TLS-SNI-01 challenge not working

[Francesco Mattu]

Since January, this package doesn't work as in the past
In case of a new generation of a SSL certificate for a new domain:

sudo letsencrypt --apache -d newdomain.com -d www.newdomain.com

it fails because the preferred-challenges to obtain a new SSL are changed (TLS-SNI-01 is not available anymore for security reasons:
https://community.letsencrypt.org/t/renew-multiple-certs-fails-but-dry-run-works/53312/2
), and an error message upon a request is thrown:

"Client does not support any combination of challenges that will satisfy the CA".

This error is similar to the one described here for certbot:
https://community.letsencrypt.org/t/solution-client-with-the-currently-selected-authenticator-does-not-support-any-combination-of-challenges-that-will-satisfy-the-ca/49983?source_topic_id=51300

Is there any chance to have soon available the updated package for letsencrypt or certbot upon update/upgrade on repos, which will allow to run smoothly a new request without reconfiguring everything on the server? When will it be available approx.?

Checking the repo, it seems that we are still behind on the stable Ubuntu version:
https://packages.ubuntu.com/search?suite=default&section=all&arch=any&keywords=letsencrypt&searchon=names

[Emily Ratliff (emilyr)]

Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is available, members of the security team will review it and publish the package. See the following link for more information: https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures

[Launchpad Janitor (janitor)]

[Expired for python-letsencrypt-apache (Ubuntu) because there has been no activity for 60 days.]