[Bug 269427] security/py-certbot: enabling the periodic timer by default
- Reply: bugzilla-noreply_a_freebsd.org: "maintainer-feedback requested: [Bug 269427] security/py-certbot: enabling the periodic timer by default"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 269427] security/py-certbot: enabling the periodic timer by default"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 09 Feb 2023 02:39:42 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=269427 Bug ID: 269427 Summary: security/py-certbot: enabling the periodic timer by default Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Some People Priority: --- Component: Individual Port(s) Assignee: python@FreeBSD.org Reporter: freebsd@zorin.au Assignee: python@FreeBSD.org Flags: maintainer-feedback?(python@FreeBSD.org) I am writing to find out whether it would be possible to have Certbot's renewal periodic script (https://cgit.freebsd.org/ports/tree/security/py-certbot/files/500.certbot.in) be enabled by default upon installation of the package. Currently, the weekly_certbot_enable needs to be set, after installation of the security/py-certbot package. In the Certbot project, we suggest to packagers that `certbot renew -q` be run often, as it will be a no-op if no certificate renewals are due. In our first party packages and in a number of Linux distros, this is twice daily. These scheduled tasks are enabled by default, which is our preference upstream. My feeling is that Certbot users would expect renewals to happen automatically, as it is the primary purpose of the tool. The extra step to enable the periodic script on FreeBSD is something that users may not be expecting or not know about (e.g. https://github.com/certbot/website/issues/784). I'm not familiar with FreeBSD packaging policies around periodic scripts, would something like this change be acceptable for the py-certbot package? Thank you, Alex -- You are receiving this mail because: You are the assignee for the bug.