Re: Renewing certificates with certbot

2019-03-22 Thread Chris Marusich
Hi Clément, Clément Lassieur writes: > Unless I misunderstood, this email[1] from Julien suggests that the > issue was that certbot was too old, but it was fixed upstream. You're right! I didn't see the other replies. Sorry for the noise! -- Chris signature.asc Description: PGP signature

Re: Renewing certificates with certbot

2019-03-22 Thread Clément Lassieur
Hi Chris, Unless I misunderstood, this email[1] from Julien suggests that the issue was that certbot was too old, but it was fixed upstream. Cheers, Clément [1]: https://lists.gnu.org/archive/html/guix-devel/2019-03/msg00070.html

Re: Renewing certificates with certbot

2019-03-22 Thread Chris Marusich
Hi Julien, Sorry for the late reply. Julien Lepiller writes: > I use certificates from let's encrypt for my website and mail servers, > and found that there was an issue with certificates generated by the > certbot service in Guix: the generated private keys are world-readable > (in a directory

Re: Renewing certificates with certbot

2019-03-06 Thread ng0
Julien Lepiller transcribed 2.1K bytes: > Le 2019-03-06 15:19, n...@n0.is a écrit : > > Julien Lepiller transcribed 1.6K bytes: > > > Le 2019-03-06 14:42, Ludovic Courtès a écrit : > > > > Hi, > > > > > > > > Julien Lepiller skribis: > > > > > > > > > I use certificates from let's encrypt for my w

Re: Renewing certificates with certbot

2019-03-06 Thread Julien Lepiller
Le 2019-03-06 15:19, n...@n0.is a écrit : Julien Lepiller transcribed 1.6K bytes: Le 2019-03-06 14:42, Ludovic Courtès a écrit : > Hi, > > Julien Lepiller skribis: > > > I use certificates from let's encrypt for my website and mail servers, > > and found that there was an issue with certificate

Re: Renewing certificates with certbot

2019-03-06 Thread ng0
Julien Lepiller transcribed 1.6K bytes: > Le 2019-03-06 14:42, Ludovic Courtès a écrit : > > Hi, > > > > Julien Lepiller skribis: > > > > > I use certificates from let's encrypt for my website and mail servers, > > > and found that there was an issue with certificates generated by the > > > cert

Re: Renewing certificates with certbot

2019-03-06 Thread Giovanni Biscuolo
Hi Julien, Julien Lepiller writes: [...] > I don't think this is an issue: the file is world-readable, but the > directory > it's in is not accessible to anyone but root. OpenSMTPD still complains, > but I think there's no security issue. not a seriuos (security) issue but an issue (service w

Re: Renewing certificates with certbot

2019-03-06 Thread Julien Lepiller
Le 2019-03-06 14:42, Ludovic Courtès a écrit : Hi, Julien Lepiller skribis: I use certificates from let's encrypt for my website and mail servers, and found that there was an issue with certificates generated by the certbot service in Guix: the generated private keys are world-readable (in a

Re: Renewing certificates with certbot

2019-03-06 Thread Ludovic Courtès
Hi, Julien Lepiller skribis: > I use certificates from let's encrypt for my website and mail servers, > and found that there was an issue with certificates generated by the > certbot service in Guix: the generated private keys are world-readable > (in a directory that cannot be accessed by anyon

Re: Renewing certificates with certbot

2019-02-22 Thread swedebugia
On 2019-02-22 14:49, Julien Lepiller wrote: > Hi, > > I use certificates from let's encrypt for my website and mail servers, > and found that there was an issue with certificates generated by the > certbot service in Guix: the generated private keys are world-readable > (in a directory that cannot

Renewing certificates with certbot

2019-02-22 Thread Julien Lepiller
Hi, I use certificates from let's encrypt for my website and mail servers, and found that there was an issue with certificates generated by the certbot service in Guix: the generated private keys are world-readable (in a directory that cannot be accessed by anyone but root, so it's OK I guess