[SOLVED] Mysterious warning with letsencrypt

kikinovak · 01-15-2017, 12:28 PM

Hi,

I've been using letsencrypt for about a year, since it became a public beta. Everything worked perfectly, until I decided to upgrade LetsEncrypt and a bunch of Python dependencies on my server.

Now LetsEncrypt still works, but certbot spews out warnings that look like this:

Code:

WARNING: The standalone specific supported challenges flag is deprecated.
Please use the --preferred-challenges flag instead.
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Renewing an existing certificate
Performing the following challenges:
tls-sni-01 challenge for mail.xxxxxxxxxx.fr
/usr/lib64/python2.7/site-packages/OpenSSL/rand.py:58: UserWarning: implicit 
cast from 'char *' to a different pointer type: will be forbidden in the future 
(check that the types are as you expect; use an explicit ffi.cast() if they 
are correct)
  result_code = _lib.RAND_bytes(result_buffer, num_bytes)
Waiting for verification...
Cleaning up challenges
Generating key (2048 bits): /etc/letsencrypt/keys/0026_key-certbot.pem
Creating CSR: /etc/letsencrypt/csr/0026_csr-certbot.pem

Any idea what's going on here?

By the way, here's a template for the scripts I'm using to create and/or renew my certificates:

http://www.microlinux.fr/microlinux/...example.com.sh

willysr · 01-15-2017, 12:39 PM

See my commit here: https://slackbuilds.org/cgit/slackbu...31abbbb8322b2c

kikinovak · 01-15-2017, 01:02 PM

Quote:

Originally Posted by willysr

See my commit here: https://slackbuilds.org/cgit/slackbu...31abbbb8322b2c

Thanks, Willy! I'll look into this tomorrow with a fresh mind and report the results.

willysr · 01-15-2017, 05:26 PM

Code:

/usr/lib64/python2.7/site-packages/OpenSSL/rand.py:58: UserWarning: implicit 
cast from 'char *' to a different pointer type: will be forbidden in the future 
(check that the types are as you expect; use an explicit ffi.cast() if they 
are correct)
  result_code = _lib.RAND_bytes(result_buffer, num_bytes)

this warning however will still be there
it's the code syntax problem

kikinovak · 02-03-2017, 02:20 AM

Quote:

Originally Posted by willysr

Code:

/usr/lib64/python2.7/site-packages/OpenSSL/rand.py:58: UserWarning: implicit 
cast from 'char *' to a different pointer type: will be forbidden in the future 
(check that the types are as you expect; use an explicit ffi.cast() if they 
are correct)
  result_code = _lib.RAND_bytes(result_buffer, num_bytes)

this warning however will still be there
it's the code syntax problem

OK, I finally managed to solve the problem, after quite a lot of trial and error. PyOpenSSL was the culprit, and an upgrade from 16.1.0 to 16.2.0 did the trick. By the way, SBo still sports 16.1.0, so I suggest you upgrade it.

Certbot/LetsEncrypt now works perfectly. Thanks, Willy!

willysr · 02-03-2017, 05:54 AM

Thanks, will do.