[Letsencrypt-devel] Bug#813689: letsencrypt-renewer raises a TypeError

[Alexander Schier]

Package: letsencrypt
Version: 0.3.0-1
Severity: normal

Dear Maintainer,
letsencrypt-renewer raises a type error, probably when it finds a
certificate eligible for renewal:

$ letsencrypt-renewer 
Processing [redacted].conf
/usr/lib/python2.7/dist-packages/urllib3/connectionpool.py:732: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.org/en/latest/security.html (This warning will only appear once by default.)
  InsecureRequestWarning)
Traceback (most recent call last):
  File "/usr/bin/letsencrypt-renewer", line 9, in <module>
    load_entry_point('letsencrypt==0.3.0', 'console_scripts', 'letsencrypt-renewer')()
  File "/usr/lib/python2.7/dist-packages/letsencrypt/renewer.py", line 203, in main
    renew(cert, old_version)
  File "/usr/lib/python2.7/dist-packages/letsencrypt/renewer.py", line 97, in renew
    new_certr, new_chain, new_key, _ = le_client.obtain_certificate(sans)
  File "/usr/lib/python2.7/dist-packages/letsencrypt/client.py", line 264, in obtain_certificate
    csr = crypto_util.init_save_csr(key, domains, self.config.csr_dir)
  File "/usr/lib/python2.7/dist-packages/letsencrypt/crypto_util.py", line 78, in init_save_csr
    csr_pem, csr_der = make_csr(privkey.pem, names)
  File "/usr/lib/python2.7/dist-packages/letsencrypt/crypto_util.py", line 118, in make_csr
    value=", ".join("DNS:%s" % d for d in domains)
  File "/usr/lib/python2.7/dist-packages/OpenSSL/crypto.py", line 651, in __init__
    extension = _lib.X509V3_EXT_nconf(_ffi.NULL, ctx, type_name, value)
TypeError: initializer for ctype 'char *' must be a str or list or tuple, not unicode

the original certificate was created with the webroot method and no automatic configuration of webservers.


-- System Information:
Debian Release: 8.3
  APT prefers stable
  APT policy: (900, 'stable'), (100, 'stable-updates'), (100, 'experimental'), (100, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages letsencrypt depends on:
ii  dialog              1.2-20140911-1
ii  python-letsencrypt  0.3.0-1
pn  python:any          <none>

letsencrypt recommends no packages.

Versions of packages letsencrypt suggests:
pn  python-letsencrypt-apache  <none>
pn  python-letsencrypt-doc     <none>

-- no debconf information