./certbot-auto renew --dry-run --agree-tos (any certbot command, really,) produces the following output:
Requirement already satisfied (use --upgrade to upgrade): setuptools>=1.0 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from cryptography==1.2.3->-r /tmp/tmp.KrRJg6fS8B/letsencrypt-auto-requirements.txt (line 35)) THESE PACKAGES DO NOT MATCH THE HASHES FROM THE REQUIREMENTS FILE. If you have updated the package versions, please update the hashes. Otherwise, examine the package contents carefully; someone may have tampered with them. pycparser==2.14 from https://pypi.python.org/packages/74/0e/111a4349e81e2a9846129e0357e154b496559799ec34a6b27bc677247bfa/pycparser-2.14-py2.py3-none-any.whl#md5=130e8dc5b640d9339ee4056da0cdc73a (from -r /tmp/tmp.KrRJg6fS8B/letsencrypt-auto-requirements.txt (line 11)): Expected sha256 7959b4a74abdc27b312fed1c21e6caf9309ce0b29ea86b591fd2e99ecdf27f73 Got 52bcedd9180999fc7f3128b4b89ce638ffc0ffcbd136873379d5a37e4f9e7932
It looks like the sha256 hardcoded into certbot-auto refers to the .tar.gz package of pycparser, and pip is trying to download the .whl; obviously the hashes don’t match.
After adding the sha256 manually, certbot fails again, this time while installing
File "/root/.local/share/letsencrypt/lib/python2.7/sre_compile.py", line 583, in compile "sorry, but this version only supports 100 named groups" AssertionError: sorry, but this version only supports 100 named groups ---------------------------------------- Command "/root/.local/share/letsencrypt/bin/python2.7 -u -c "import setuptools, tokenize;__file__='/tmp/pip-build-m2aW7m/cryptography/setup.py';exec(compile(getattr(tokenize, 'open', open)(__file__).read().replace(' ', ' '), __file__, 'exec'))" install --record /tmp/pip-zcVRIo-record/install-record.txt --single-version-externally-managed --compile --install-headers /root/.local/share/letsencrypt/include/site/python2.7/cryptography" failed with error code 1 in /tmp/pip-build-m2aW7m/cryptography
Is it a bug in an old version of
cryptography, or is it something with my setup (although I can’t imagine what)? Did anybody else encounter errors? Googling doesn’t return any results.