Hello, all works fine, also the renewal of the certs, but every time the cronjob run to check the certs I get this error message: /etc/cron.daily/letscencrypt: /opt/letsencrypt/certbot-auto has insecure permissions! To learn how to fix them, visit Certbot-auto deployment best practices The co…

[image] istler: Did not solve my problem. And /opt/?

[image] istler: Who can give my a hint? What's the output of ls -ld /opt/letsencrypt/ ?

[image] istler: Requesting to rerun /opt/letsencrypt/certbot-auto with root privileges… It should overcome the lack of root privilege. But ideally you would run the job using sudo.

[image] rg305: It should overcome the lack of root privilege. That's just when he ran certbot for the --version information.....

[image] Osiris: That’s just when he ran certbot for the --version information… Yeah but that will happen every time certbot is run no - including within cron? I think I'm chasing a red herring...

[image] Osiris: ls -ld /opt/letsencrypt/ The output is: drwxrwxr-x 14 maik maik 4096 Nov 7 00:07 /opt/letsencrypt/ Greeting Maik

[image] rg305: Yeah but that will happen every time certbot is run no - including within cron ? Cron scripts from the /etc/cron.<timeinterval>/ will run as root. Also, the error you're focussing on wasn't in the first error presented by @istler and is probably totally not relevant for this th…

That is true, but $ ls -ld /opt/letsencrypt/ drwxr-xr-x 14 root root 4096 Nov 7 00:07 /opt/letsencrypt/ Did not solve my problem.

Please show: which certbot-auto

Okay, this fix the problem. ls -ld /opt/ drwxr-xrwx 5 root root 4096 Mär 11 2018 /opt/ maik@dagobert:~$ sudo chmod 755 /opt/ maik@dagobert:~$ /opt/letsencrypt/certbot-auto --version Requesting to rerun /opt/letsencrypt/certbot-auto with root privileges... certbot 0.40.1 But isn't that too …

[image] istler: But isn’t that too far-reaching? Better safe than sorry? Could a lower priv user override the chmod on the lower paths and get in anyway? [owner is owner]

Certbot-auto has insecure permissions!

Help

Topic		Replies	Views
Why my cert did not renew automatically even with certbot-auto renew Server	13	12163	November 16, 2017
Renewal fails as cron and as command line task Help	6	4660	September 29, 2016
Certbot-auto deployment best practices Help	0	74864	April 24, 2019
LetsEncrypt auto renew ---help Help	14	11274	February 28, 2018
We are getting file permission error for auto renewal Help	12	245	October 1, 2024

Certbot-auto has insecure permissions!

Related topics