Comments (14)
n2vi
commented on June 5, 2024
1
We'll definitely fix upspin sources to run acme v2 more comprehensively.
Just a question of coordinating folks here coming back from holidays.
…On Thu, Jan 2, 2020 at 9:50 AM Filip Filmar ***@***.***> wrote:
Thinking aloud, as I have not tried this yet: is it possible to run upspin
behind an up-to-date https proxy and remove the need for upspinserver to
manage https certs?
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
<#632?email_source=notifications&email_token=ACADPOTZN2XSL3BHFDR3TX3Q3YSNJA5CNFSM4KB47GH2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEH6525Y#issuecomment-570285431>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ACADPOWKC6HGKQYZENO2USTQ3YSNJANCNFSM4KB47GHQ>
.
from upspin.
lgouger
commented on June 5, 2024
1
Confirmed, after updating (go get -u) I now have the latest crypto code and the upspinserver is starting and getting a certificate without any problem.
thanks.
from upspin.
filmil
commented on June 5, 2024
Tried to set up a server based on GCP and seeing the same issue.
from upspin.
rmhrisk
commented on June 5, 2024
The ACME implementation on Let’s Encrypt only supports the v2 or RFC compliant version of ACME. Someone will have to do an update to upspin to get it working again.
from upspin.
filmil
commented on June 5, 2024
Thinking aloud, as I have not tried this yet: is it possible to run upspin behind an up-to-date https proxy and remove the need for upspinserver to manage https certs?
from upspin.
rmhrisk
commented on June 5, 2024
Thinking aloud, as I have not tried this yet: is it possible to run upspin behind an up-to-date https proxy and remove the need for upspinserver to manage https certs?
You should be able to do that or use a client like acme.sh but it’s better for v1 to be replaced in source.
from upspin.
n2vi
commented on June 5, 2024
Also, to perhaps save me a couple rounds of creating new GCP servers...
Were you using pre-built binaries from somewhere or rebuilding from source
yourself?
On Thu, Jan 2, 2020 at 10:04 AM Eric Grosse <[email protected]>
wrote:
… We'll definitely fix upspin sources to run acme v2 more comprehensively.
Just a question of coordinating folks here coming back from holidays.
On Thu, Jan 2, 2020 at 9:50 AM Filip Filmar ***@***.***>
wrote:
> Thinking aloud, as I have not tried this yet: is it possible to run
upspin
> behind an up-to-date https proxy and remove the need for upspinserver to
> manage https certs?
>
> —
> You are receiving this because you are subscribed to this thread.
> Reply to this email directly, view it on GitHub
> <
#632?email_source=notifications&email_token=ACADPOTZN2XSL3BHFDR3TX3Q3YSNJA5CNFSM4KB47GH2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEH6525Y#issuecomment-570285431
>,
> or unsubscribe
> <
https://github.com/notifications/unsubscribe-auth/ACADPOWKC6HGKQYZENO2USTQ3YSNJANCNFSM4KB47GHQ
>
> .
>
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
<#632?email_source=notifications&email_token=ACADPOUCDVN3Z7AVVKQ7EH3Q3YUCRA5CNFSM4KB47GH2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEH663LY#issuecomment-570289583>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ACADPOSOH6AY7KC2GYMMHUDQ3YUCRANCNFSM4KB47GHQ>
.
from upspin.
filmil
commented on June 5, 2024
Thinking aloud, as I have not tried this yet: is it possible to run upspin behind an up-to-date https proxy and remove the need for upspinserver to manage https certs?
You should be able to do that or use a client like acme.sh but it’s better for v1 to be replaced in source.
Understood, and not to diminish the need to update the library; I wanted also to have upspin not monopolize the port 443. :)
from upspin.
filmil
commented on June 5, 2024
Also, to perhaps save me a couple rounds of creating new GCP servers... Were you using pre-built binaries from somewhere or rebuilding from source yourself?
I used upspinserver-drive following instructions here: https://upspin.io/doc/server_setup_drive.md. Which looks to be a minimal addition to the "regular" upspin.
from upspin.
n2vi
commented on June 5, 2024
I just now setup upspinserver-drive for my first time. Let'sEncrypt worked
fine, so we must be using acme v2, which corresponds to my understanding of
our source.
So I'm still mystified about the problems y'all are having; not doubting
you have them, just confused about why. If you rebuild from scratch it
might work, but I realize that's not an entirely satisfactory answer.
…On Thu, Jan 2, 2020 at 12:01 PM Filip Filmar ***@***.***> wrote:
Also, to perhaps save me a couple rounds of creating new GCP servers...
Were you using pre-built binaries from somewhere or rebuilding from source
yourself?
I used upspinserver-gdrive following instructions here:
https://upspin.io/doc/server_setup_drive.md. Which looks to be a minimal
addition to the "regular" upspin.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
<#632?email_source=notifications&email_token=ACADPOUTCQ5CFMEABYCPRM3Q3ZBX5A5CNFSM4KB47GH2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEH7HUCY#issuecomment-570325515>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ACADPOUXDV6LBIE4STKEEG3Q3ZBX5ANCNFSM4KB47GHQ>
.
from upspin.
rmhrisk
commented on June 5, 2024
@n2vi (We miss you btw).
We’re you re-using an existing ACME account at Lets Encrypt?
I’ve never installed upspin but I do know the boulder (LEs server) fairly well and that error should only happen when it gets a new account registration via ACMEv1.
from upspin.
n2vi
commented on June 5, 2024
(I miss my friends there as well.)
Nope, as best I could manage this was a completely fresh install with
nothing copied over. And I couldn't find anyplace in our code where we were
specifying ACMEv1, just calling the Go standard library which defaults to
v2.
…On Sat, Jan 4, 2020 at 4:18 PM Ryan Hurst ***@***.***> wrote:
@n2vi <https://github.com/n2vi> (We miss you btw).
We’re you re-using an existing ACME account at Lets Encrypt?
I’ve never installed upspin but I do know the boulder (LEs server) fairly
well and that error should only happen when it gets a new account
registration via ACMEv1.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
<#632?email_source=notifications&email_token=ACADPOTMYEGUHU5ZAEQPBMDQ4ERLTA5CNFSM4KB47GH2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEIDDIOQ#issuecomment-570831930>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ACADPORY3DAW4FZ73T5SUFTQ4ERLTANCNFSM4KB47GHQ>
.
from upspin.
rmhrisk
commented on June 5, 2024
Hrm.... not sure then.
from upspin.
filmil
commented on June 5, 2024
Hm, so in my case the issue was that I compiled with an ancient version of
upspin. I was probably missing the `-u` parameter when doing the `go get`,
and I already had deps downloaded. :/
Specifically, it seems that one probably needs this commit:
commit 46bda5d
Author: Andrew Gerrand <[email protected]>
Date: Wed Nov 20 07:37:30 2019 +1100
vendor: update golang.org/x/crypto
The ACMEv1 endpoints have been EoL'd, so update the acme libraries
so that new Upspin users can set up their servers.
https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430
The update was performed with this command:
$ dep ensure -update golang.org/x/crypto
Change-Id: Ib82598113f345cc4234003beafaadfce50e3c3e6
Reviewed-on: https://upspin-review.googlesource.com/c/upspin/+/19380
Reviewed-by: Eric Grosse <[email protected]>
…On Sun, Jan 5, 2020 at 2:43 PM Ryan Hurst ***@***.***> wrote:
Hrm.... not sure then.
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
<#632?email_source=notifications&email_token=AAB4GMCYAZXYF7ZMIKZYSL3Q4JPAXA5CNFSM4KB47GH2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEIEBO7Y#issuecomment-570955647>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AAB4GMEOZMORDX5K4B4QRIDQ4JPAXANCNFSM4KB47GHQ>
.
from upspin.
Related Issues (20)
- `upspinserver` spending months in some sort of a read loop HOT 7
- upspin-ui and upspinserver-gcp distributed without working -version flag
- remove "-u" from "go get" docs? HOT 1
- cloud/storage/dropbox: adding go.mod HOT 4
- cloud/storage/gcp: objects in bucket are public accessible HOT 1
- upspin permission system messes up git diffs when mounted over `upspinfs`
- upspin-ui GCP setup doesn't give allUsers read access to bucket HOT 7
- setupwriters assumes upspin/deploy/ directory structure that setup wizard doesn't create
- Group Access to dir server HOT 5
- Out of memory while deleting files
- go get instructions need updating HOT 2
- Incorrect quarantine extension on files opened in mount HOT 1
- double compressed download archive HOT 6
- https://key.upspin.io/ down? HOT 5
- If `prevErr.isZero()` is `true`, it will skip writing current error string. HOT 2
- certificate expired
- upspin-ui shows 404 error HOT 3
- non-trivial typo in overview doc (I think?) HOT 4
- Why custom types instead of primitives? HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from upspin.