From nobody Fri Apr 24 01:18:17 2026 X-Original-To: questions@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4g1w8K2tGVz6bYMC for ; Fri, 24 Apr 2026 01:18:41 +0000 (UTC) (envelope-from wfdudley@gmail.com) Received: from mail-qk1-x72c.google.com (mail-qk1-x72c.google.com [IPv6:2607:f8b0:4864:20::72c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4g1w8J3N3yz3T86 for ; Fri, 24 Apr 2026 01:18:40 +0000 (UTC) (envelope-from wfdudley@gmail.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20251104 header.b=aVOG6SM4; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of wfdudley@gmail.com designates 2607:f8b0:4864:20::72c as permitted sender) smtp.mailfrom=wfdudley@gmail.com Received: by mail-qk1-x72c.google.com with SMTP id af79cd13be357-8ee7ffd738dso364924385a.1 for ; Thu, 23 Apr 2026 18:18:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1776993519; x=1777598319; darn=freebsd.org; h=content-transfer-encoding:subject:from:to:content-language :user-agent:mime-version:date:message-id:from:to:cc:subject:date :message-id:reply-to; bh=1HB8L2xBjAktAu/I9lSjRB0R1jsw4ZpkI7+hB/YonSE=; b=aVOG6SM4wjRB7e0++cuMGJGSMSQ8Dt3fjjqw+KDCgRRAXEnFwh3j5CCa9eJqkNLwFb 1Di/8OzpkId9GyRxQ67W7W20GdrY0qa91lM4fu1Padir5BtHZarKd1hE16/3gQPNn5es yNcgbXRGYRVWbrK1iSEpNlgY2vWi2hdEts4RIGqdTEpHa8puUZCbLyGAPg19iBoH9pzV p0m1ed/ZSldV3Pa0yvn0mTXcO5F0cVUEilKp7tES97nTUojhLCGGmSLURfK0/zP1UIjQ rEEMYxsxwgS1t+jBCiTn65hwNK++cxs5r7iY33OChKWrUI2T0TPXCkbdTF44xp06T2y/ fUdw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1776993519; x=1777598319; h=content-transfer-encoding:subject:from:to:content-language :user-agent:mime-version:date:message-id:x-gm-gg:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=1HB8L2xBjAktAu/I9lSjRB0R1jsw4ZpkI7+hB/YonSE=; b=h7aCOs8isn/W/EJ3YCB+2A5D4bi6bq6ohKIWiVhnU9JnNiuCWrZfj+S8pwsa74ozWf uslSAU9P8h1dUg6ROr/hQJSke0UjB3TXNbIyh/epyRNKaBWEu+aTSDCXz3vzGT0i7e27 lc35ODfauXzqxT9qVwqg6SrwonkLvDEsdGxruXrJh94fZOj5gFEtGpIphDCMWpwzn/EG uwETQvEsobONTN4DchX62llAryNupWr9+G2WeyoCKm4N0Yae/m4E3cyQfJ+yCAaVSziv GV09dUQzDXY2NbPuS1CvdAdIP8jIzk4No0L9gMm5sn9/CTuNQRRiCtazoLZyZX9d55sQ vvMA== X-Gm-Message-State: AOJu0Yzwm93lBlRS4YoOMSQuNhS4oi4nE+cpcAhxmq0lj8FOa2Sxtvo0 DjYb03zfexPWCWndWwJBtWZm1J3/YAyiH86UrEbyH8W1+sEMb2Xfsz2xA7mFoA== X-Gm-Gg: AeBDieuy3yRwceBTQU+R43RSlVgSB4MR8jmCHQeCva+RnbPpG+bOPBOgr1Dx3o9+5bU kj8Q1E78HOBgsbIQXf72iDO8Ckbr8N4Rmd9vDkaJrIbPcPWk+kHtnmJl4UOUWTpby1HoRHMtvmY Nu/0u9zCq2lb1FxkZkLDOf1CNgwEqQRyj3KxWzmvKipTH67oSLZ8uWUaSYgMMbnqrXL2qt24Aus O44V/Xb9W+/K0XD80foeoWmeOWptG680PqdwiA/lPJPEfRe1u8hGnkdRVbxBRFMf9BwjKmhUtcN C55gxjYydi6XMNm8+x3FcxwRMrKlFJh7a+5NjXCV1y5Nu/70Y7NZkcqayjsvwjAQQMsTa2a4D1n IkLCLrBKioZbGfWnmepF3cr+9l1afebldJx9JZt987tQkn3GXWUVsvEm1+Fz/hmt7lWxQexkMfs Wi9hAS3JgA+vZuBKffl8MOOg89r14aOo3IeGsUh0eW+TjYuPI= X-Received: by 2002:a05:620a:4481:b0:8f1:9e59:21fa with SMTP id af79cd13be357-8f19e6869b6mr512481185a.5.1776993518730; Thu, 23 Apr 2026 18:18:38 -0700 (PDT) Received: from [192.168.27.26] (mail.casano.com. [98.109.205.15]) by smtp.googlemail.com with ESMTPSA id af79cd13be357-8eb428ca90bsm1356857485a.4.2026.04.23.18.18.37 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 23 Apr 2026 18:18:37 -0700 (PDT) Message-ID: <80ba0806-3fc0-4f3a-90b1-d80fc6cd5f29@gmail.com> Date: Thu, 23 Apr 2026 21:18:17 -0400 List-Id: User questions List-Archive: https://lists.freebsd.org/archives/freebsd-questions List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-questions@freebsd.org Sender: owner-freebsd-questions@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US To: questions@freebsd.org From: "William F. Dudley Jr." Subject: letsencrypt complaining about openssl < 3, but 3.0.19.1 installed Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spamd-Result: default: False [-3.57 / 15.00]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-0.90)[-0.899]; NEURAL_HAM_SHORT(-0.67)[-0.674]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4864::/56:c]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20251104]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; MIME_TRACE(0.00)[0:+]; ARC_NA(0.00)[]; FREEMAIL_ENVFROM(0.00)[gmail.com]; FREEMAIL_FROM(0.00)[gmail.com]; FROM_HAS_DN(0.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; TO_DN_NONE(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; PREVIOUSLY_DELIVERED(0.00)[questions@freebsd.org]; MID_RHS_MATCH_FROM(0.00)[]; MLMMJ_DEST(0.00)[questions@freebsd.org]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::72c:from] X-Rspamd-Queue-Id: 4g1w8J3N3yz3T86 X-Spamd-Bar: --- OS is: FreeBSD 13.5-RELEASE-P11 when letsencrypt (py311-certbot-4.2.0,1) runs, it complains: "/usr/local/lib/python3.11/site-packages/OpenSSL/_util.py:8: CryptographyDeprecationWarning: You are using OpenSSL < 3.0. Support for OpenSSL < 3.0 is deprecated and will be removed in the next release. Please upgrade to OpenSSL 3.0 or later. from cryptography.hazmat.bindings.openssl.binding import Binding" However, OpenSSL is already at >3.0: openssl-3.0.19,1 I suppose this is a python problem. A google search suggests using "pip install --no-binary :all: --force-reinstall cryptography pyopenssl" but I don't trust this, as I think the right answer uses FreeBSD pkg to update something -- but what? also already installed: py311-pyopenssl-25.3.0_1,1 To summarize: installed packages are: py311-certbot-4.2.0,1 py311-pyopenssl-25.3.0_1,1 openssl-3.0.19,1 and OS is FreeBSD 13.5-RELEASE-P11 (amd64) Thanks, Bill Dudley