From: "Paul Smedley" <ecs-isp@2rosenthals.com>
Message-ID: <8958f0ee-5525-4a14-90b0-ad5a02ea6e50@smedley.id.au>
Date: Tue, 9 Jun 2026 18:20:27 +0930
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: [eCS-ISP] uacme 1.2.4 issue
To: eCS ISP Mailing List <ecs-isp@2rosenthals.com>
References: <list-2730016@2rosenthals.com>
Content-Language: en-AU
In-Reply-To: <list-2730016@2rosenthals.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

Hi Max,

On 9/6/26 17:36, Massimo S. wrote:
> Hi all,
>
> for a LE certificate renewal if i use uacme 1.2.4 i get this:
>
> uacme: version 1.2.4 starting on Tue, 09 Jun 2026 09:34:39
> ...
> ...
> uacme: fetching directory at 
> https://acme-v02.api.letsencrypt.org/directory
> uacme: curl_get: GET https://acme-v02.api.letsencrypt.org/directory 
> failed: Problem with the SSL CA cert (path? access rights?)
> uacme: curl_get: waiting 5 seconds before retrying
> uacme: curl_get: GET https://acme-v02.api.letsencrypt.org/directory 
> failed: Problem with the SSL CA cert (path? access rights?)
> uacme: curl_get: waiting 5 seconds before retrying
> uacme: curl_get: GET https://acme-v02.api.letsencrypt.org/directory 
> failed: Problem with the SSL CA cert (path? access rights?)
> uacme: curl_get: waiting 5 seconds before retrying
> uacme: acme_get: curl_get failed
> uacme: failed to fetch directory at 
> https://acme-v02.api.letsencrypt.org/directory
>
> while it works if i use uacme 1.0.9
>
> i've seen that i'm using 1.0.9 on all VMs, i forgot about that..
>
> any suggestion?
> any help?
>
My guess would be the ca-certs rpm package is either missing or out of date.

Cheers,

Paul