Certbot Upgrade Not Working


#11

This is a good idea, I mentioned it to the Certbot devs. I don’t think comparing apt update to apt upgrade is really the right thing - update fetches a newer list of available packages, while upgrade actually installs the newer packages. I think the underlying issue is this:

  sudo apt-get install python-certbot-apache 

If you already have python-certbot-apache installed, that command will upgrade python-certbot-apache, but it won’t upgrade python-certbot. I think adding python-certbot to the list probably makes sense so that the instructions keep people up to date even if they’ve already got the software installed.


#12

I think there’s an additional factor – when python-certbot-apache got replaced with a transitional dummy package for python3-certbot-apache, it stopped having a dependency on a specific version of any other packages, so I think (re)installing it makes apt less prone to upgrading anything else.


#13

Doh! [that was my mistake]

I meant to compare:
apt upgrade
with
apt-get upgrade

One seems to work “better/differently” than the other (at times).


#14

Interesting. I’m fairly confident that apt upgrade does exactly the same thing as apt-get upgrade. If you have documentation otherwise I would be interested to read it.


#15

Two people in this thread have said the results differ:



#16

Good point!

@gmarzloff, can you confirm whether the command that was not working for you was sudo apt-get upgrade? Could it have been sudo apt-get update?

@rg305: According to https://itsfoss.com/apt-vs-apt-get-difference/, both apt upgrade and apt-get upgrade have the functionality “Upgrades all upgradable packages.” If you’re suggesting that one behaves differently, that’s a pretty significant claim – I’d want to dig deeper before making that claim.


#17

All things being equal, things would be equal…
So maybe they aren’t equal.
Hard to setup a test for this though.


#18

@jsha I followed the instructions here hoping to upgrade from 0.23 to 0.28.

$ sudo apt-get update
$ sudo apt-get install software-properties-common
$ sudo add-apt-repository universe
$ sudo add-apt-repository ppa:certbot/certbot
$ sudo apt-get update
$ sudo apt-get install certbot python-certbot-apache 

apt-get update didn’t work. I’m over 75% certain I tried apt-get upgrade which didn’t work either. When I ran apt upgrade, certbot --version showed 0.28. I wish I could be more precise on the method but I was trying a lot of different commands trying to find a solution.


#19

No problem, I appreciate you adding the extra detail! FYI, apt-get update and apt update never install new software, they just download new lists of software. So I’m not surprised that update didn’t fix the issue. Both apt-get upgrade and apt upgrade should have fixed the issue; we’ll keep an eye out for similar reports, in case there really is an issue with one of the upgrade variants.

Also it’s worth noting that we’ve already updated https://certbot.eff.org/lets-encrypt/ubuntubionic-apache based on the feedback in this thread. Specifically where it used to say:

  $ sudo apt-get install python-certbot-apache 

Now it says:

  $ sudo apt-get install certbot python-certbot-apache

Which should be more correct. Thanks for your feedback, hopefully you’ve made things a bit easier for everyone else!


About CertBot upgrade
#20

This worked for me too!

sudo apt upgrade
certbot 0.28.0

Thanks all for the help; I’m all set at this point.


#21

Hi! I have the same issue, please help.

I am running Ubuntu 17.10 on a Digital Ocean droplet and have been trying to upgrade certbot from 0.22.2-1+ubuntu17.10.1+certbot+1 in order to deal with the TLS-SNI-01 validation end of life issue.

I have run every command I can find to update and upgrade certbot, and as near as I can tell they have all run successfully. Despite these efforts, however, every time I run certbot --version, the return says I’m still using certbot 0.22.2

All help is greatly appreciated!


#22

Hey @quack ! Your issue stems from the fact that Ubuntu 17.10 reached its end of life on 19th of July 2018. No updates (including security updates) have been provided for your version since. You are strongly urged to upgrade!

If you wish to run a version of Ubuntu for longer time before the need to upgrade to a newer major version, I suggest you upgrade to an LTS (Long Term Support) version. The differences in the time a specific version is supported can be seen at https://en.wikipedia.org/wiki/Ubuntu_version_history#Version_timeline to give you a clear picture about the differences.


#23

Thank you, it makes sense.


#24

I am also having trouble upgrading certbot on Ubuntu 18.04. I have tried both apt and apt-get, but no luck. But I see that the current version of certbot for Ubuntu 18.04 is 0.23, which is far behind the current version:

https://packages.ubuntu.com/bionic/certbot

Am I missing something here?


#25

Have you enabled the Certbot PPA and run “sudo apt update”? The PPA has version 0.28.0. Ubuntu’s own repositories only have 0.23.0, as you saw.


#26

Got it, I somehow missed that when setting up. Works now, thanks!


#27

Got --dry-run tested OK?


#28

Yup, dry run passes with no problems.


#29

When I run sudo apt-get update, I get connection failed errors to the PPA server. Thus, when I try to upgrade, apt still tells me that I’m on the latest version, which it thinks is 0.26.

On 14.04 LTS:

Ign http://us.archive.ubuntu.com trusty InRelease
Hit http://us.archive.ubuntu.com trusty-updates InRelease                      
Hit http://us.archive.ubuntu.com trusty-backports InRelease                    
Hit http://us.archive.ubuntu.com trusty Release.gpg                            
Hit http://us.archive.ubuntu.com trusty Release                                
Hit http://security.ubuntu.com trusty-security InRelease                       
Ign http://ppa.launchpad.net trusty InRelease                                  
Hit http://us.archive.ubuntu.com trusty-updates/main Sources                   
Hit http://us.archive.ubuntu.com trusty-updates/restricted Sources             
Hit http://us.archive.ubuntu.com trusty-updates/universe Sources               
Hit http://us.archive.ubuntu.com trusty-updates/multiverse Sources             
Hit http://us.archive.ubuntu.com trusty-updates/main amd64 Packages            
Hit http://us.archive.ubuntu.com trusty-updates/restricted amd64 Packages      
Hit http://security.ubuntu.com trusty-security/main Sources                    
Hit http://us.archive.ubuntu.com trusty-updates/universe amd64 Packages        
Err http://ppa.launchpad.net trusty Release.gpg                                
  Connection failed
Hit http://us.archive.ubuntu.com trusty-updates/multiverse amd64 Packages      
Hit http://us.archive.ubuntu.com trusty-updates/main i386 Packages             
Hit http://security.ubuntu.com trusty-security/restricted Sources              
Hit http://us.archive.ubuntu.com trusty-updates/restricted i386 Packages       
Hit http://us.archive.ubuntu.com trusty-updates/universe i386 Packages         
Hit http://us.archive.ubuntu.com trusty-updates/multiverse i386 Packages       
Hit http://us.archive.ubuntu.com trusty-updates/main Translation-en            
Hit http://security.ubuntu.com trusty-security/universe Sources                
Hit http://us.archive.ubuntu.com trusty-updates/multiverse Translation-en      
Ign http://ppa.launchpad.net trusty Release                                    
Hit http://us.archive.ubuntu.com trusty-updates/restricted Translation-en      
Hit http://us.archive.ubuntu.com trusty-updates/universe Translation-en        
Hit http://security.ubuntu.com trusty-security/multiverse Sources              
Hit http://us.archive.ubuntu.com trusty-backports/main Sources                 
Hit http://us.archive.ubuntu.com trusty-backports/restricted Sources           
Hit http://us.archive.ubuntu.com trusty-backports/universe Sources             
Hit http://us.archive.ubuntu.com trusty-backports/multiverse Sources           
Hit http://security.ubuntu.com trusty-security/main amd64 Packages             
Hit http://us.archive.ubuntu.com trusty-backports/main amd64 Packages          
Ign http://ppa.launchpad.net trusty/main amd64 Packages/DiffIndex              
Hit http://us.archive.ubuntu.com trusty-backports/restricted amd64 Packages    
Hit http://us.archive.ubuntu.com trusty-backports/universe amd64 Packages      
Hit http://security.ubuntu.com trusty-security/restricted amd64 Packages       
Hit http://us.archive.ubuntu.com trusty-backports/multiverse amd64 Packages    
Hit http://us.archive.ubuntu.com trusty-backports/main i386 Packages           
Hit http://us.archive.ubuntu.com trusty-backports/restricted i386 Packages     
Hit http://us.archive.ubuntu.com trusty-backports/universe i386 Packages       
Hit http://security.ubuntu.com trusty-security/universe amd64 Packages         
Hit http://us.archive.ubuntu.com trusty-backports/multiverse i386 Packages     
Ign http://ppa.launchpad.net trusty/main i386 Packages/DiffIndex               
Hit http://us.archive.ubuntu.com trusty-backports/main Translation-en          
Hit http://us.archive.ubuntu.com trusty-backports/multiverse Translation-en    
Hit http://security.ubuntu.com trusty-security/multiverse amd64 Packages       
Hit http://us.archive.ubuntu.com trusty-backports/restricted Translation-en    
Hit http://security.ubuntu.com trusty-security/main i386 Packages              
Hit http://us.archive.ubuntu.com trusty-backports/universe Translation-en      
Hit http://us.archive.ubuntu.com trusty/main Sources                           
Hit http://us.archive.ubuntu.com trusty/restricted Sources                     
Hit http://us.archive.ubuntu.com trusty/universe Sources                       
Hit http://security.ubuntu.com trusty-security/restricted i386 Packages        
Hit http://us.archive.ubuntu.com trusty/multiverse Sources                     
Hit http://us.archive.ubuntu.com trusty/main amd64 Packages                    
Hit http://us.archive.ubuntu.com trusty/restricted amd64 Packages              
Hit http://security.ubuntu.com trusty-security/universe i386 Packages          
Hit http://us.archive.ubuntu.com trusty/universe amd64 Packages                
Hit http://us.archive.ubuntu.com trusty/multiverse amd64 Packages              
Hit http://us.archive.ubuntu.com trusty/main i386 Packages                     
Hit http://us.archive.ubuntu.com trusty/restricted i386 Packages               
Hit http://security.ubuntu.com trusty-security/multiverse i386 Packages        
Hit http://us.archive.ubuntu.com trusty/universe i386 Packages                 
Hit http://us.archive.ubuntu.com trusty/multiverse i386 Packages               
Hit http://us.archive.ubuntu.com trusty/main Translation-en                    
Hit http://security.ubuntu.com trusty-security/main Translation-en             
Hit http://us.archive.ubuntu.com trusty/multiverse Translation-en              
Hit http://security.ubuntu.com trusty-security/multiverse Translation-en       
Hit http://us.archive.ubuntu.com trusty/restricted Translation-en              
Hit http://security.ubuntu.com trusty-security/restricted Translation-en       
Hit http://us.archive.ubuntu.com trusty/universe Translation-en                
Hit http://security.ubuntu.com trusty-security/universe Translation-en         
Ign http://us.archive.ubuntu.com trusty/main Translation-en_US                 
Ign http://us.archive.ubuntu.com trusty/multiverse Translation-en_US           
Ign http://us.archive.ubuntu.com trusty/restricted Translation-en_US   
Ign http://us.archive.ubuntu.com trusty/universe Translation-en_US     
Err http://ppa.launchpad.net trusty/main Translation-en_US               
  Connection failed
Err http://ppa.launchpad.net trusty/main Translation-en                 
  Connection failed
Err http://ppa.launchpad.net trusty/main amd64 Packages                 
  Connection failed
Err http://ppa.launchpad.net trusty/main i386 Packages                  
  Connection failed
W: Failed to fetch http://ppa.launchpad.net/certbot/certbot/ubuntu/dists/trusty/Release.gpg  Connection failed

W: Failed to fetch http://ppa.launchpad.net/certbot/certbot/ubuntu/dists/trusty/main/i18n/Translation-en_US  Connection failed

W: Failed to fetch http://ppa.launchpad.net/certbot/certbot/ubuntu/dists/trusty/main/i18n/Translation-en  Connection failed

W: Failed to fetch http://ppa.launchpad.net/certbot/certbot/ubuntu/dists/trusty/main/binary-amd64/Packages  Connection failed

W: Failed to fetch http://ppa.launchpad.net/certbot/certbot/ubuntu/dists/trusty/main/binary-i386/Packages  Connection failed

E: Some index files failed to download. They have been ignored, or old ones used instead.

On 16.04 LTS:

Hit:3 http://us.archive.ubuntu.com/ubuntu xenial InRelease                                                                                                  
Get:4 http://us.archive.ubuntu.com/ubuntu xenial-updates InRelease [109 kB]                                                                        
Get:6 http://security.ubuntu.com/ubuntu xenial-security InRelease [109 kB]                                                                         
Ign:7 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial InRelease                                                             
Get:8 http://us.archive.ubuntu.com/ubuntu xenial-backports InRelease [107 kB]                                                      
Ign:9 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial Release                                                                           
Hit:10 https://apt.dockerproject.org/repo ubuntu-xenial InRelease                                             
Ign:11 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main amd64 Packages.diff/Index                    
Ign:12 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main i386 Packages.diff/Index
Ign:13 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main all Packages
Ign:14 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main Translation-en_US
Ign:15 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main Translation-en.diff/Index
Ign:16 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main amd64 Packages
Ign:17 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main i386 Packages
Ign:13 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main all Packages
Ign:14 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main Translation-en_US
Ign:18 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main Translation-en
Ign:16 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main amd64 Packages
Ign:17 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main i386 Packages
Ign:13 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main all Packages
Ign:14 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main Translation-en_US
Ign:18 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main Translation-en
Ign:16 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main amd64 Packages
Ign:17 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main i386 Packages
Ign:13 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main all Packages
Ign:14 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main Translation-en_US
Ign:18 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main Translation-en
Ign:16 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main amd64 Packages
Ign:17 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main i386 Packages
Ign:13 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main all Packages
Ign:14 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main Translation-en_US
Ign:18 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main Translation-en
Ign:16 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main amd64 Packages
Ign:17 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main i386 Packages
Ign:13 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main all Packages
Ign:14 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main Translation-en_US
Ign:18 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main Translation-en
Err:16 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main amd64 Packages
  Connection failed
Ign:17 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main i386 Packages                                                                                                   
Ign:18 http://ppa.launchpad.net/certbot/certbot/ubuntu xenial/main Translation-en                                                                                                  
Fetched 329 kB in 6s (51.2 kB/s)                                                                                                                                                   
Reading package lists... Done
W: The repository 'http://ppa.launchpad.net/certbot/certbot/ubuntu xenial Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch http://ppa.launchpad.net/certbot/certbot/ubuntu/dists/xenial/main/binary-amd64/Packages  Connection failed
W: Some index files failed to download. They have been ignored, or old ones used instead.

closed #30

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.