certbot backport
Hi,
It looks like certbot in Debian Buster is too old to deal correctly
with the newly issued certificates signed by R3 intermediate. See bug
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977350 . I hope that
bug can be fixed in Buster.
Furthermore, starting next month, Certbot will issue certificates by
default which will not validate by older clients (such as older Android
version):
https://community.letsencrypt.org/t/transition-to-isrgs-root-delayed-until-jan-11-2021/125516
This change can be delayed by setting preferred-chain = DST Root CA X3,
but you need at least Certbot 1.6 for that.
So a backported version of certbot seems worthwhile.
Regards,
--
Frederik Himpe <fhimpe@ai.vub.ac.be>
Vrije Universiteit Brussel
Reply to: