[Slackbuilds-users] letsencrypt-4.0.0 requires josepy-2.0

Willy Sudiarto Raharjo willysr at slackbuilds.org
Sat May 3 02:14:29 UTC 2025


> Last night a script I recently wrote to renew my certificates finally 
> triggered. But instead of renewed certificates I got this error for 
> every domain:
> 
> ```
> Failed to renew certificate domain.tld with error: 
> 'cryptography.hazmat.bindings._rust.x509.Certificat' object has no 
> attribute 'wrapped'
> ```
> 
> I looked through /var/log/letsencrypt.log and found that the culprit was 
> josepy. Then I navigated to certbot's github and found out that since 
> April 2 they require josepy-2.0. However, SBo has josepy-1.15.0. 
> According to git log, there was an attempt to update josepy to version 
> 2.0.0 in February, however it was then reverted back to 1.15.0 in March. 
> Reverse search showed that letsencrypt is the only package which 
> requires josepy, so I think it's safe to update it now.
> 
> Can't really test it, though, since first I downgraded letsencrypt to 
> 3.3.0 to be able to renew my certificates, then started digging, so now 
> there's nothing to renew anymore, and it seems that josepy is called 
> then working with actual certificates.

Thanks for the report
Yes, it's confirmed that 4.0 does requires newer josepy
i have pushed it to my branch and it will be part of this week's public 
update so you can upgrade back to 4.x


-- 
Willy Sudiarto Raharjo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://lists.slackbuilds.org/pipermail/slackbuilds-users/attachments/20250503/f399ca6e/attachment.asc>


More information about the SlackBuilds-users mailing list