[Letsencrypt-devel] Bug#892723: dehydrated: Dehydrated broken in stable due to unhandled redirect

[Arne Nordmark]

Package: dehydrated
Version: 0.3.1-3+deb9u1
Severity: normal

Since recently, updating a cert no longer works. The challenge works, and the new cert is created, but creating the cert chain fails:

...
 + Creating fullchain.pem...
   + ERROR: An error occurred while sending get-request to http://cert.int-x3.letsencrypt.org/ (Status 301)
...

The new cert is consequently not "actived" by symlinks, and the deploy scripts are not run.
The reason is a new redirect at Let's Encrypt, and curl does not follow redirects unless the "-L" switch is given.

This was fixed upstrem by <https://github.com/lukas2511/dehydrated/commit/7a0e71c6c2ccc6e98abca5ea1c7de28053e90c02>

Arne

-- System Information:
Debian Release: 9.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 4.9.0-6-686-pae (SMP w/1 CPU core)
Locale: LANG=sv_SE.UTF-8, LC_CTYPE=sv_SE.UTF-8 (charmap=UTF-8), LANGUAGE=sv_SE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)

Versions of packages dehydrated depends on:
ii  ca-certificates  20161130+nmu1
ii  curl             7.52.1-5+deb9u4
ii  openssl          1.1.0f-3+deb9u1

dehydrated recommends no packages.

dehydrated suggests no packages.

-- no debconf information