letsencrypt renewal failure "sslv3 alert bad record mac"

[Gary Aitken]

On 3/12/20 10:02 AM, Doug McIntyre wrote:
> On Wed, Mar 11, 2020 at 08:22:38PM -0600, Gary Aitken wrote:
>> On 3/11/20 4:55 PM, Yasuhiro KIMURA wrote:
>>> From: Gary Aitken <freebsd at dreamchaser.org>
>>> Subject: letsencrypt renewal failure "sslv3 alert bad record mac"
>>> Date: Wed, 11 Mar 2020 14:11:59 -0600
>>>
>>>> Previous renewals worked ok, but may have been under 10.3
>>>>
>>>> 11.2-RELEASE-p9 FreeBSD 11.2-RELEASE-p9
>>>>
>>>> I know I need to upgrade to 11.3 but this seems not related to that.
>>>> Any help / pointers would be much appreciated.
>>>
>>> Are there any reason that you use non-default version of python?
>>> I wonder if current version of certbot still support python 2.7.
>>
>> py27-certbot-0.31.0,1 is the pkg installed; it installed python 2.7.
>>
>> I see python2 is EOL 2020-01-01.
>> I will try upgrading the os and installed packages.
> 
> 
> There should also be a py37-certbot pkg.

Thanks.
deleting py27-certbot and installing py37-certbot did the trick.

Gary