From: "Massimo S." <ecs-isp@2rosenthals.com>
Reply-To: ml@ecomstation.it
Subject: Re: [eCS-ISP] uacme 1.2.4 issue - upgraded to 1.8.1 success - same
 problem KO if scheduled renewal
To: eCS ISP Mailing List <ecs-isp@2rosenthals.com>
References: <list-2750891@2rosenthals.com> <list-3250686@2rosenthals.com>
Organization: Massimo S.
Message-ID: <609571f6-b553-adfc-2bb2-50d8354af32e@ecomstation.it>
Date: Mon, 3 Aug 2026 21:41:14 +0200
User-Agent: Mozilla/5.0 (OS/2; U; Warp 4.5; it-IT; rv:1.7.13) Gecko/20060424
 Thunderbird/1.0.8 Mnenhy/0.7.4.0
MIME-Version: 1.0
In-Reply-To: <list-3250686@2rosenthals.com>
Content-Type: text/plain; charset=iso-8859-15; format=flowed
Content-Language: it
Content-Transfer-Encoding: 8bit

Il 03/08/2026 00:22, Massimo S. ha scritto:
> Il 12/06/2026 01:43, Steven Levine ha scritto:
>> In <list-2750010@2rosenthals.com>, on 06/11/26
>>     at 09:33 AM, "Massimo S." <ecs-isp@2rosenthals.com> said:
>>
>> Hi,
>>
>> Your answers have me a bit confused.
>>
>>> there are also other posts to this ML
>>
>> I recall them.  However, I suspect enough has changed that it's best to
>> start over and collect fresh data.
>>
>>> on MTA2 was happening this, each scheduled renewal of the mta(popS) cert
>>> failed, so each time i had to start the script manually and it worked
>>
>> If you want to continue to try to get 1.2.4 working on your setup, the
>> first order of business is the get it working from the command line.
>>
>>>>     curl https://acme-v02.api.letsencrypt.org/directory
>>> no issues, with -o flag it save the same contents like wget does
>>
>> This implies that there's something in your setup that is bothering
>> uacme.exe.  Both uacme and curl4 are using the same curl4 library.
>>
>>> here buildlevel give out only this:
>>> unknown return code 3 from FileVerGetVersionStringFromFile
>>> File uacme_new.exe has no LAN component-style version string.
>>
>> That's why I included the md5 hash.
>>
>>> https://smedley.id.au/tmp/uacme-1.2.4-os2-20240817.zip
>>
>> This is the most recent distro.  It's very unlikely that your binary
>> differs from what the rest of us are using.
>>
>> If you want to continue trying to get 1.2.4 working, I need to see your
>> exact uacme command line.
>>
>> Steven
> 
> Hi all,
> 
> i've installed uacme 1.8.1 by Andrey
> 
> https://os2.snc.ru/pub/misc/uacme-1_8_1.zip
> 
> it needs these LIBS:
> 
>   7/09/20  8:53        309.676    124 a---  gmp10.dll
>   4/04/20 12:20      1.009.710    124 a---  gtls30.dll
> 22/01/17  7:14         90.134    124 a---  gtlsos27.dll
>   4/04/20 12:20         23.137    124 a---  gtlssl27.dll
>   4/04/20 12:20         23.620    124 a---  gtlsxx28.dll
> 25/03/20 14:12        143.989    124 a---  hogwee50.dll
> 25/03/20 14:12        145.225    124 a---  nettle70.dll
>   8/11/19  8:31        401.326    124 a---  p11kit0.dll
>   4/11/19 13:02         42.862    124 a---  tasn16.dll
> 
> that are in these packages:
> 
> gmp-6_2_0-2_oc00.zip
> gnutls-3_6_12-1_oc00.zip
> libtasn1-4_14-1_oc00.zip
> nettle-3_5_1-1_oc00.zip
> p11-kit-0_23_18_1-1_oc00.zip
> 
> you can
> 
> download the libraries from Netlabs repository:
> 
> https://rpm.netlabs.org/release/00/zip/
> 
> or install them with YUM
> 
> 
> massimo

I've the same issue, i start manually a renewal from the command prompt it works (!!)
with cron it do not work, but of course i need the scheduled renewal.

uacme: fetching directory at https://acme-v02.api.letsencrypt.org/directory
uacme: curl_get: GET https://acme-v02.api.letsencrypt.org/directory failed: Problem with the SSL CA cert 
(path? access rights?)
uacme: curl_get: waiting 5 seconds before retrying

i've updated cacert.pem and all curl stuff (libs, command etc.) with YUM UPDATE CURL

but it still don't work if scheduled

massimo