Bug 2224942

Summary: Please update certbot to 2.6 for epel8
Product: [Fedora] Fedora EPEL Reporter: Petasus Ruber <redhat.bugzilla>
Component: certbotAssignee: Nick Bebout <nb>
Status: CLOSED WONTFIX QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: epel8CC: anon.amish, certbot-sig, jonathan, luk.claes, nb
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2024-11-03 06:20:52 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Petasus Ruber 2023-07-24 03:02:48 UTC
Please update certbot to 2.6 for epel8.

Currently, to get the newer version users on rhel8 and derivatives have to resort to snapcraft, which creates much unnecessary bloat on the system.

Comment 1 Jonathan Wright 2023-09-15 14:48:32 UTC
There are breaking changes in versions between 1.22 and 2.6.0 thus the update cannot be done without an exception per https://docs.fedoraproject.org/en-US/epel/epel-policy-updates/

Is there a major problem or security vulnerability present in 1.22?

Comment 2 Petasus Ruber 2023-09-18 00:06:33 UTC
Thanks for pointing out the breaking change! The main issue has to do with certbot-renew.timer being disabled by default: https://github.com/certbot/certbot/issues/8889#issuecomment-1111592105.

I suppose it just tends to confuse the user (myself included) since it’s not immediately obvious why renewal isn’t automated like in the Snapcraft version. Anything we can do to flag this to the user?