opendev/system-config
Code Issues Proposed changes

letsencrypt: pin acme.sh to 3.0.5

Browse Source 
We've been running against the dev branch of acme.sh since the initial
commit of the letsencrypt work -- at the time I feel like there were
things we needed that weren't in a release.  Anyway, there is now an
issue causing ECC certificates to be made and failing to renew [1]
which we can't work-around.

Pin this to the current release.  It would probably be good to pin
this to the "latest" release to avoid us forgetting to ever bump this
and ending up with even harder to debug bit-rot.

[1] https://github.com/acmesh-official/acme.sh/issues/4416

Change-Id: I0d07ba1b5ab77e07c67ad990e7bc78a9f90005a4
This commit is contained in:
Ian Wienand 2022-11-29 13:11:51 +11:00
parent f40c52b01a
commit ecc2e9a69f
No known key found for this signature in database
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
playbooks/roles/letsencrypt-acme-sh-install/tasks/main.yaml
View File

@ -2,7 +2,7 @@
git: git:
repo: https://github.com/acmesh-official/acme.sh repo: https://github.com/acmesh-official/acme.sh
dest: /opt/acme.sh dest: /opt/acme.sh
version: dev version: 3.0.5
register: clone_acmesh_result register: clone_acmesh_result
until: clone_acmesh_result is not failed until: clone_acmesh_result is not failed
retries: 3 retries: 3