I followed instruction on this page: https://certbot.eff.org/lets-encrypt/ubuntubionic-haproxy
I got rid of old certbot. and installed new using snap.
My domain is: admin.cloud.net
I ran this command:
certbot certonly --server https://acme-staging.api.letsencrypt.org/directory --webroot --webroot-path "/usr/share/apache2/default-site/" --keep-until-expiring --text -v --email yourname@example.com --agree-tos -d example.com
It produced this output:
Root logging level set at 10
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Requested authenticator webroot and installer None
Single candidate plugin: * webroot
Description: Place files in webroot directory
Interfaces: IAuthenticator, IPlugin
Entry point: webroot = certbot._internal.plugins.webroot:Authenticator
Initialized: <certbot._internal.plugins.webroot.Authenticator object at 0x7fa3230cd0>
Prep: True
Selected authenticator <certbot._internal.plugins.webroot.Authenticator object at 0x7fa3230cd0> and installer None
Plugins selected: Authenticator webroot, Installer None
Sending GET request to https://acme-staging.api.letsencrypt.org/directory.
Starting new HTTPS connection (1): acme-staging.api.letsencrypt.org:443
https://acme-staging.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 704
Received response:
HTTP 200
Server: nginx
Date: Tue, 22 Dec 2020 20:34:02 GMT
Content-Type: application/json
Content-Length: 704
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Replay-Nonce: 0003ST__6At7ETKXhGyFEQ8-jkkCmPDwzHSpFUfMZYMswbw
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"RpwB0QGD70U": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"key-change": "https://acme-staging.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"terms-of-service": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf",
"website": "https://letsencrypt.org/docs/staging-environment/"
},
"new-authz": "https://acme-staging.api.letsencrypt.org/acme/new-authz",
"new-cert": "https://acme-staging.api.letsencrypt.org/acme/new-cert",
"new-reg": "https://acme-staging.api.letsencrypt.org/acme/new-reg",
"revoke-cert": "https://acme-staging.api.letsencrypt.org/acme/revoke-cert"
}
Requesting fresh nonce
Sending HEAD request to https://acme-staging.api.letsencrypt.org/acme/new-reg.
https://acme-staging.api.letsencrypt.org:443 "HEAD /acme/new-reg HTTP/1.1" 405 0
Received response:
HTTP 405
Server: nginx
Date: Tue, 22 Dec 2020 20:34:02 GMT
Content-Type: application/problem+json
Content-Length: 91
Connection: keep-alive
Allow: POST
Cache-Control: public, max-age=0, no-cache
Replay-Nonce: 0003F7aQ76zoIJ0L5cZIcmqj71UcmjmApIXRdkvg9Z9-Gjg
Storing nonce: 0003F7aQ76zoIJ0L5cZIcmqj71UcmjmApIXRdkvg9Z9-Gjg
JWS payload:
b'{\n "contact": [\n "mailto:yourname@example.com"\n ],\n "resource": "new-reg"\n}'
Sending POST request to https://acme-staging.api.letsencrypt.org/acme/new-reg:
{
"protected": "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",
"signature": "xTMKNyd8W-1bt2qXiE8D1yC7ISWyvS_sn5R-5wMxSjxr3SvbFjN3zTGhzHhPM0Ww3r1nX3ejPR_F3M2yqbJk6mhy6wWbOqXUc8sLju2YT9sEgk4yFZffRXj1t1BbZAdG0UMblgjrSuOq58QD6PZicbKtdDJCvqf-zpzglwap3eFshXEPfxs9qPVHYHBDx8Gf9JYgp33CNzQYGKAWC1BS9d5TW_0aMlNqbWyfb6qrN7B-8wnhDeq9VC_hTLA50J6VkI__B_9mFNGRzy4LTRuH50gdrkCUyMe9kCQc6xYfAvcq5lGPhndWl6161XeKZ3XGfZZJOoBQxstsL6wwFgrfeg",
"payload": "ewogICJjb250YWN0IjogWwogICAgIm1haWx0bzp5b3VybmFtZUBleGFtcGxlLmNvbSIKICBdLAogICJyZXNvdXJjZSI6ICJuZXctcmVnIgp9"
}
https://acme-staging.api.letsencrypt.org:443 "POST /acme/new-reg HTTP/1.1" 403 280
Received response:
HTTP 403
Server: nginx
Date: Tue, 22 Dec 2020 20:34:03 GMT
Content-Type: application/problem+json
Content-Length: 280
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Replay-Nonce: 00040Zk2URShw-FwlYaWPfzsA42-O4bZ8TCvVNbhySBFSlI
{
"type": "urn:acme:error:unauthorized",
"detail": "Account creation on ACMEv1 is disabled. Please upgrade your ACME client to a version that supports ACMEv2 / RFC 8555. See https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430 for details.",
"status": 403
}
Exiting abnormally:
Traceback (most recent call last):
File "/snap/certbot/794/bin/certbot", line 8, in <module>
sys.exit(main())
File "/snap/certbot/794/lib/python3.8/site-packages/certbot/main.py", line 15, in main
return internal_main.main(cli_args)
File "/snap/certbot/794/lib/python3.8/site-packages/certbot/_internal/main.py", line 1412, in main
return config.func(config, plugins)
File "/snap/certbot/794/lib/python3.8/site-packages/certbot/_internal/main.py", line 1276, in certonly
le_client = _init_le_client(config, auth, installer)
File "/snap/certbot/794/lib/python3.8/site-packages/certbot/_internal/main.py", line 651, in _init_le_client
acc, acme = _determine_account(config)
File "/snap/certbot/794/lib/python3.8/site-packages/certbot/_internal/main.py", line 568, in _determine_account
acc, acme = client.register(
File "/snap/certbot/794/lib/python3.8/site-packages/certbot/_internal/client.py", line 175, in register
regr = perform_registration(acme, config, tos_cb)
File "/snap/certbot/794/lib/python3.8/site-packages/certbot/_internal/client.py", line 217, in perform_registration
return acme.new_account_and_tos(newreg, tos_cb)
File "/snap/certbot/794/lib/python3.8/site-packages/acme/client.py", line 852, in new_account_and_tos
regr = self.client.register(regr)
File "/snap/certbot/794/lib/python3.8/site-packages/acme/client.py", line 279, in register
response = self._post(self.directory[new_reg], new_reg)
File "/snap/certbot/794/lib/python3.8/site-packages/acme/client.py", line 97, in _post
return self.net.post(*args, **kwargs)
File "/snap/certbot/794/lib/python3.8/site-packages/acme/client.py", line 1201, in post
return self._post_once(*args, **kwargs)
File "/snap/certbot/794/lib/python3.8/site-packages/acme/client.py", line 1214, in _post_once
response = self._check_response(response, content_type=content_type)
File "/snap/certbot/794/lib/python3.8/site-packages/acme/client.py", line 1072, in _check_response
raise messages.Error.from_json(jobj)
acme.messages.Error: urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Account creation on ACMEv1 is disabled. Please upgrade your ACME client to a version that supports ACMEv2 / RFC 8555. See https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430 for details.
An unexpected error occurred:
The client lacks sufficient authorization :: Account creation on ACMEv1 is disabled. Please upgrade your ACME client to a version that supports ACMEv2 / RFC 8555. See https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430 for details.
My web server is (include version):
Apache 2.4.29
The operating system my web server runs on is (include version):
Ubuntu 18.04 bionic
My hosting provider, if applicable, is:
self hosted.
I can login to a root shell on my machine (yes or no, or I don't know):
yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
no
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
# certbot --version
certbot 1.10.1