Koozali.org: home of the SME Server

Thoughts on letsencrypt.com?

guest22

Re: Thoughts on letsencrypt.com?
« Reply #75 on: December 10, 2015, 08:05:03 AM »
I just massively failed installing Letsencrypt. Followed the wiki page to the letter, but it died on me running the Letencrypt command and then it tries to resolve dependencies such as Python-devel...


Just a quick note, will dive into it later.

Offline KevinG

  • *
  • 32
  • +0/-0
Re: Thoughts on letsencrypt.com?
« Reply #76 on: December 10, 2015, 08:08:19 AM »
On 9 or 9.1?

I shall try installing on 9.1 later if the day job doesn't get in the way!

guest22

Re: Thoughts on letsencrypt.com?
« Reply #77 on: December 10, 2015, 08:10:54 AM »
My failure started with 9.0 updated, but remained with updated to 9.1. Why is it pulling Python dev?

Offline flep

  • *
  • 14
  • +0/-0
Re: Thoughts on letsencrypt.com?
« Reply #78 on: December 10, 2015, 08:13:17 AM »
My failure started with 9.0 updated, but remained with updated to 9.1. Why is it pulling Python dev?

i add a rollback section in wiki:

http://wiki.contribs.org/Letsencrypt#Troubleshooting

Offline KevinG

  • *
  • 32
  • +0/-0
Re: Thoughts on letsencrypt.com?
« Reply #79 on: December 10, 2015, 09:33:46 AM »
I have just successfully run letsencrypt from behind a NAT firewall with no problems.

Interestingly it pulled up rpm-check-debug which I hadn't noticed before and rattled off checking things for a while.

Also since I first ran letsencrypt the first few times someone has added "exit" to the end of the section headed "To use Let's Encrypt run: ". I'm not sure why, or what effect it might have, but would speculate that it could be terminating something prematurely.  I ran without it on the install above.

While that was running I have managed an install of 9.1 on a test box.  Will try that shortly ...

Offline KevinG

  • *
  • 32
  • +0/-0
Re: Thoughts on letsencrypt.com?
« Reply #80 on: December 10, 2015, 10:05:08 AM »
And all is well with a straight wiki install (excluding "exit" after the ./letsencrypt-auto line) on a clean install of 9.1.

Thinking back, I think all the installs have done the rpm-check, but the box behind the NAT firewall had more installed on it so the check took longer.

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: Thoughts on letsencrypt.com?
« Reply #81 on: December 10, 2015, 10:14:33 AM »
And all is well with a straight wiki install (excluding "exit" after the ./letsencrypt-auto line) on a clean install of 9.1.


the "exit" command is needed to exit the scl bash session.. it'd be harmless, but necessary

Offline KevinG

  • *
  • 32
  • +0/-0
Re: Thoughts on letsencrypt.com?
« Reply #82 on: December 10, 2015, 10:18:48 AM »
OK. No worries.

There is a typo on the wiki.  How do I get a logon to correct it?  My forum logon does not seem to work.

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: Thoughts on letsencrypt.com?
« Reply #83 on: December 10, 2015, 10:22:17 AM »
OK. No worries.

There is a typo on the wiki.  How do I get a logon to correct it?  My forum logon does not seem to work.

you find it in the wiki :-D

http://wiki.contribs.org/Help:Contents#How_to_get_a_wiki_account.3F

Offline DanB35

  • *****
  • 764
  • +0/-0
    • http://www.familybrown.org
Re: Thoughts on letsencrypt.com?
« Reply #84 on: December 10, 2015, 02:55:06 PM »
@RequestedDeletion, surprised you saw that kind of failure.  I just tried it on a fresh 9.1 test VM, and it's working fine.  Notably, this VM doesn't have the EPEL repo configured at all--the letsencrypt client docs say it needs to be enabled for CentOS 6, and it's present (though disabled) on my main server.  I wondered if the letsencrypt-auto script might have enabled it anyway, but that does not appear to have been the case.  The only repo added was scl-python27, and the only packages added to the base install (before running letsencrypt-auto) were scl-utils and python27 (plus whatever dependencies it pulled in with it).
......

guest22

Re: Thoughts on letsencrypt.com?
« Reply #85 on: December 10, 2015, 02:58:06 PM »
@Dan, I was surprised too. First I thought it may come from downloading the github zip file, but after quickly trying the git pull, I experienced the same. I need to free some more time to see what is happening on *my* server.

Offline DanB35

  • *****
  • 764
  • +0/-0
    • http://www.familybrown.org
Re: Thoughts on letsencrypt.com?
« Reply #86 on: December 10, 2015, 03:05:57 PM »
...and FWIW, for this last test, I downloaded the zip file as well.  My wild speculation would be that you're using different mirrors for your repos than I am.
......

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Thoughts on letsencrypt.com?
« Reply #87 on: December 10, 2015, 08:32:08 PM »
After installing Python2.7 and pip for instructions at http://wiki.contribs.org/Python_Altinstall

letsencrypt now claims to support python 2.6, so those steps are now an unnecessary complication.

Offline DanB35

  • *****
  • 764
  • +0/-0
    • http://www.familybrown.org
Re: Thoughts on letsencrypt.com?
« Reply #88 on: December 10, 2015, 08:42:41 PM »
...except that running under Python 2.6 gives this output:
Code: [Select]
[root@e-smith letsencrypt]# ./letsencrypt-auto
WARNING: Python 2.6 support is very experimental at present...
if you would like to work on improving it, please ensure you have backups
and then run this script again with the --debug flag!

Probably should try it out though...
......

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Thoughts on letsencrypt.com?
« Reply #89 on: December 10, 2015, 08:53:59 PM »
Note also that Red Hat/EPEL have started work on integration:

https://bugzilla.redhat.com/show_bug.cgi?id=1288744