Let's Encrypt invalid agreement

Using the built in /usr/share/webmin/webmin/acme_tiny.py ACME client presents the following error:

Provided agreement URL [https://letsencrypt.org/documents/LE-SA-v1.0.1-July-27-2015.pdf] does not match current agreement URL [https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf]

This is likely due to the line 90 of the above file using a now invalid agreement.

Status: 
Active

Comments

Thanks for the info guys, that's helpful.

Jamie, it sounds like line 90 of acme_tiny.py points to an older version of the Let's Encrypt ToS.

We could either just update that line, or we could grab a new version of Acme Tiny altogether?

It looks like the version here is using the new/correct agreement URL:

https://github.com/diafygi/acme-tiny/blob/master/acme_tiny.py

ronnikc's picture
Submitted by ronnikc on Tue, 08/02/2016 - 09:18 Pro Licensee

Priority: Normal » Critical
Status: Active » Fixed
unborn's picture
Submitted by unborn on Thu, 08/04/2016 - 05:01 Pro Licensee

Thank you guys.

Provided agreement URL error fix
Go to webmin -> Others -> File Manger
edit File -> /usr/share/webmin/webmin/acme_tiny.py
line 99 replace -> "agreement": "https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf",
with -> "agreement": json.loads(urlopen(CA + "/directory").read().decode('utf8'))['meta']['terms-of-service'],
hope this helpful

The next Webmin release will also include this fix (or an even better fix, where the agreement URL is determined dynamically).

I'm having this issue with a fresh Virtualmin 6 and I can't find the /usr/share/webmin directory.

UPDATE: it's in /usr/libexec

Yeah this particular request was for Ubuntu/Debian, which uses /usr/share; in the case of CentOS it would indeed be in /usr/libexec.

FYI, we released a new version of Webmin a while back that fixes this issue.

Which Webmin version are you using there?