Certbot 10 and Debain 8

Is certbot 10 the latest version on debian 8?
Since I do not get a new version of certbot installed

Hi @sebseb

looks so.

There

https://certbot.eff.org/lets-encrypt/debianjessie-apache

is a switch to certbot-auto:

    wget https://dl.eff.org/certbot-auto
    sudo mv certbot-auto /usr/local/bin/certbot-auto
    sudo chown root /usr/local/bin/certbot-auto
    sudo chmod 0755 /usr/local/bin/certbot-auto

If you use http-01 validation, you can use it.

Hey @JuergenAuer
Thank you for the quick response.
What exactly do you mean by “use http-01 validation”?
At which point should I use this?

That's one validation method.

Please read

Then answer the following questions:

--

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

Further to this, the documentation that @JuergenAuer linked to says

We previously recommended that Debian 8 (jessie) users install Certbot from the packaged version. Because of important updates in the Certbot code, we are now recommending that Debian 8 users switch to the certbot-auto method, described below.

In this case, you'll get the latest release of Certbot installed automatically, and you can simply use certbot-auto in place of certbot in any command line.

@schoen
the certbot-auto is not working properly.
At least I still have the same version.
The output is attached


The following packages were automatically installed and are no longer required:
libperl4-corelibs-perl libzip4 libzip5 lsof
Use ‘apt-get autoremove’ to remove them.
The following extra packages will be installed:
binutils cpp cpp-4.9 gcc-4.9 gcc-4.9-base libasan1 libatomic1 libc-dev-bin
libc6-dev libcilkrts5 libcloog-isl4 libexpat1 libexpat1-dev libgcc-4.9-dev
libgcc1 libgfortran3 libgomp1 libisl10 libitm1 liblsan0 libmpc3 libmpfr4
libpython-dev libpython2.7 libpython2.7-dev libpython2.7-minimal
libpython2.7-stdlib libquadmath0 libstdc++6 libtsan0 libubsan0
linux-libc-dev python-chardet-whl python-colorama-whl python-distlib-whl
python-html5lib-whl python-pip-whl python-requests-whl python-setuptools-whl
python-six-whl python-urllib3-whl python2.7 python2.7-dev python2.7-minimal
python3-pkg-resources python3-virtualenv zlib1g-dev
Suggested packages:
binutils-doc cpp-doc gcc-4.9-locales gcc-multilib make manpages-dev autoconf
automake libtool flex bison gdb gcc-doc gcc-4.9-multilib gcc-4.9-doc
libgcc1-dbg libgomp1-dbg libitm1-dbg libatomic1-dbg libasan1-dbg
liblsan0-dbg libtsan0-dbg libubsan0-dbg libcilkrts5-dbg libquadmath0-dbg
glibc-doc python2.7-doc binfmt-support python3-setuptools
Recommended packages:
libssl-doc
The following NEW packages will be installed:
binutils cpp cpp-4.9 gcc gcc-4.9 libasan1 libatomic1 libc-dev-bin libc6-dev
libcilkrts5 libcloog-isl4 libexpat1-dev libffi-dev libgcc-4.9-dev libgomp1
libisl10 libitm1 liblsan0 libmpc3 libmpfr4 libpython-dev libpython2.7-dev
libssl-dev libtsan0 libubsan0 linux-libc-dev python-chardet-whl
python-colorama-whl python-dev python-distlib-whl python-html5lib-whl
python-pip-whl python-requests-whl python-setuptools-whl python-six-whl
python-urllib3-whl python-virtualenv python2.7-dev python3-pkg-resources
python3-virtualenv virtualenv zlib1g-dev
The following packages will be upgraded:
ca-certificates gcc-4.9-base libexpat1 libgcc1 libgfortran3 libpython2.7
libpython2.7-minimal libpython2.7-stdlib libquadmath0 libstdc++6 python2.7
python2.7-minimal
12 upgraded, 42 newly installed, 0 to remove and 117 not upgraded.
Need to get 1,552 kB/49.6 MB of archives.
After this operation, 129 MB of additional disk space will be used.
Do you want to continue? [Y/n] y
Get:1 https://packages.sury.org/php/ jessie/main libssl-dev amd64 1.0.2l-1+0~201 71112082041.3+jessie~1.gbp75a296 [1,552 kB]
Err https://packages.sury.org/php/ jessie/main libssl-dev amd64 1.0.2l-1+0~20171 112082041.3+jessie~1.gbp75a296
HttpError404
N: Ignoring file ‘debian-stretch-backports.lis’ in directory ‘/etc/apt/sources.l ist.d/’ as it has an invalid filename extension
N: Ignoring file ‘debian-stretch-backports.lis’ in directory ‘/etc/apt/sources.l ist.d/’ as it has an invalid filename extension
E: Failed to fetch https://packages.sury.org/php/pool/main/o/openssl/libssl-dev_ 1.0.2l-1+0~20171112082041.3+jessie~1.gbp75a296_amd64.deb HttpError404

E: Unable to fetch some archives, maybe run apt-get update or try with --fix-mis

You are not using the official Debian repositories. Apt is giving you messages that your setup is invalid, correct that first.
The repository you are trying to use is reporting a 404 error, so the file you want to retrieve does not exist (there), contact the packager.

1 Like

Report the issue on the tracker for this repository: https://github.com/oerdnj/deb.sury.org/issues

Why do 129 packages need to be upgraded?

FWIW, that repository has some much newer libssl-dev (1.1.1b) packages.

Have apt-get update and apt-get upgrade been run recently?

I got it now.
all packages have been updated.

If I now make a “certbot-auto” I get this error:

“No virtual host could be found monitoring port 80. This is currently required for Certbot to prove to the CA that you control your domain, please add a virtual host for port 80.”

Is this the right command to upgrade the version of certbot? I just want a new version of Certbot no new certificates.

Then use

certbot-auto --version

certbot-auto starts a new order and tries to collect missing informations.

1 Like

yes but with “certbot-auto --version” I do not install a new version of certbot

You do. If you don't use --no-self-upgrade.

https://certbot.eff.org/docs/using.html

 --no-self-upgrade     (certbot-auto only) prevent the certbot-auto script
                        from upgrading itself to newer released versions
                        (default: Upgrade automatically)

Certbot-auto checks, if there is an update, if you run it.

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.