[Letsencrypt-devel] Bug#882693: acme-tiny: Outdated version of the subscriber agreement

[Andrew Findlay]

On Sat, 25 Nov 2017 19:54:09 +0100 Val Lorentz <progval at progval.net> wrote:

> Replacing the URL in /usr/lib/python3/dist-packages/acme_tiny.py fixes
> the issue.

A more future-proof fix would be to bring in the upstream change:

ajf at sow:~$ diff /usr/lib/python3/dist-packages/acme_tiny.py.debian acme_tiny.py 
72c72
<     common_name = re.search(r"Subject:.*? CN\s*=\s*([^\s,;/]+)", out.decode('utf8'))
---
>     common_name = re.search(r"Subject:.*? CN\s?=\s?([^\s,;/]+)", out.decode('utf8'))
85c85
<         "agreement": "https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf",
---
>         "agreement": json.loads(urlopen(CA + "/directory").read().decode('utf8'))['meta']['terms-of-service'],

Andrew
-- 
-----------------------------------------------------------------------
|                 From Andrew Findlay, Skills 1st Ltd                 |
| Consultant in large-scale systems, networks, and directory services |
|     http://www.skills-1st.co.uk/                +44 1628 782565     |
-----------------------------------------------------------------------