{"action":"created","issue":{"url":"https://api.github.com/repos/certbot/certbot/issues/7170","repository_url":"https://api.github.com/repos/certbot/certbot","labels_url":"https://api.github.com/repos/certbot/certbot/issues/7170/labels{/name}","comments_url":"https://api.github.com/repos/certbot/certbot/issues/7170/comments","events_url":"https://api.github.com/repos/certbot/certbot/issues/7170/events","html_url":"https://github.com/certbot/certbot/issues/7170","id":458839924,"node_id":"MDU6SXNzdWU0NTg4Mzk5MjQ=","number":7170,"title":"Add a ca-bundle command line flag","user":{"login":"dopey","id":1820847,"node_id":"MDQ6VXNlcjE4MjA4NDc=","avatar_url":"https://avatars0.githubusercontent.com/u/1820847?v=4","gravatar_id":"","url":"https://api.github.com/users/dopey","html_url":"https://github.com/dopey","followers_url":"https://api.github.com/users/dopey/followers","following_url":"https://api.github.com/users/dopey/following{/other_user}","gists_url":"https://api.github.com/users/dopey/gists{/gist_id}","starred_url":"https://api.github.com/users/dopey/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dopey/subscriptions","organizations_url":"https://api.github.com/users/dopey/orgs","repos_url":"https://api.github.com/users/dopey/repos","events_url":"https://api.github.com/users/dopey/events{/privacy}","received_events_url":"https://api.github.com/users/dopey/received_events","type":"User","site_admin":false},"labels":[{"id":277074172,"node_id":"MDU6TGFiZWwyNzcwNzQxNzI=","url":"https://api.github.com/repos/certbot/certbot/labels/area:%20acme","name":"area: acme","color":"c5def5","default":false},{"id":245387015,"node_id":"MDU6TGFiZWwyNDUzODcwMTU=","url":"https://api.github.com/repos/certbot/certbot/labels/area:%20documentation","name":"area: documentation","color":"c5def5","default":false},{"id":1226192732,"node_id":"MDU6TGFiZWwxMjI2MTkyNzMy","url":"https://api.github.com/repos/certbot/certbot/labels/priority:%20unplanned","name":"priority: unplanned","color":"5319e7","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2019-06-20T19:45:22Z","updated_at":"2019-08-02T21:09:19Z","closed_at":null,"author_association":"NONE","body":"https://community.letsencrypt.org/t/changing-the-ca-bundle-with-custom-server/96251/3\r\n\r\nIt is possible to change the server path (using the `--server` flag) but there is no flag to change the ca-bundle used to do tls server auth.\r\n\r\nThere is an environment variable (`REQUESTS_CA_BUNDLE`) that works, but it is not mentioned in the documentation. \r\n\r\nIt would be great to add a command line flag, such as `--ca-bundle` (along with documentation). In addition, it would be nice to add documentation about the environment variable.\r\n"},"comment":{"url":"https://api.github.com/repos/certbot/certbot/issues/comments/517845116","html_url":"https://github.com/certbot/certbot/issues/7170#issuecomment-517845116","issue_url":"https://api.github.com/repos/certbot/certbot/issues/7170","id":517845116,"node_id":"MDEyOklzc3VlQ29tbWVudDUxNzg0NTExNg==","user":{"login":"mmalone","id":6750,"node_id":"MDQ6VXNlcjY3NTA=","avatar_url":"https://avatars3.githubusercontent.com/u/6750?v=4","gravatar_id":"","url":"https://api.github.com/users/mmalone","html_url":"https://github.com/mmalone","followers_url":"https://api.github.com/users/mmalone/followers","following_url":"https://api.github.com/users/mmalone/following{/other_user}","gists_url":"https://api.github.com/users/mmalone/gists{/gist_id}","starred_url":"https://api.github.com/users/mmalone/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mmalone/subscriptions","organizations_url":"https://api.github.com/users/mmalone/orgs","repos_url":"https://api.github.com/users/mmalone/repos","events_url":"https://api.github.com/users/mmalone/events{/privacy}","received_events_url":"https://api.github.com/users/mmalone/received_events","type":"User","site_admin":false},"created_at":"2019-08-02T21:09:19Z","updated_at":"2019-08-02T21:09:19Z","author_association":"NONE","body":"> I happen to know that Ubuntu and Debian are on systemd ... if the systemd timer exists, [the certbot cronjob] won't run if so.\r\n\r\nHa, I noticed that check while testing on Ubuntu 18.04, got confused, and removed it. I also can't find anything in `/etc/systemd` that references `certbot`... so I _might_ have found another issue. Looks like renewals might be broken for Ubuntu 18.04. It's been a while since I installed, but pretty sure I just ran through the instructions on certbot.eff.org. If I have an opportunity to repro I'll report back.\r\n\r\n> I'd recommend making a single certificate bundle that contains both the system ca-certificates package and the internal CA root\r\n\r\nAlright, good thinking, you got me. This is a reasonably straightforward workaround. I'll leave my pony request outstanding though: it'd be nice to be able to configure the root trust bundle on a per-server basis without shenanigans. I understand if you wontfix :).\r\n\r\n> Could you file a separate ticket for this one?\r\n\r\nOn it.\r\n\r\nThanks for your help!"}}
{"actor":{"display_login":"mmalone"}}