[Letsencrypt-devel] Bug#833494: Bug#833494: acmetool: Does not correctly respond to changes in an ACME server's preferred agreement

[Peter Colberg]

Control: severity -1 serious
Control: tag -1 fixed-upstream

Hi Uwe, Hugo,

On Fri, Aug 05, 2016 at 08:35:42AM +0200, Uwe Steinmann wrote:
> Fixes #191, whereby acmetool did not correctly respond to changes in an
> ACME server's preferred agreement. This is an important update and should
> be applied promptly, as it causes autorenewal to fail (though by design,
> acmetool requires intervention to agree to new agreements anyway).

I am fully aware of the severity of this bug, since I am affected
the same as every other Debian user with an existing LE registration.

Unfortunately the versions of acmetool that contain this fix depend on
three new golang packages that do not contain any mention of their
license in the source tree, and would therefore be rejected by Debian
ftp-masters if I attempted to upload them (with the help of sponsors).

Uwe, if you like, please let the author of acmetool know how important
this issue is to Debian users by supporting the requests [1-3] for
adding the license information to these golang packages.

[1] https://github.com/hlandau/goutils/issues/1
[3] https://github.com/hlandau/buildinfo/issues/1
[2] https://github.com/hlandau/dexlogconfig/issues/1

Hugo, I would be grateful if you could address the three issues by
appending a license declaration to each README.md. acmetool is a
well-written client that would be dearly missed by users of Debian
and Debian derivatives.

Regards,
Peter