Having run sudo certbot --webroot I get
With the webroot plugin, you probably want to use the "certonly" command, eg:
certbot certonly --webroot
(Alternatively, add a --installer flag. See https://eff.org/letsencrypt-plugins
and "--help plugins" for more information.)
Although it made a nice change to receive a different message (yay!) I'm not prompted for an email address, so I'm guessing it's stopping before it reaches the problem area rather than bypassing the problem.
Running certbot --apache -vvv gives me
Root logging level set at 0
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Requested authenticator apache and installer apache
Apache version is 2.4.41
Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: Installer, Authenticator, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_debian.DebianConfigurator object at 0x7f981d2f7dc0>
Prep: True
Selected authenticator <certbot_apache._internal.override_debian.DebianConfigurator object at 0x7f981d2f7dc0> and installer <certbot_apache._internal.override_debian.DebianConfigurator object at 0x7f981d2f7dc0>
Plugins selected: Authenticator apache, Installer apache
Enter email address (used for urgent renewal and security notices)
(Enter 'c' to cancel): blah@blah.com
Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
Exiting abnormally:
Traceback (most recent call last):
File "/snap/certbot/1343/lib/python3.8/site-packages/urllib3/connectionpool.py", line 699, in urlopen
httplib_response = self._make_request(
File "/snap/certbot/1343/lib/python3.8/site-packages/urllib3/connectionpool.py", line 382, in _make_request
self._validate_conn(conn)
File "/snap/certbot/1343/lib/python3.8/site-packages/urllib3/connectionpool.py", line 1010, in _validate_conn
conn.connect()
File "/snap/certbot/1343/lib/python3.8/site-packages/urllib3/connection.py", line 411, in connect
self.sock = ssl_wrap_socket(
File "/snap/certbot/1343/lib/python3.8/site-packages/urllib3/util/ssl_.py", line 449, in ssl_wrap_socket
ssl_sock = _ssl_wrap_socket_impl(
File "/snap/certbot/1343/lib/python3.8/site-packages/urllib3/util/ssl_.py", line 493, in _ssl_wrap_socket_impl
return ssl_context.wrap_socket(sock, server_hostname=server_hostname)
File "/snap/certbot/1343/usr/lib/python3.8/ssl.py", line 500, in wrap_socket
return self.sslsocket_class._create(
File "/snap/certbot/1343/usr/lib/python3.8/ssl.py", line 1040, in _create
self.do_handshake()
File "/snap/certbot/1343/usr/lib/python3.8/ssl.py", line 1309, in do_handshake
self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1131)
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/snap/certbot/1343/lib/python3.8/site-packages/requests/adapters.py", line 439, in send
resp = conn.urlopen(
File "/snap/certbot/1343/lib/python3.8/site-packages/urllib3/connectionpool.py", line 755, in urlopen
retries = retries.increment(
File "/snap/certbot/1343/lib/python3.8/site-packages/urllib3/util/retry.py", line 574, in increment
raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1131)')))
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/snap/certbot/1343/bin/certbot", line 8, in <module>
sys.exit(main())
File "/snap/certbot/1343/lib/python3.8/site-packages/certbot/main.py", line 15, in main
return internal_main.main(cli_args)
File "/snap/certbot/1343/lib/python3.8/site-packages/certbot/_internal/main.py", line 1566, in main
return config.func(config, plugins)
File "/snap/certbot/1343/lib/python3.8/site-packages/certbot/_internal/main.py", line 1273, in run
le_client = _init_le_client(config, authenticator, installer)
File "/snap/certbot/1343/lib/python3.8/site-packages/certbot/_internal/main.py", line 756, in _init_le_client
acc, acme = _determine_account(config)
File "/snap/certbot/1343/lib/python3.8/site-packages/certbot/_internal/main.py", line 673, in _determine_account
acc, acme = client.register(
File "/snap/certbot/1343/lib/python3.8/site-packages/certbot/_internal/client.py", line 182, in register
acme = acme_from_config_key(config, key)
File "/snap/certbot/1343/lib/python3.8/site-packages/certbot/_internal/client.py", line 46, in acme_from_config_key
client = acme_client.BackwardsCompatibleClientV2(net, key, config.server)
File "/snap/certbot/1343/lib/python3.8/site-packages/acme/client.py", line 835, in __init__
directory = messages.Directory.from_json(net.get(server).json())
File "/snap/certbot/1343/lib/python3.8/site-packages/acme/client.py", line 1179, in get
self._send_request('GET', url, **kwargs), content_type=content_type)
File "/snap/certbot/1343/lib/python3.8/site-packages/acme/client.py", line 1128, in _send_request
response = self.session.request(method, url, *args, **kwargs)
File "/snap/certbot/1343/lib/python3.8/site-packages/requests/sessions.py", line 542, in request
resp = self.send(prep, **send_kwargs)
File "/snap/certbot/1343/lib/python3.8/site-packages/requests/sessions.py", line 655, in send
r = adapter.send(request, **kwargs)
File "/snap/certbot/1343/lib/python3.8/site-packages/requests/adapters.py", line 514, in send
raise SSLError(e, request=request)
requests.exceptions.SSLError: HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1131)')))
Should I now try certbot certonly --webroot?
