# Certbot-auto, letsencrypt-auto has insecure permissions

**URL:** <https://community.letsencrypt.org/t/certbot-auto-letsencrypt-auto-has-insecure-permissions/93046>\
**Category:** Help\
**Created:** [May 8, 2019, 2:21am UTC](https://community.letsencrypt.org/t/certbot-auto-letsencrypt-auto-has-insecure-permissions/93046 "2019-05-08T02:21:39Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![msomero](https://avatars.discourse-cdn.com/v4/letter/m/eada6e/32.png) [@msomero](https://community.letsencrypt.org/u/msomero)\
**Post date:** [May 8, 2019, 2:21am UTC](https://community.letsencrypt.org/t/certbot-auto-letsencrypt-auto-has-insecure-permissions/93046/1 "2019-05-08T02:21:39Z")

</div>

My domain is:  
[ylamaa-tasoapp.fi](http://ylamaa-tasoapp.fi)

I ran this command:  
sudo letsencrypt-auto renew

It produced this output:

./letsencrypt-auto has insecure permissions!  
To learn how to fix them, visit [Certbot-auto deployment best practices](https://community.letsencrypt.org/t/certbot-auto-deployment-best-practices/91979/)  
Upgrading certbot-auto 0.34.1 to 0.34.2…  
Replacing certbot-auto…  
Creating virtual environment…  
Traceback (most recent call last):  
File “/usr/lib/python3/dist-packages/virtualenv.py”, line 2363, in   
main()  
File “/usr/lib/python3/dist-packages/virtualenv.py”, line 719, in main  
symlink=options.symlink)  
File “/usr/lib/python3/dist-packages/virtualenv.py”, line 988, in create\_environment  
download=download,  
File “/usr/lib/python3/dist-packages/virtualenv.py”, line 918, in install\_wheel  
call\_subprocess(cmd, show\_stdout=False, extra\_env=env, stdin=SCRIPT)  
File “/usr/lib/python3/dist-packages/virtualenv.py”, line 812, in call\_subprocess  
% (cmd\_desc, proc.returncode))  
OSError: Command /opt/eff.org/certbot/venv/bin/python2.7 - setuptools pkg\_resources pip wheel failed with error code 1  
Traceback (most recent call last):  
File “”, line 27, in   
File “”, line 19, in create\_venv  
File “/usr/lib/python2.7/subprocess.py”, line 541, in check\_call  
raise CalledProcessError(retcode, cmd)  
subprocess.CalledProcessError: Command ‘[‘virtualenv’, ‘–no-site-packages’, ‘–python’, ‘/usr/bin/python2.7’, ‘/opt/eff.org/certbot/venv’]’ returned non-zero exit status 1

My web server is (include version):

The operating system my web server runs on is (include version):  
Ububtu LTS 16.04

I can login to a root shell on my machine (yes or no, or I don’t know):  
sudo works

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):  
no

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you’re using Certbot):  
assume 0.34.1, if you try to run certbot-auto you will get the error message

Additiional info:  
It is a spring boot aplication so I think it is a standalone setup (?). I have not originally set up the application just been updating certificates, until now ut has been working just fine but this time it gives the error, any help would be highly appreciated 🙂

Cheers,  
Mika

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [May 8, 2019, 5:23am UTC](https://community.letsencrypt.org/t/certbot-auto-letsencrypt-auto-has-insecure-permissions/93046/2 "2019-05-08T05:23:31Z")

</div>

Have you read the link presented in the error message itself? [Certbot-auto deployment best practices](https://community.letsencrypt.org/t/certbot-auto-deployment-best-practices/91979)

If so, what did you try from those best practices?

---

<div class="post-metadata">

**Author:** ![\_az](https://avatars.discourse-cdn.com/v4/letter/_/22d042/32.png) [@\_az](https://community.letsencrypt.org/u/_az)\
**Post date:** [May 8, 2019, 5:26am UTC](https://community.letsencrypt.org/t/certbot-auto-letsencrypt-auto-has-insecure-permissions/93046/3 "2019-05-08T05:26:47Z")

</div>

I think the insecure permissions is a red herring, the true error is the virtualenv failure.

Unfortunately I don’t know a good way to diagnose it without modifying the script itself to print the stderr of virtualenv (it instead just swallows it).

You could try wipe out `/opt/eff.org/certbot`, I guess.

---

<div class="post-metadata">

**Author:** ![msomero](https://avatars.discourse-cdn.com/v4/letter/m/eada6e/32.png) [@msomero](https://community.letsencrypt.org/u/msomero)\
**Post date:** [May 8, 2019, 5:52am UTC](https://community.letsencrypt.org/t/certbot-auto-letsencrypt-auto-has-insecure-permissions/93046/4 "2019-05-08T05:52:14Z")

</div>

thanks for the response.

As I said I have not set this up, jus been updating certs. As of this time it has been working without any problems …

---

<div class="post-metadata">

**Author:** ![msomero](https://avatars.discourse-cdn.com/v4/letter/m/eada6e/32.png) [@msomero](https://community.letsencrypt.org/u/msomero)\
**Post date:** [May 8, 2019, 5:54am UTC](https://community.letsencrypt.org/t/certbot-auto-letsencrypt-auto-has-insecure-permissions/93046/5 "2019-05-08T05:54:22Z")

</div>

Hi,

I found this post -\> [https://medium.com/@jayn0rm/update-letsencrypt-with-certbot-e86736349d2e](https://medium.com/@jayn0rm/update-letsencrypt-with-certbot-e86736349d2e)

Anyhow, thank you for the suggestion, it might be good path to follow, the instance is running on azure cloud

---

<div class="post-metadata">

**Author:** ![msomero](https://avatars.discourse-cdn.com/v4/letter/m/eada6e/32.png) [@msomero](https://community.letsencrypt.org/u/msomero)\
**Post date:** [May 8, 2019, 2:20pm UTC](https://community.letsencrypt.org/t/certbot-auto-letsencrypt-auto-has-insecure-permissions/93046/6 "2019-05-08T14:20:07Z")

</div>

Hi,

You were right, locales were not set and that caused the error.  
export LC\_ALL=“en\_US.UTF-8”  
export LC\_CTYPE=“en\_US.UTF-8”

after that it went through.

Side note, I had to modify the config file a bit since it had some settings that were outdated.  
but after that it worked 🙂

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [June 7, 2019, 2:20pm UTC](https://community.letsencrypt.org/t/certbot-auto-letsencrypt-auto-has-insecure-permissions/93046/7 "2019-06-07T14:20:08Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
