• lang/python314 vs security/py-acme-tiny (and other dependent ports)

    From Roger Marquis@marquis@roble.com to muc.lists.freebsd.ports on Mon Jan 26 08:18:52 2026
    From Newsgroup: muc.lists.freebsd.ports

    Security/py-acme-tiny runs fine with python313 but 3.14's regex deltas
    require patching. Error message is:

    Verifying www.domain.org...
    Traceback (most recent call last):
    File "/usr/local/bin/acme_tiny", line 199, in <module>
    main(sys.argv[1:])
    ~~~~^^^^^^^^^^^^^^
    File "/usr/local/bin/acme_tiny", line 195, in main
    signed_crt = get_crt(args.account_key, args.csr, args.acme_dir, log=LOGGER, CA=args.ca,
    disable_check=args.disable_check, directory_url=args.directory_url, contact=args.contact, check_port=args.check_port)
    File "/usr/local/bin/acme_tiny", line 153, in get_crt
    raise ValueError("Challenge did not pass for {0}: {1}".format(domain, authorization))
    ValueError: Challenge did not pass for www.domain.org: {'identifier': {'type': 'dns', 'value':
    'www.domain.org'}, 'status': 'invalid', 'expires': '2026-02-01T14:36:04Z', 'challenges': [{'type': 'http-01', 'url':
    'https://acme-v02.api.letsencrypt.org/acme/chall/23627797/648588023536/FpYwkQ', 'status': 'invalid', 'validated':
    '2026-01-25T14:36:05Z', 'error': {'type': 'urn:ietf:params:acme:error:connection', 'detail': 'IP.IP.IP.IP: Fetching
    http://www.domain.org/.well-known/acme-challenge/yrcJe-yyUcrYMTSUIZ5oSEGhsCNM1XatZvGRcIerkxs: Timeout during connect
    (likely firewall problem)', 'status': 400}, 'token': 'yrcJe-yyUcrYMTSUIZ5oSEGhsCNM1XatZvGRcIerkxs', 'validationRecord':
    [{'url': 'http://www.domain.org/.well-known/acme-challenge/yrcJe-yyUcrYMTSUIZ5oSEGhsCNM1XatZvGRcIerkxs', 'hostname':
    'www.domain.org', 'port': '80', 'addressesResolved': ['IP.IP.IP.IP'], 'addressUsed': 'IP.IP.IP.IP'}]}]}

    ERROR: acme_tiny failed to renew www.domain.org

    Why the Python Foundation is allowing application-breaking deltas in
    sub-minor revisions is another topic but the workaround for now is to
    specify DEFAULT_VERSIONS+=python=3.13 in make.conf until port and
    application maintainers are able to fix all the breakage.

    Roger


    --
    Posted automagically by a mail2news gateway at muc.de e.V.
    Please direct questions, flames, donations, etc. to news-admin@muc.de
    --- Synchronet 3.21b-Linux NewsLink 1.2
  • From Charlie Li@vishwin@freebsd.org to muc.lists.freebsd.ports on Mon Jan 26 12:23:26 2026
    From Newsgroup: muc.lists.freebsd.ports

    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------6DIo00RgZhcp7J2O0nUU0qWC
    Content-Type: multipart/mixed; boundary="------------EWKcCT0u0RJ4UlEnoYZ4gSBB";
    protected-headers="v1"
    Message-ID: <98d96c75-f453-4302-94d2-13e7f6123bcb@freebsd.org>
    Date: Mon, 26 Jan 2026 12:23:26 -0500
    MIME-Version: 1.0
    User-Agent: Mozilla Thunderbird
    Subject: Re: lang/python314 vs security/py-acme-tiny (and other dependent
    ports)
    To: Roger Marquis <marquis@roble.com>, ports@freebsd.org
    References: <2333534r-4032-1npp-q6oo-q8popoo07870@mx.roble.com> Content-Language: en-GB
    From: Charlie Li <vishwin@freebsd.org>
    Autocrypt: addr=vishwin@freebsd.org; keydata=
    xjMEaEicoBYJKwYBBAHaRw8BAQdAZBuydpjFLGem4uRJPWaYMXX2e+BN1jDhbD3tcqbxhdfN
    MkNoYXJsaWUgTGkgKEZyZWVCU0QgUHJvamVjdCkgPHZpc2h3aW5ARnJlZUJTRC5vcmc+wpkE
    ExYKAEEWIQTHxcCLnAXo3rFg6k7P+1cn7slqBAUCaEicoAIbAwUJCWYBgAULCQgHAgIiAgYV
    CgkICwIEFgIDAQIeBwIXgAAKCRDP+1cn7slqBM/bAP9bhA4e0LxJYFYJlftZM5WHrMSPpUe6
    G2pVqmQWTQ0EZQEA0PNryfH3qRWWPSI8mFNRnG24hi5/aXFqCnHj1tcJ9Q/OOARoSJygEgor
    BgEEAZdVAQUBAQdAUT4TzYFmV6ueIGwjX0N+445KZV6ns1Wiw67QMsJZxHkDAQgHwn4EGBYK
    ACYWIQTHxcCLnAXo3rFg6k7P+1cn7slqBAUCaEicoAIbDAUJCWYBgAAKCRDP+1cn7slqBPO/
    AQCPuGiyyfJClICRs/ToG0MsT8YcPdBygzuUIIeGpkjJpgEA7AoFCQ0Y28Y3hIDFn2k9PH3B
    nGWL3g05W0ds2qoj+gQ=
    Organization: FreeBSD Project
    In-Reply-To: <2333534r-4032-1npp-q6oo-q8popoo07870@mx.roble.com>

    --------------EWKcCT0u0RJ4UlEnoYZ4gSBB
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    Um9nZXIgTWFycXVpcyB3cm90ZToNCj4gU2VjdXJpdHkvcHktYWNtZS10aW55IHJ1bnMgZmlu ZSB3aXRoIHB5dGhvbjMxMyBidXQgMy4xNCdzIHJlZ2V4IGRlbHRhcw0KPiByZXF1aXJlIHBh dGNoaW5nLsKgIEVycm9yIG1lc3NhZ2UgaXM6DQo+IA0KPiBbc25pcF0NCj4gDQo+IFdoeSB0 aGUgUHl0aG9uIEZvdW5kYXRpb24gaXMgYWxsb3dpbmcgYXBwbGljYXRpb24tYnJlYWtpbmcg ZGVsdGFzIGluDQo+IHN1Yi1taW5vciByZXZpc2lvbnMgaXMgYW5vdGhlciB0b3BpYyBidXQg dGhlIHdvcmthcm91bmQgZm9yIG5vdyBpcyB0bw0KPiBzcGVjaWZ5IERFRkFVTFRfVkVSU0lP TlMrPXB5dGhvbj0zLjEzIGluIG1ha2UuY29uZiB1bnRpbCBwb3J0IGFuZA0KPiBhcHBsaWNh dGlvbiBtYWludGFpbmVycyBhcmUgYWJsZSB0byBmaXggYWxsIHRoZSBicmVha2FnZS4NCj4g DQpJdCdzIGFsc28gcG9zc2libGUgdGhhdCB0aGUgdXBzdHJlYW0gY3JlYXRvci9tYWludGFp bmVyIG9mIGFjbWUtdGlueSBpcyANCnVuYXdhcmUgb2YgdGhpcyBpc3N1ZS4gUmVtZW1iZXIg dGhhdCBhIGxvdCBvZiB0aGVzZSBwcm9qZWN0cyBhcmUgc3BhcmUgDQp0aW1lLWRyaXZlbi4N Cg0KV2l0aCBweXRob25AIGhhdDoNClRoaXMgaXMgYW4gYW1hemluZyBleGFtcGxlIG9mIHdo eSB3ZSBnZW5lcmFsbHkgc3RpY2sgdG8gbi0xIGFzIHRoZSANCmRlZmF1bHQgdmVyc2lvbi4g QnV0IGFsc28sIGFueW9uZSBpcyB3ZWxjb21lIHRvIHN1Z2dlc3QgdG8gdGhlIHBvcnQgDQpt YWludGFpbmVyLCBwcmVmZXJhYmx5IHRocm91Z2ggdGhlIGFwcHJvcHJpYXRlIGNoYW5uZWxz LCB0byBzZXQgYW4gdXBwZXIgDQpib3VuZCBvbiBVU0VTPXB5dGhvbiBpbiB0aGUgbWVhbnRp bWUuDQoNCi0tIA0KQ2hhcmxpZSBMaQ0KLi4ubm9wZSwgc3RpbGwgZG9uJ3QgaGF2ZSBhbiBl eGl0IGxpbmUuDQo=

    --------------EWKcCT0u0RJ4UlEnoYZ4gSBB--

    --------------6DIo00RgZhcp7J2O0nUU0qWC
    Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature
    Content-Disposition: attachment; filename="OpenPGP_signature.asc"

    -----BEGIN PGP SIGNATURE-----

    wnsEABYIACMWIQTHxcCLnAXo3rFg6k7P+1cn7slqBAUCaXejDgUDAAAAAAAKCRDP+1cn7slqBIST AQCBuCE9sr5OFEKrPgw0QOPLb2+wZZf/yIXXxQbUIIkMSQEAu86KthO3bJYYEBhOm9qUQ5CkeDDC rAAiCFxVPYpnvwo=
    =zvvU
    -----END PGP SIGNATURE-----

    --------------6DIo00RgZhcp7J2O0nUU0qWC--


    --
    Posted automagically by a mail2news gateway at muc.de e.V.
    Please direct questions, flames, donations, etc. to news-admin@muc.de
    --- Synchronet 3.21b-Linux NewsLink 1.2