Home / ubuntu / Questions / 1113499
Accepted
Lippai Zoltan
Asked: 2019-01-29 02:43:01 +0800 CST

Failed to upgrade certbot on Ubuntu Bionic

  • 772

I have installed previously Certbot on Ubuntu, but I believe the package wasn't yet available for this distribution yet, so I believe I installed it from a pre-built package (maybe, I'm really not sure). Anyway, right now I have certbot 0.26.1 installed:

certbot --version
certbot 0.26.1

I tried to install it using the guide from here: https://certbot.eff.org/lets-encrypt/ubuntubionic-nginx

Here are some outputs from the current system:

apt-get install python-certbot-nginx 
python-certbot-nginx is already the newest version (0.28.0-1+ubuntu18.04.1+certbot+3).


certbot --version
certbot 0.26.1

which certbot
/usr/bin/certbot

dpkg-query -L python-certbot-nginx 
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/python-certbot-nginx
/usr/share/doc/python-certbot-nginx/changelog.Debian.gz
/usr/share/doc/python-certbot-nginx/copyright

so it looks like to me, that "python-certbot-nginx" package doesn't install any binaries. That am I doing wrong here? I have some totally different packages that can be upgraded (e.g. MySQL, PHP), but I can upgrade these only this sunday. But I believe this is absolutely unrelated to my problem. Thanks!

server apt nginx letsencrypt 18.04

1 Answers

  1. Best Answer

    Try with the following commands (replace -nginx with -apache if you need) to get the latest version of CertBot:

    sudo apt update
sudo apt install software-properties-common
sudo add-apt-repository universe
sudo add-apt-repository ppa:certbot/certbot
sudo apt update

    If this is a new installation or it's not a problem to upgrade all packages on your system:

    sudo apt install python-certbot python-certbot-nginx
sudo apt install python3-certbot python3-certbot-nginx 
sudo apt upgrade

    If you do not want to upgrade all packages in your system, then you can use:

    sudo apt install --only-upgrade python-certbot python-certbot-nginx
sudo apt install --only-upgrade python3-certbot python3-certbot-nginx

    References:

    Reasons to update - from Let's Encrypt newsletter:

    TLS-SNI-01 validation is reaching end-of-life. It will stop working temporarily on February 13th, 2019, and permanently on March 13th, 2019. Any certificates issued before then will continue to work for 90 days after their issuance date.

    You need to update your ACME client to use an alternative validation method (HTTP-01, DNS-01 or TLS-ALPN-01) before this date or your certificate renewals will break and existing certificates will start to expire.

    Our staging environment already has TLS-SNI-01 disabled, so if you'd like to test whether your system will work after February 13, you can run against staging: https://letsencrypt.org/docs/staging-environment/

    If you're a Certbot user, you can find more information here: https://community.letsencrypt.org/t/how-to-stop-using-tls-sni-01-with-certbot/83210

    Our forum has many threads on this topic. Please search to see if your question has been answered, then open a new thread if it has not: https://community.letsencrypt.org/

    For more information about the TLS-SNI-01 end-of-life please see our API announcement: https://community.letsencrypt.org/t/february-13-2019-end-of-life-for-all-tls-sni-01-validation-support/74209

    • 4