CertBot doesn’t work with CentOS 6: Could not install OS dependencies. Aborting bootstrap!

i worte this lines:
wget https://dl.eff.org/certbot-auto
chmod a+x certbot-auto
./certbot-auto --apache --email email@gmail.com -d email.com -d www.email.com --agree-tos

i want to do multiple certificates to couple of domain , but i start to try one and i get this error:

Error: Package: glibc-headers-2.12-1.209.el6_9.1.x86_64 (updates)
Requires: kernel-headers
Error: Package: glibc-headers-2.12-1.209.el6_9.1.x86_64 (updates)
Requires: kernel-headers >= 2.2.1
You could try using --skip-broken to work around the problem
You could try running: rpm -Va --nofiles --nodigest
Could not install OS dependencies. Aborting bootstrap!

what i need to do ?

Hi @ofir,

Seems you have some broken packages in your system and fixing this situation could not be trivial. Certbot needs a lot of dependencies so my advice is to use any other client instead of certbot. I recommend to you the acme.sh client, it is a bash client with almost no dependencies (curl or wget and openssl) so take a look to this client GitHub - acmesh-official/acme.sh: A pure Unix shell script implementing ACME client protocol

Good luck,
sahsanu

We fixed it.

But how can I add another domain with HTTPS with different certificate on the same server?
As I know, I have 443 port for one of the domains and to run another domain with different domain it will crash the SOCKET LISTENER.

You can add it using the same command you used but specifying the new domain with -d parameter.

I don’t know what are you doing but since a few years ago, web servers are able to use SNI so you can have multiple virtualhost using different domains and certificates using the same ip and port.

Could you please explain what are you trying to do, how and the errors you are getting?.

i dont get any error more , and i can add domain but i want to add every domain to every certificates ( for example : 4 domain to 4 different certificates).
now i can to add multiple domain to 1 certificates, or 1 domain to 1 certificates.

Hi @ofir, you might want to look at certbot-auto certificates and the --cert-name parameter. If you specify the name of an existing certificate, Certbot will try to modify that certificate’s lineage by replacing it with a newly obtained certificate which applies to all of the domains you specify with -d.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.