My Ubuntu 14.04 lts server died so I rebuilt it with 20.04 last night (April's not that far around the corner), and I thought it was finally time to get my Subsonic site behind some encryption. My guess is that certbot just isn't ready for 20.04, as I can't get the ppa installed (404's on focal release when I try to add it). I was hoping someone might have had some luck getting it done though, but Google and the forum search here are coming up dry so far. Thanks for any help that can be offered, even if it's "keep waiting"!
I ran this command: sudo certbot --nginx --agree-tos --redirect --hsts --staple-ocsp --email --domain earnom.adenansu.com
It produced this output:
Performing the following challenges:
An unexpected error occurred:
AttributeError: module 'acme.challenges' has no attribute 'TLSSNI01'
Please see the logfiles in /var/log/letsencrypt for more details.
My web server is (include version): nginx/1.17.9 (Ubuntu)
The operating system my web server runs on is (include version): Ubuntu 20.04
I can login to a root shell on my machine (yes or no, or I don't know): Yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 0.40.0
Additional info that another post looking into a very similar issue had people asking for:
Well, there is an official package of certbot for Ubunu 20.04: https://packages.ubuntu.com/focal/certbot So why bother trying the PPA? It has an older version anyway. But looking at your version of certbot, you've used the official repository already.
Strange why your 0.40 version of certbot would try to use the tls-sni-01 challenge? Do you mention this challenge anywhere in your configuration files? Also, could you post more output of certbot when you get that error? Especially a trace.
Right, I'm using the official one, I thought I saw somewhere that CertBot 1.0 had been released late last year, so I thought this 0.40 version was old. I'm new to using all of this, so my mistake
I removed a few things that looked like they might be sensitive
this is obsolete. did you move over your config files for certbot from ubuntu 14.04? you need to edit them and move to http-01 or tls-alpn-01 or dns-01
$ sudo certbot --nginx --agree-tos --redirect --hsts --staple-ocsp --email (my email) --domain earnom.adenansu.com --preferred-challenges=http
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator nginx, Installer nginx
Obtaining a new certificate
Performing the following challenges:
An unexpected error occurred:
AttributeError: module âacme.challengesâ has no attribute âTLSSNI01â
Please see the logfiles in /var/log/letsencrypt for more details.
Iâm starting to read up on acme clients right now.
Oh, you're absolutely right, 0.40 is old.. However, the PPA is even older... For some reason, the certbot team has issues keeping the official packages up to date, although I'm pretty sure there are also non-certbot-team package managers in play which might be a part of the delay.
In combination with:
Tells me you don't have the nginx plugin installed? However..:
Well, there it is... Where did it come from? Strange..
I'll mark this is the solution, many thanks! Seems to be working locally on my network now, I'll be troubleshooting the public side issues with nginx (edit, helps to open port 443)
