lang/python314 vs security/py-acme-tiny (and other dependent ports)

Roger Marquis <[email protected]>
Newsgroups gmane.os.freebsd.devel.ports
Message-ID <[email protected]>
Security/py-acme-tiny runs fine with python313 but 3.14's regex deltas
require patching.  Error message is:

  Verifying www.domain.org...
  Traceback (most recent call last):
    File "/usr/local/bin/acme_tiny", line 199, in <module>
      main(sys.argv[1:])
      ~~~~^^^^^^^^^^^^^^
    File "/usr/local/bin/acme_tiny", line 195, in main
      signed_crt = get_crt(args.account_key, args.csr, args.acme_dir, log=LOGGER, CA=args.ca,
  disable_check=args.disable_check, directory_url=args.directory_url, contact=args.contact, check_port=args.check_port)
    File "/usr/local/bin/acme_tiny", line 153, in get_crt
      raise ValueError("Challenge did not pass for {0}: {1}".format(domain, authorization))
  ValueError: Challenge did not pass for www.domain.org: {'identifier': {'type': 'dns', 'value':
  'www.domain.org'}, 'status': 'invalid', 'expires': '2026-02-01T14:36:04Z', 'challenges': [{'type': 'http-01', 'url':
  'https://acme-v02.api.letsencrypt.org/acme/chall/23627797/648588023536/FpYwkQ', 'status': 'invalid', 'validated':
  '2026-01-25T14:36:05Z', 'error': {'type': 'urn:ietf:params:acme:error:connection', 'detail': 'IP.IP.IP.IP: Fetching
  http://www.domain.org/.well-known/acme-challenge/yrcJe-yyUcrYMTSUIZ5oSEGhsCNM1XatZvGRcIerkxs: Timeout during connect
  (likely firewall problem)', 'status': 400}, 'token': 'yrcJe-yyUcrYMTSUIZ5oSEGhsCNM1XatZvGRcIerkxs', 'validationRecord':
  [{'url': 'http://www.domain.org/.well-known/acme-challenge/yrcJe-yyUcrYMTSUIZ5oSEGhsCNM1XatZvGRcIerkxs', 'hostname':
  'www.domain.org', 'port': '80', 'addressesResolved': ['IP.IP.IP.IP'], 'addressUsed': 'IP.IP.IP.IP'}]}]}

      ERROR: acme_tiny failed to renew www.domain.org

Why the Python Foundation is allowing application-breaking deltas in
sub-minor revisions is another topic but the workaround for now is to
specify DEFAULT_VERSIONS+=python=3.13 in make.conf until port and
application maintainers are able to fix all the breakage.

Roger
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.