
#counter([total|today|yesterday]);
ページ名:
![[PukiWiki]](image/pukiwiki.png "[PukiWiki]")
