From nobody Sun Apr 21 03:41:49 2024
X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4VMZ1s6wqQz5HKr2
	for <freebsd-questions@mlmmj.nyi.freebsd.org>; Sun, 21 Apr 2024 03:41:53 +0000 (UTC)
	(envelope-from mail@souji-thenria.net)
Received: from alisa.souji-thenria.net (alisa.souji-thenria.net [188.68.37.165])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA512)
	(Client did not present a certificate)
	by mx1.freebsd.org (Postfix) with ESMTPS id 4VMZ1s3TdNz4H8g
	for <freebsd-questions@freebsd.org>; Sun, 21 Apr 2024 03:41:53 +0000 (UTC)
	(envelope-from mail@souji-thenria.net)
Authentication-Results: mx1.freebsd.org;
	none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=souji-thenria.net;
	s=20231116; t=1713670911;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding:
	 in-reply-to:in-reply-to:references:references;
	bh=To3HTvaxODOq3Q7r/fzw+jLoGT2/nOc0fvvSAse8x6Q=;
	b=mMPb89yz5VFnJA9omGCpSpUDJt/mYndgle0mhHDvqHTJO1BYEuaSNUw/txFj8e+Iur/t4b
	jwP16xnfNe6c9LpNoJhcgvjcjtEgswpLV5kLI7GhYCwCvBRmOqXRgh81W3m+0LWIdEFnJg
	fX/Ao7m1G0SmHZKcb2UYxOUXQOHwjIpj4bJTck0EJyEwdZMHTodoH7bgqvBm3HhLNSewHy
	8MaXAMKpUGEsGu9wKHZ5Cxnp6z8JbAnn1G10IKAIzQwcB3B7bJQSxEEAiUWG0UEPtZxUFO
	S5yHx+4Qg5riS506XNIqiXTkdUX79aBEWWak4GFkW/MGQ3+zrG64WUhuOEgR9OdzbORWWZ
	ir8sncyPBHnT8Y6VUL6XD5nBnDS16Sg/pTfXnxWSPFgvsdQD6D4D2dn3/ziA3F9BayvKLg
	/DTZAOjfQ+hZZ5j6VxYG5pxY5e6u6SlrGr9UhlkDLhYOhVIQbId27dLaj3yju+xYspfSz8
	2uFDp1W4NLfAwVwcQXqzPJZY/KQRtET5bj+GHwOjpRz1ySfrYphSE6G87KoWrSotzF6xBH
	dbCYk0r3tA61YY6qINOIhleI7j6cj1b78OomWs9Km1/dDtNODjMdCjytmN2Yz7vxu8wGTx
	ClcKMGrmrQ6xUOTUekqL14MDBNO0wfZdPsXclKL4YJRGaJ8oeHsTY=
Received: 
	by alisa.souji-thenria.net (OpenSMTPD) with ESMTPSA id 77453a82 (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO);
	Sun, 21 Apr 2024 05:41:51 +0200 (CEST)
List-Id: User questions <freebsd-questions.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-questions
List-Help: <mailto:questions+help@freebsd.org>
List-Post: <mailto:questions@freebsd.org>
List-Subscribe: <mailto:questions+subscribe@freebsd.org>
List-Unsubscribe: <mailto:questions+unsubscribe@freebsd.org>
X-BeenThere: freebsd-questions@freebsd.org
Sender: owner-freebsd-questions@FreeBSD.org
Mime-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8; format=Flowed
Date: Sun, 21 Apr 2024 04:41:49 +0100
Message-Id: <D0PHMZWIUDM2.M6CM5YJFR8U7@souji-thenria.net>
Cc: <freebsd-questions@freebsd.org>
Subject: Re: certbot
From: "Souji Thenria" <mail@souji-thenria.net>
To: "paul beard" <paulbeard@gmail.com>, "John Levine" <johnl@iecc.com>
X-Mailer: aerc 0.17.0
References: <CAMtcK2pTKSHpOCKhEdWSvLyT1fBvjm50zZ8LhF-jbDjmFzBJGA@mail.gmail.com> <20240421024338.4F7E5891631C@ary.qy> <CAMtcK2px1zjpzNW085NZ=4LVK+YTuXayaVZFuQX6oGypvzafLQ@mail.gmail.com>
In-Reply-To: <CAMtcK2px1zjpzNW085NZ=4LVK+YTuXayaVZFuQX6oGypvzafLQ@mail.gmail.com>
X-Spamd-Bar: ----
X-Rspamd-Pre-Result: action=no action;
	module=replies;
	Message is reply to one we originated
X-Spamd-Result: default: False [-4.00 / 15.00];
	REPLY(-4.00)[];
	ASN(0.00)[asn:197540, ipnet:188.68.32.0/20, country:DE]
X-Rspamd-Queue-Id: 4VMZ1s3TdNz4H8g

On Sun Apr 21, 2024 at 4:13 AM BST, paul beard wrote:
> The question at hand is why OP can't use something as straightforward as
> what I run. Why does he need to run it with environment variables where I
> don't?

FreeBSD 14 uses a newer OpenSSL version, which probably disables some
older algorithms that are needed by certbot.

You don't have this problem since you are running FreeBSD 13, which
still uses the older OpenSSL version and supports those algorithms by
default.