UPDATE: I finally made a manual cert using webroot validation plugin. Apache plugin keeps freezing at that point.
I’m having a strange issue when running certbot-auto to create my certificates.
OS: CentOS release 6.8 (Final)
Webserver: Apache/2.2.15 (Unix)
Provider: Rackspace Cloud Server
Root access
No web panel
Command:
[root@xxx]# certbot-auto --apache -w /www/negociometro.com/www/ -d www.negociometro.uy
Output:
Bootstrapping dependencies for RedHat-based OSes...
yum is /usr/bin/yum
Loaded plugins: fastestmirror
Setting up Install Process
Loading mirror speeds from cached hostfile
* remi-safe: repo1.dal.innoscale.net
* rpmforge: mirror.team-cymru.org
* webtatic: us-east.repo.webtatic.com
Package gcc-4.4.7-17.el6.x86_64 already installed and latest version
Package augeas-libs-1.0.0-10.el6.x86_64 already installed and latest version
Package openssl-1.0.1e-48.el6_8.3.x86_64 already installed and latest version
Package openssl-devel-1.0.1e-48.el6_8.3.x86_64 already installed and latest version
Package libffi-devel-3.0.5-3.2.el6.x86_64 already installed and latest version
Package redhat-rpm-config-9.0.3-51.el6.centos.noarch already installed and latest version
Package ca-certificates-2015.2.6-65.0.1.el6_7.noarch already installed and latest version
Package python-2.6.6-66.el6_8.x86_64 already installed and latest version
Package python-devel-2.6.6-66.el6_8.x86_64 already installed and latest version
Package python-virtualenv-1.10.1-1.el6.noarch already installed and latest version
Package python-tools-2.6.6-66.el6_8.x86_64 already installed and latest version
Package python-pip-7.1.0-1.el6.noarch already installed and latest version
Package 1:mod_ssl-2.2.15-56.el6.centos.3.x86_64 already installed and latest version
Nothing to do
Creating virtual environment...
Installing Python packages...
DEPRECATION: Python 2.6 is no longer supported by the Python core team, please upgrade your Python. A future version of pip will drop support for Python 2.6
Installation succeeded.
/root/.local/share/letsencrypt/lib/python2.6/site-packages/cryptography/__init__.py:26: DeprecationWarning: Python 2.6 is no longer supported by the Python core team, please upgrade your Python. A future version of cryptography will drop support for Python 2.6
DeprecationWarning
Saving debug log to /var/log/letsencrypt/letsencrypt.log
RIGHT THERE THE PROCESS “FREEZES”. I’ve been waiting for an hour now.
Logfile:
2017-02-01 15:07:50,265:DEBUG:certbot.main:Root logging level set at 20
2017-02-01 15:07:50,265:INFO:certbot.main:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2017-02-01 15:07:50,266:DEBUG:certbot.main:certbot version: 0.10.2
2017-02-01 15:07:50,266:DEBUG:certbot.main:Arguments: ['--apache', '-w', '/www/negociometro.com/www/', '-d', 'www.negociometro.uy']
2017-02-01 15:07:50,266:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#nginx,PluginEntryPoint#standalone,PluginEntryPoint#manual,PluginEntryPoint#webroot,PluginEntryPoint#apache,PluginEntryPoint#null)
2017-02-01 15:07:50,266:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache
Running “ps axuw |grep certbot”, i found this:
root 6037 0.0 0.0 106340 4 pts/0 S+ 12:05 0:00 /bin/sh /usr/local/bin/certbot-auto --apache -w /www/negociometro.com/www/ -d www.negociometro.uy
root 6068 0.0 0.0 106336 4 pts/0 S+ 12:06 0:00 /bin/sh /usr/local/bin/certbot-auto --le-auto-phase2 --apache -w /www/negociometro.com/www/ -d www.negociometro.uy
Some minutes ago, there where 2 (two) processes like the second one with “–le-auto-phase2” running at the same time for several minutes.
Some other hints:
- I’ve made a copy of the production server before doing this, and made it work with a test subdomain of other domain. So I’m a bit confused because I repeated exactly the steps I made before.
- Before certbot-auto got killed by the kernel for memory usage: the server has 2 GB. I had to install a 4GB swap to avoid this issue.
I’m clueless… Hope someone can help 