[SOLVED] Call for testers: SlackBuild Scripts for letsencrypt

willysr · 11-15-2015, 12:36 PM

I have pushed my letsencrypt SlackBuild script on my personal github account (letsencrypt branch) and have a public beta testing before i push it to SBo.

Basically you need 4 additional new python modules (already submitted to SBo and still in pending) before you can install letsencrypt.

The letsencrypt SlackBuild itself will install apache and nginx plugins in it's default location.

Any suggestion for improvements are welcome

StreamThreader · 12-03-2015, 07:14 AM

Letsencrypt open public beta.

Anybody tested this slackbuild script?

suppy · 12-03-2015, 11:50 AM

I intend to in the next few days, when I have the time

willysr · 12-03-2015, 01:02 PM

i rebased to the latest SBo updates and bump it to 0.1.0 (public beta). Not really tested against new dependencies, since it was released like 1d ago, but i will do more test this weekend

The SlackBuild script can be found here: https://github.com/willysr/slackbuil...em/letsencrypt

Lucifer4o · 12-04-2015, 06:41 AM

So .. I tried it. And it will not work:

Code:

Traceback (most recent call last):
  File "/usr/bin/letsencrypt", line 5, in <module>
    from pkg_resources import load_entry_point
  File "/usr/lib64/python2.7/site-packages/setuptools-0.6c11-py2.7.egg/pkg_resources.py", line 2603, in <module>
  File "/usr/lib64/python2.7/site-packages/setuptools-0.6c11-py2.7.egg/pkg_resources.py", line 666, in require
  File "/usr/lib64/python2.7/site-packages/setuptools-0.6c11-py2.7.egg/pkg_resources.py", line 565, in resolve
pkg_resources.DistributionNotFound: six

willysr · 12-04-2015, 06:48 AM

Please note that those deps are first level dep only, so you need to build the queue for all deps so that it resolves

Chuck56 · 12-04-2015, 07:14 AM

What's not to like about a "free, automated, and open certificate authority (CA)"?

Thanks for posting about this and the slackbuild willysr. This looks like a great alternative to self-signed certificates. I'm going test drive this over the weekend.

Lucifer4o · 12-04-2015, 07:20 AM

OK. I did resolve them, but it appears there is packages that are not in your list of dependancies:

Python/six
libraries/ipaddress
Python/pyasn1
Python/idna

Lucifer4o · 12-04-2015, 08:00 AM

OK ... so using the webroot authentication I was able to receive certificates ... and then I was unable to install them.

Quote:

[Fri Dec 04 15:54:50.002263 2015] [ssl:emerg] [pid 5861:tid 140183934678912] SSL Library Error: error:140E6118:SSL routines:SSL_CIPHER_PROCESS_RULESTR:invalid command
[Fri Dec 04 15:56:53.005593 2015] [ssl:emerg] [pid 5882:tid 140143487276928] AH01898: Unable to configure permitted SSL ciphers
[Fri Dec 04 15:56:53.005627 2015] [ssl:emerg] [pid 5882:tid 140143487276928] SSL Library Error: error:0906D06C:PEM routines:PEM_read_bio:no start line (Expecting: DH PARAMETERS) -- Bad file contents or format - or even just a forgotten SSLCertificateKeyFile?
[Fri Dec 04 15:56:53.005640 2015] [ssl:emerg] [pid 5882:tid 140143487276928] SSL Library Error: error:0906D06C:PEM routines:PEM_read_bio:no start line (Expecting: EC PARAMETERS) -- Bad file contents or format - or even just a forgotten SSLCertificateKeyFile?
[Fri Dec 04 15:56:53.005654 2015] [ssl:emerg] [pid 5882:tid 140143487276928] SSL Library Error: error:140E6118:SSL routines:SSL_CIPHER_PROCESS_RULESTR:invalid command

Never mind! This was entirely my issue!

All works well ... we only need apache plugin (or comprehensive guide how to make it work!)

willysr · 12-04-2015, 10:58 AM

Quote:

Originally Posted by Lucifer4o

OK. I did resolve them, but it appears there is packages that are not in your list of dependancies:

Python/six
libraries/ipaddress
Python/pyasn1
Python/idna

this is what i get from sqg:

Quote:

configobj
mock
python-requests
pytz
python2-pythondialog
pysetuptools
zope.interface
zope.event
zope.component
pyrfc3339
idna
ipaddress
enum34
six
pycparser
cffi
pyasn1
cryptography
pyOpenSSL
psutil
python-parsedatetime
python-configargparse
werkzeug
ndg_httpsclient
augeas
python-augeas
pyparsing

willysr · 12-04-2015, 10:59 AM

Quote:

Originally Posted by Lucifer4o

All works well ... we only need apache plugin (or comprehensive guide how to make it work!)

Apache Plugin is also installed on my build script, but it was designed for ubuntu's apache

Lucifer4o · 12-04-2015, 11:22 AM

Your script is working great ... all else is "Let's encrypt"'s problem (don't mind me - sometimes I ask before I search).

willysr · 12-06-2015, 12:02 PM

I updated the README for more detailed information about obtaining the certificates and renewal process
You can grab the latest one here: https://github.com/willysr/slackbuilds/tree/letsencrypt

StreamThreader · 12-08-2015, 03:48 AM

willysr thanks you!
Letsencrypt slackbuild script worked. Dependencies very important, and all it exist on slackbuilds.org.

willysr · 12-08-2015, 10:37 AM

Quote:

Originally Posted by StreamThreader

willysr thanks you!
Letsencrypt slackbuild script worked. Dependencies very important, and all it exist on slackbuilds.org.

Thanks for testing
Now it's in pending queue