Page MenuHome

Flamenco-Manager: Upgrade acme/autocert library
Closed, ResolvedPublic

Description

Since November 2019 ACMEv1 is not allowed for new account registrations.

This seems to be reflected by the flamenco-manager logs when making a new deploy:

Nov 09 11:39:39 flame5 flamenco-manager[4390]: time="2019-11-09T11:39:39Z" level=info msg="creating ACME/Let's Encrypt enabled server" acme_domain_name=flame5.northeurope.cloudapp.azure.com listen=":8080" listen_https=":8443"
Nov 09 11:39:46 flame5 flamenco-manager[4390]: 2019/11/09 11:39:46 http: TLS handshake error from 213.127.23.167:35675: 403 urn:acme:error:unauthorized: Account creation on ACMEv1 is disabled. Please upgrade your ACME client to a version that supports ACM
Nov 09 11:40:10 flame5 flamenco-manager[4390]: 2019/11/09 11:40:10 http: TLS handshake error from 213.127.23.167:35736: acme/autocert: missing certificate
Nov 09 11:40:12 flame5 flamenco-manager[4390]: 2019/11/09 11:40:12 http: TLS handshake error from 213.127.23.167:35679: acme/autocert: missing certificate

Could you please look into upgrading the library? I tried go get -u golang.org/x/crypto/acme/autocert but i'm not sure if that is sufficient.

Event Timeline

Francesco Siddi (fsiddi) triaged this task as Confirmed, Medium priority.Nov 9 2019, 1:16 PM
Francesco Siddi (fsiddi) created this task.

The package is golang.org/x/crypto (see the entry in go.mod), so go get -u golang.org/x/crypto + make would have been sufficient.