Fedora Account System
Red Hat Associate
Red Hat Customer
certbot fails to build with Python 3.15.0a8. 11 tests fail with the same FutureWarning: _____________________________ HTTP01Test.test_uri ______________________________ self = <acme._internal.tests.challenges_test.HTTP01Test testMethod=test_uri> def setUp(self): from acme.challenges import HTTP01 self.msg = HTTP01( > token=jose.decode_b64jose( 'evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ+PCt92wr+oA')) src/acme/_internal/tests/challenges_test.py:233: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ /usr/lib/python3.15/site-packages/josepy/json_util.py:402: in decode_b64jose decoded = b64.b64decode(data.encode()) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ /usr/lib/python3.15/site-packages/josepy/b64.py:57: in b64decode return base64.urlsafe_b64decode(data + b"=" * (4 - (len(data) % 4))) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ s = b'evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ+PCt92wr+oA=' def urlsafe_b64decode(s, *, padded=False): """Decode bytes using the URL- and filesystem-safe Base64 alphabet. Argument s is a bytes-like object or ASCII string to decode. The result is returned as a bytes object. A binascii.Error is raised if the input is incorrectly padded. Characters that are not in the URL-safe base-64 alphabet, and are not a plus '+' or slash '/', are discarded prior to the padding check. If padded is false, padding in input is not required. The alphabet uses '-' instead of '+' and '_' instead of '/'. """ s = _bytes_from_decode_data(s) badchar = None for b in b'+/': if b in s: badchar = b break s = s.translate(_urlsafe_decode_translation) result = binascii.a2b_base64(s, strict_mode=False, padded=padded) if badchar is not None: import warnings > warnings.warn(f'invalid character {chr(badchar)!a} in URL-safe Base64 data ' f'will be discarded in future Python versions', FutureWarning, stacklevel=2) E FutureWarning: invalid character '+' in URL-safe Base64 data will be discarded in future Python versions https://docs.python.org/3.15/whatsnew/3.15.html For the build logs, see: https://copr-be.cloud.fedoraproject.org/results/@python/python3.15/fedora-rawhide-x86_64/10398126-certbot/ For all our attempts to build certbot with Python 3.15, see: https://copr.fedorainfracloud.org/coprs/g/python/python3.15/package/certbot/ Testing and mass rebuild of packages is happening in copr. You can follow these instructions to test locally in mock if your package builds with Python 3.15: https://copr.fedorainfracloud.org/coprs/g/python/python3.15/ Let us know here if you have any questions. Python 3.15 is planned to be included in Fedora 45. To make that update smoother, we're building Fedora packages with all pre-releases of Python 3.15. A build failure prevents us from testing all dependent packages (transitive [Build]Requires), so if this package is required a lot, it's important for us to get it fixed soon. We'd appreciate help from the people who know this package best, but if you don't want to work on this now, let us know so we can try to work around it on our side.
*** Bug 2485696 has been marked as a duplicate of this bug. ***
Hello, Please note that this comment was generated automatically by https://forge.fedoraproject.org/releng/tooling/src/branch/main/release-process/bug-filing/follow-policy/follow_policy.py If you feel that this output has mistakes, please open an issue at https://forge.fedoraproject.org/releng/tickets/issues This package fails to install and maintainers are advised to take one of the following actions: - Fix this bug and close this bugzilla once the update makes it to the repository. (The same script that posted this comment will eventually close this bugzilla when the fixed package reaches the repository, so you don't have to worry about it.) or - Move this bug to ASSIGNED if you plan on fixing this, but simply haven't done so yet. or - Orphan the package if you no longer plan to maintain it. If you do not take one of these actions, the process at https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fails_to_install/#_package_removal_for_long_standing_ftbfs_and_fti_bugs will continue. This package may be orphaned in 7+ weeks. This is the first reminder (step 3) from the policy. Don't hesitate to ask for help on https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/ if you are unsure how to fix this bug.
Hello, Please note that this comment was generated automatically by https://forge.fedoraproject.org/releng/tooling/src/branch/main/release-process/bug-filing/follow-policy/follow_policy.py If you feel that this output has mistakes, please open an issue at https://forge.fedoraproject.org/releng/tickets/issues This package fails to install and maintainers are advised to take one of the following actions: - Fix this bug and close this bugzilla once the update makes it to the repository. (The same script that posted this comment will eventually close this bugzilla when the fixed package reaches the repository, so you don't have to worry about it.) or - Move this bug to ASSIGNED if you plan on fixing this, but simply haven't done so yet. or - Orphan the package if you no longer plan to maintain it. If you do not take one of these actions, the process at https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fails_to_install/#_package_removal_for_long_standing_ftbfs_and_fti_bugs will continue. This package may be orphaned in 4+ weeks. This is the second reminder (step 4) from the policy. Don't hesitate to ask for help on https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/ if you are unsure how to fix this bug.
Created attachment 2148078 [details] Avoid the deprecation warning I looked at this and it looks like when setting up tests for acme, a call to jose.decode_b64jose is made using deprecated characters. The warning is new for 3.15. I believe there is a way to turn off deprecation warnings during the build, but for my testing I replaced the +s with -s and that resulted in a local build completing. I don't believe that the 5.7 release addresses this issue. I'll attach the patch file I used in case you want to do it the way I did.
I want to note that there appears to be some other problem as well, because even with passing all of the tests I appear to be getting authentication errors. I don't know if my CA is doing something non-compliant or if there is something else broken in certbot because of changes in 3.15. I have suspicions about the new padded parameter being a likely cause, but I don't really know much at this point.
This package has been orphaned. You can pick it up at https://src.fedoraproject.org/rpms/certbot by clicking button "Take". If nobody picks it up, it will be retired and removed from a distribution.
FEDORA-2026-69044cc85f (certbot-5.7.0-1.fc45) has been submitted as an update to Fedora 45. https://bodhi.fedoraproject.org/updates/FEDORA-2026-69044cc85f
FEDORA-2026-69044cc85f (certbot-5.7.0-1.fc45) has been pushed to the Fedora 45 stable repository. If problem still persists, please make note of it in this bug report.