From: "Steven Levine" <ecs-isp@2rosenthals.com>
Received: from [192.168.100.201] (HELO mail.2rosenthals.com)
  by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10)
  with ESMTP id 11070591 for ecs-isp@2rosenthals.com; Mon, 07 Oct 2024 14:55:30 -0400
Received: from secmgr-va.randr ([192.168.200.201]:38851 helo=mail2.2rosenthals.com)
	by mail.2rosenthals.com with esmtp (Exim 4.97.1)
	(envelope-from <steve53@earthlink.net>)
	id 1sxst6-000000006RG-1Qlt
	for ecs-isp@2rosenthals.com;
	Mon, 07 Oct 2024 14:55:20 -0400
Received: from mta-202b.earthlink-vadesecure.net ([51.81.232.241]:51349 helo=mta-202a.earthlink-vadesecure.net)
	by mail2.2rosenthals.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.97.1)
	(envelope-from <steve53@earthlink.net>)
	id 1sxssw-000000001IO-0rw8
	for ecs-isp@2rosenthals.com;
	Mon, 07 Oct 2024 14:55:10 -0400
DKIM-Signature: v=1; a=rsa-sha256; bh=kpQPoTba3PayhFWbLSnhfcrYd55c7IVXZfZWWo
 phEwI=; c=relaxed/relaxed; d=earthlink.net; h=from:reply-to:subject:
 date:to:cc:resent-date:resent-from:resent-to:resent-cc:in-reply-to:
 references:list-id:list-help:list-unsubscribe:list-unsubscribe-post:
 list-subscribe:list-post:list-owner:list-archive; q=dns/txt;
 s=dk12062016; t=1728327309; x=1728932109; b=qTQLhPN5BY/K8rRzxwabx1Df6Ye
 vc74RTiUZSmvdeGe89+NwA0YphBxlrk1lwlUda9naBiL10QBTJlIGS1lR4DUqOvG6k9kNxV
 XHu7jzT1XWRWPb342JZea4lDTfl3R8eJdQ2z60zbZUTrhUVtBYIGQKDVSwNYFOnI67bs4IV
 qp1nWmr8mXjKz48r7ZyHUEJR2Ytn+zoRMNfkZZl0FPs3hrikHc4b911jqLFHtuz3vbmxC3B
 nt3JaT2/6o93lSnijWsLIJJWpiZkt42G6vsZqc0j+1M4TVpbZqzFvLrVPaiwLKFd0lt1PGQ
 E4H/l9q5waVvYWsaM/0dHSNHyJ8Zyhg==
Received: from slamain ([172.58.119.108])
 by vsel2nmtao02p.internal.vadesecure.com with ngmta
 id 0b8b5724-17fc4087d14b72aa; Mon, 07 Oct 2024 18:55:09 +0000
Message-ID: <67043bc8.18.mr2ice.fgrirsq@earthlink.net>
Date: Mon, 07 Oct 2024 11:51:36 -0800
To: "eCS ISP Mailing List" <ecs-isp@2rosenthals.com>
In-Reply-To: <list-11070025@2rosenthals.com>
Subject: Re: [eCS-ISP] HTTPS-Misery
X-Mailer: MR/2 Internet Cruiser Edition for OS/2 v3.00.11.24/60 

In <list-11070025@2rosenthals.com>, on 10/07/24
   at 11:53 AM, "Massimo S." <ecs-isp@2rosenthals.com> said:

Hi Massimo,

>i'm facing a strange issue these days with LE.
>If you are interested follow this topic:
>https://community.letsencrypt.org/t/renew-of-certificates-fails-randomly-in-the-last-month/227025

Not really.  This is LE working as it always has, although with one minor
change to behavior.  It now cycle through the verification methods in
random order, which can break naive hook scripts.

As was explained to you in the thread and as documented by LE, you need to
detect the request method and fail the request methods you don't support.

Steven

-- 
----------------------------------------------------------------------
"Steven Levine" <steve53@earthlink.net>  Warp/DIY/BlueLion etc.
www.scoug.com www.arcanoae.com www.warpcave.com
----------------------------------------------------------------------