Certbot / Python problem

[Daniel J. Luke]

We need to rollback py-josepy as the 2.0.0 version is incompatible with certbot.

As a quick fix, you can install version 1.15.0 with pip, which will require you to do some cleanup later as it will overwrite files installed by macports. Or you can install certbot into a virtualenv and use that instead of the macports-provided one.

> On Feb 14, 2025, at 9:54 AM, Mark Lucas <mllists at arc.co.uk> wrote:
> 
> Despite the recent updates to certbot, josepy etc I am still getting the same issue on both Intel and Apple Silicon mac's 
> certbot-nginx @3.2.0 also seems to be similarly broken.
> Any help would be appreciated as this problem breaks a number of other processes.
> 
> Mark Lucas
> 
> root$ certbot certificates
> Traceback (most recent call last):
>   File "/opt/local/bin/certbot", line 5, in <module>
>     from certbot.main import main
>   File "/opt/local/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/site-packages/certbot/main.py", line 6, in <module>
>     from certbot._internal import main as internal_main
>   File "/opt/local/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/site-packages/certbot/_internal/main.py", line 23, in <module>
>     from acme import client as acme_client
>   File "/opt/local/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/site-packages/acme/client.py", line 27, in <module>
>     from acme import challenges
>   File "/opt/local/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/site-packages/acme/challenges.py", line 24, in <module>
>     from acme import crypto_util
>   File "/opt/local/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/site-packages/acme/crypto_util.py", line 556, in <module>
>     def dump_pyopenssl_chain(chain: Union[List[jose.ComparableX509], List[crypto.X509]],
>                                                ^^^^^^^^^^^^^^^^^^^
> AttributeError: module 'josepy' has no attribute 'ComparableX509'. Did you mean: 'ComparableKey'?
> 
> 
> 
>> On 11 Feb 2025, at 16:45, Marius Schamschula <lists at schamschula.com> wrote:
>> 
>> I tested certbot after updating josepy and did not see this error.
>> 
>> However, I think I may have at fires only updated py312-josepy, while my copy of certbot is built using Python 313.
>> 
>> py313-acme doesn’t build against py313-josepy, and hence neither will certbot.
>> 
>> I think the only way to deal with this is to revert py-josepy to the previous version.
>> 
>>> On Feb 11, 2025, at 10:08 AM, Mark Lucas <mllists at arc.co.uk> wrote:
>>> 
>>> After performing a selfupdate today, now whenever a try to run a Certbot command I get the following;-
>>> 
>>> 
>>> Traceback (most recent call last):
>>>   File "/opt/local/bin/certbot", line 5, in <module>
>>>     from certbot.main import main
>>>   File "/opt/local/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/site-packages/certbot/main.py", line 6, in <module>
>>>     from certbot._internal import main as internal_main
>>>   File "/opt/local/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/site-packages/certbot/_internal/main.py", line 23, in <module>
>>>     from acme import client as acme_client
>>>   File "/opt/local/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/site-packages/acme/client.py", line 26, in <module>
>>>     from acme import challenges
>>>   File "/opt/local/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/site-packages/acme/challenges.py", line 25, in <module>
>>>     from acme import crypto_util
>>>   File "/opt/local/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/site-packages/acme/crypto_util.py", line 440, in <module>
>>>     def dump_pyopenssl_chain(chain: Union[List[jose.ComparableX509], List[crypto.X509]],
>>>                                                ^^^^^^^^^^^^^^^^^^^
>>> AttributeError: module 'josepy' has no attribute 'ComparableX509'. Did you mean: 'ComparableKey'?
>>> 
>>> The problem occurs after selfupdate on both Apple Silicon and Intel machines.
>>> I assume this is a Python issue rather than a problem with Certbot itself?
>>> Is anyone else seeing this?
>>> 
>>> Thanks
>>> 
>>> Mark
>>>  
>> 
>> Marius
>> --
>> Marius Schamschula
>> 
>> 
>> 
> 

-- 
Daniel J. Luke