From: "Massimo S." Received: from mail2.quasarbbs.net ([80.86.52.115] verified) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTP id 3330833 for ecs-isp@2rosenthals.com; Sun, 09 Aug 2026 12:52:59 -0400 DKIM-Signature: v=1; q=dns/txt; a=rsa-sha256; c=relaxed/relaxed; s=default; d=ecomstation.it; bh=HklzxckfR8NHK/a8qqPLqEpSiW7NAc85cRTNP0KijGA=; h=Return-Path:From:To:Subject:Date:Message-ID; b=XEbjVhlkXk1yj9PAGCkPYGGh/7BRk7U5fz+am3XI4sWuKGgq4UuXIhXYPyYMv1wSYblKL Jox3Cs03+gUHbxAsgPw+dcAc76hzMdDa3AymWNEXRuw769yb4KanuwE1oyvj3Bctp/D3Bq+ YK5v1EjCpa71oyv6nmxKreBfU9UzIAbD8Nzi9kShfg1Z5mrTQ7e65QpV/tOjJFH4UX30GDZ Mc2X8B7oPSZKs8/OIEDWsE939+hmlYzUdoQikjRZ4Lidqxonm7Ml79kRz2LUPqNWZj5rlux 6TVrUxkYb1hELB19sASYeao93PMQJ8PfE6sJ+x6BjPpJKtqWFDF8aZlzXJ3A== Authentication-Results: srv2; spf=none smtp.helo=[192.168.10.199]; spf=pass smtp.mailfrom=ecomstation.it Received: from [192.168.10.199] (dtp [192.168.10.199]) by srv2 (Weasel v3.143) for ; Sun, 09 Aug 2026 18:53:01 -0000 Reply-To: ml@ecomstation.it Subject: Re: [eCS-ISP] uacme 1.2.4 issue - update To: eCS ISP Mailing List References: Organization: Massimo S. Message-ID: <7de8038a-b2e0-5a71-5e74-a2f3a9ce447a@ecomstation.it> Date: Sun, 9 Aug 2026 18:52:54 +0200 User-Agent: Mozilla/5.0 (OS/2; U; Warp 4.5; it-IT; rv:1.7.13) Gecko/20060424 Thunderbird/1.0.8 Mnenhy/0.7.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: it Content-Transfer-Encoding: 8bit Il 05/08/2026 23:03, Paul Smedley ha scritto: > I don't have easy access to an OS/2 box where I am right now, but what does chkdll32.exe uacme.exe on > the 1.0.19 & 1.2.4 executables say? > > My guess is that 1.0.19 had libcurl statically linked and 1.2.4 has it dynamically linked. Hi Paul, yes, uacme 1.0.19 have curl DLL "inside" All DLL's used by 'uacme_1019.exe' could be loaded. Loading DLL 'libcn0' --> C:\USR\LIB\LIBCN0.DLL. Loading DLL 'libcx0' --> C:\USR\LIB\LIBCX0.DLL. Loading DLL 'gtls30' --> D:\SERVICES\UACME\GTLS30.DLL. Loading DLL 'curl4' --> C:\USR\LIB\CURL4.DLL. Loading DLL 'doscalls' --> loaded. All DLL's used by 'uacme_124.exe' could be loaded. Loading DLL 'libcn0' --> C:\USR\LIB\LIBCN0.DLL. Loading DLL 'gtls30' --> D:\SERVICES\UACME\GTLS30.DLL. Loading DLL 'curl4' --> C:\USR\LIB\CURL4.DLL. Loading DLL 'gcc1' --> C:\USR\LIB\GCC1.DLL. Loading DLL 'tcpip32' --> C:\MPTN\DLL\TCPIP32.DLL. All DLL's used by 'uacme.exe' could be loaded. All DLL's used by 'uacme_181.exe' could be loaded. Loading DLL 'libc066' --> C:\USR\LIB\LIBC066.DLL. Loading DLL 'libcx0' --> C:\USR\LIB\LIBCX0.DLL. Loading DLL 'gtls30' --> D:\SERVICES\UACME\GTLS30.DLL. Loading DLL 'pthr01' --> C:\USR\LIB\PTHR01.DLL. Loading DLL 'tcpip32' --> C:\MPTN\DLL\TCPIP32.DLL. Loading DLL 'doscalls' --> loaded. massimo > dynamically linked is preferred as you get security updates for free > > On 6/8/26 05:38, Massimo S. wrote: >> >> >> Il 05/08/2026 21:06, Paul Smedley ha scritto: >>> Hi Max, >>> >>> On 5/8/26 23:53, Massimo S. wrote: >>>> Il 05/08/2026 10:57, Massimo S. ha scritto: >>>>> >>>>> >>>>> Il 05/08/2026 01:13, Peter Moylan ha scritto: >>>>>> On 05/08/26 07:47, Paul Smedley wrote: >>>>>>> On 4/8/26 22:31, Massimo S. wrote: >>>>>>>> Il 09/06/2026 10:50, Paul Smedley ha scritto: >>>>>> >>>>>>>>> My guess would be the ca-certs rpm package is either missing or out >>>>>>>>> of date. >>>>>> >>>>>>>> this is what i believed too.. >>>>>>>> i've downloaded the new cacert.pem but this doesnt' help. >>>>>>>> >>>>>>>> Maybe uacme starting from version 1.2.4 (like 1.8.1 by Andrey too) has >>>>>>>> some issue with /2 paths. >>>>>>>> >>>>>>>> cp: impossibile eseguire stat di >>>>>>>> 'c:etcssluacme/www.myfakedomain.com/cert.pem': No such file or directory >>>>>>>> >>>>>>>> What's that "C:etcssluacm..."? >>>>>>>> >>>>>>> My 'guess' would be a shell issue.  Is this only when your scheduler >>>>>>> starts uacme? Perhaps the schedule is overriding the statemetnts in >>>>>>> config.sys that set *SHELL* to sh.exe >>>>>> >>>>>> That sounds like a Unixism. My config.sys has >>>>>>        SET OS2_SHELL=C:\OS2\CMD.EXE >>>>>> >>>>>> I don't use cron, so I don't know whether cron overrides that. >>>>>> >>>>>> I've just realised that my updating script explicitly specifies the shell: >>>>>>       Path and file name: cmd.exe >>>>>>       Parameters:    /C issue_pmoylan.org.cmd >>>>> >>>>> Copilot say that UACME 1.0.19 have an its own https client that do direct >>>>> requests to LE's server, while later versions use external libcurl. >>>>> (i don't have any libcurl on the entire VM, but this do not explain >>>>> why the renewal works if started manually, damn..) >>>>> >>>>> This stuff about the internal https client can only be confirmed by Paul >>>>> or Andrey that did the portings. >>>>> I've written to Andrey and also to Nicola Di Lieto (the developer >>>>> of UACME), but i still have no answers, we are in august, ppl are on holidays.. >>>> >>>> Nicola Di Lieto answered to the email, NO, UACME 1.0.19 don't have an >>>> internal https service/code, it have allways used libcurl. >>>> >>>> So who knows if libcurl has been statically linked into 1.0.19, >>>> but not in the newer versions? >>>> >>>> If so a libcurl statically linked build should fix the cron issue. >>>> >>> Sounds more like BEGINLIBPATH should fix your cron issue, ie your cron isn't respecting the system LIBPATH. >>> >>> Cheers, >>> >>> Paul >> >> no, same result, i added in the cmd: >> >> @x: >> @cd x:\uacme >> @SET LIBPATHSTRICT=T >> @set beginlibpath=x:\uacme; >> >> uacme: fetching directory at https://acme-v02.api.letsencrypt.org/directory >> uacme: curl_get: GET https://acme-v02.api.letsencrypt.org/directory failed: Problem with the SSL CA cert >> (path? access rights?) >> uacme: curl_get: waiting 5 seconds before retrying >> >> is it possible to understand what changed in the porting from 1.0.19 to 1.2.4? >> >> massimo >> >> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= >> This message is sent to you because you are subscribed to >>  the mailing list . >> To unsubscribe, E-mail to: >> To switch to the DIGEST mode, E-mail to >> To switch to the INDEX mode, E-mail to >> Send administrative queries to >> To subscribe (new addresses), E-mail to: and reply to the confirmation email. >> Web archives are publicly available at: http://lists.2rosenthals.com >> >> This list is hosted by Rosenthal & Rosenthal, LLC >> P.O. Box 281, Deer Park, NY 11729-0281. Non- >> electronic communications related to content >> contained in these messages should be directed >> to the above address. (CAN-SPAM Act of 2003) >> >> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= >> > > =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= > This message is sent to you because you are subscribed to >  the mailing list . > To unsubscribe, E-mail to: > To switch to the DIGEST mode, E-mail to > To switch to the INDEX mode, E-mail to > Send administrative queries to  > To subscribe (new addresses), E-mail to: and reply to the confirmation email. > Web archives are publicly available at: http://lists.2rosenthals.com > > This list is hosted by Rosenthal & Rosenthal, LLC > P.O. Box 281, Deer Park, NY 11729-0281. Non- > electronic communications related to content > contained in these messages should be directed > to the above address. (CAN-SPAM Act of 2003) > > =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= >