On Fri, Feb 10, 2017 at 10:40:43PM +0100, David Sommerseth wrote:
> 
> So if you put your system into permissive mode (setenforce 0), run the
> certbot stuff via cron ... and grep out the denied lines, and I'll help.
>
>  That is my offer.
> 

I appreciate your offer and I say "thank you". But the reality is I do
not have the time to work on this problem.

>
> "the direction of el7 Linux" isn't even closely to be managed by this mailing list.
>

Then how is it managed? From a spherical board room at Red Hat in vacuum?
Surely user input comes in somewhere, even if indirectly from
the SL-users mailing list via FermiLab.

Perhaps it is this lack of management that causes the present problem -
where to have a web server one must do https, to do https one must have
properly signed certificate, to have such certificate one must use the "letsencrypt" service,
which malfunctions in the default configuration of RHEL/SL/CentOS7.

(if there is another certificate service where I can roll out new certificates
from a script and have them refresh automatically, I am all ears).

>
> But I could also twist
> your argument: If you're not willing to accept that the world is moving
> on and you need to learn things, perhaps you should start doing
> something else instead?
> 

My signature says "data acquisition", not "sysadmin". My field has been static
for the last 100 years, no need to learn anything new ever. Not.

>
> But by all means, if you only came here to rant ...
>

That's for sure. Not too many happy people writing "SL works great for me" on this mailing list.

-- 
Konstantin Olchanski
Data Acquisition Systems: The Bytes Must Flow!
Email: olchansk-at-triumf-dot-ca
Snail mail: 4004 Wesbrook Mall, TRIUMF, Vancouver, B.C., V6T 2A3, Canada