letsencrypt renewal failure "sslv3 alert bad record mac"

[Doug McIntyre]

On Wed, Mar 11, 2020 at 08:22:38PM -0600, Gary Aitken wrote:
> On 3/11/20 4:55 PM, Yasuhiro KIMURA wrote:
> > From: Gary Aitken <freebsd at dreamchaser.org>
> > Subject: letsencrypt renewal failure "sslv3 alert bad record mac"
> > Date: Wed, 11 Mar 2020 14:11:59 -0600
> > 
> >> Previous renewals worked ok, but may have been under 10.3
> >>
> >> 11.2-RELEASE-p9 FreeBSD 11.2-RELEASE-p9
> >>
> >> I know I need to upgrade to 11.3 but this seems not related to that.
> >> Any help / pointers would be much appreciated.
> > 
> > Are there any reason that you use non-default version of python?
> > I wonder if current version of certbot still support python 2.7.
> 
> py27-certbot-0.31.0,1 is the pkg installed; it installed python 2.7.
> 
> I see python2 is EOL 2020-01-01.
> I will try upgrading the os and installed packages.


There should also be a py37-certbot pkg.