Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 20 Apr 2024 14:29:01 -0700
From:      paul beard <paulbeard@gmail.com>
To:        FreeBSD Questions List <questions@freebsd.org>
Subject:   Re: certbot
Message-ID:  <CAMtcK2pTKSHpOCKhEdWSvLyT1fBvjm50zZ8LhF-jbDjmFzBJGA@mail.gmail.com>
In-Reply-To: <20240420153432.671268909CE2@ary.qy>
References:  <20240420091633.00002f24@seibercom.net> <20240420153432.671268909CE2@ary.qy>

next in thread | previous in thread | raw e-mail | index | archive | help
--0000000000003d132c06168de5a5
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

The meta question for me and perhaps others running FreeBSD 13 is what
changed and how do we prepare for it if we expect to run certbot in FreeBSD
14? I run it as I always have, since release 11 or so.

00 00 * * Sun   python -c 'import random; import time;
time.sleep(random.random() * 3600)' && /usr/local/bin/certbot renew
--renew-hook 'service nginx reload'

Will I need to change that? Do the folks at EFF know/have they documented
what changed and how to manage it?

On Sat, Apr 20, 2024 at 8:35=E2=80=AFAM John Levine <johnl@iecc.com> wrote:

> It appears that Gerard E. Seibert <jerry@seibercom.net,
> questions@freebsd.org> said:
> >If I run the command from the command line, it works as expected. I did
> >place the following in the environment: CRYPTOGRAPHY_OPENSSL_NO_LEGACY=
=3D1
>
> >I still do not understand why this error only happens from CRON.
>
> Most likely because that variable is not there. Cron uses a standard
> rather sparse environment.  See "man 5 crontab".
>
> In this case rather than messing with the script, just set the
> variable on the command line in the crontab, e.g.
>
> 0 1 * * * CRYPTOGRAPHY_OPENSSL_NO_LEGACY=3D1 certbot ...
>
> R's,
> John
>
>
>

--=20
Paul Beard / www.paulbeard.org/

--0000000000003d132c06168de5a5
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">The meta question for me and perhaps=C2=A0others running F=
reeBSD 13 is what changed and how do we prepare for it if we expect to run =
certbot in FreeBSD 14? I run it as I always have, since release 11 or so.=
=C2=A0<div><br></div><div><font face=3D"monospace">00 00 * * Sun =C2=A0 pyt=
hon -c &#39;import random; import time; time.sleep(random.random() * 3600)&=
#39; &amp;&amp; /usr/local/bin/certbot renew --renew-hook &#39;service ngin=
x reload&#39;</font><br></div><div><font face=3D"monospace"><br></font></di=
v><div><font face=3D"arial, sans-serif">Will I need to change that? Do the =
folks at EFF know/have they documented what changed and how to manage=C2=A0=
it?=C2=A0</font></div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr"=
 class=3D"gmail_attr">On Sat, Apr 20, 2024 at 8:35=E2=80=AFAM John Levine &=
lt;<a href=3D"mailto:johnl@iecc.com">johnl@iecc.com</a>&gt; wrote:<br></div=
><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border=
-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);=
padding-left:1ex">It appears that Gerard E. Seibert &lt;<a href=3D"mailto:j=
erry@seibercom.net" target=3D"_blank">jerry@seibercom.net</a>, <a href=3D"m=
ailto:questions@freebsd.org" target=3D"_blank">questions@freebsd.org</a>&gt=
; said:<br>
&gt;If I run the command from the command line, it works as expected. I did=
<br>
&gt;place the following in the environment: CRYPTOGRAPHY_OPENSSL_NO_LEGACY=
=3D1<br>
<br>
&gt;I still do not understand why this error only happens from CRON.<br>
<br>
Most likely because that variable is not there. Cron uses a standard<br>
rather sparse environment.=C2=A0 See &quot;man 5 crontab&quot;.<br>
<br>
In this case rather than messing with the script, just set the<br>
variable on the command line in the crontab, e.g.<br>
<br>
0 1 * * * CRYPTOGRAPHY_OPENSSL_NO_LEGACY=3D1 certbot ...<br>
<br>
R&#39;s,<br>
John<br>
<br>
<br>
</blockquote></div><br clear=3D"all"><div><br></div><span class=3D"gmail_si=
gnature_prefix">-- </span><br><div dir=3D"ltr" class=3D"gmail_signature">Pa=
ul Beard / <a href=3D"http://www.paulbeard.org/" target=3D"_blank">www.paul=
beard.org/</a><br></div>

--0000000000003d132c06168de5a5--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAMtcK2pTKSHpOCKhEdWSvLyT1fBvjm50zZ8LhF-jbDjmFzBJGA>