I've tried
sudo apt-get remove python-certbot-apache
sudo apt-get purge --auto-remove python-certbot-apache
sudo apt-get remove python3-certbot-apache
sudo apt-get purge --auto-remove python3-certbot-apache
but when I run command certbot it still is recognized. How can I completely remove it, thus, typing that command was like any unrecoginzed command.
I have found information on
but I can't find ANYTHING about LetsEncrypt for SQL Server on Linux. No matter what I try I get this error message:
Error: 49940, Severity: 16, State: 1.Unable to open one or more of the user-specified certificate file(s). Verify that the certificate file(s) exist with read permissions for the user and group running SQL Server.
It seems this should be possible, can anyone provide some tips?
[Edit]
I have verified that the two LetsEncrypt files have appropriate permissions. I copied and renamed them and they are pointed to by the tlscert and tlskey keys in the network section of /var/opt/mssql/mssql.conf.
[network]
tlscert = /etc/ssl/certs/mssql.pem
tlskey = /etc/ssl/private/mssql.key
tlsprotocols = 1.2
forceencryption = 1
One thing not clear to me is whether the Letsencrypt private key in .pem format needs to be extracted to a .key file, so I have tried it both ways. I get the same error either way.
These errors show up in the mssql/log/errorlog file.
Here are the resulsts asked for
ls -l /etc/ssl/certs/mssql.pem:
-rw------- 1 mssql mssql 3586 May 3 22:20 /etc/ssl/certs/mssql.pem
ls -l /etc/ssl/private/mssql.key
-rw------- 1 mssql mssql 1679 May 3 22:42 /etc/ssl/private/mssql.key
mssql.pem was originally fullchain.pem and mssql.key was originally privkey.pem, which are the files required by Nginx and which work for it.
I have installed previously Certbot on Ubuntu, but I believe the package wasn't yet available for this distribution yet, so I believe I installed it from a pre-built package (maybe, I'm really not sure). Anyway, right now I have certbot 0.26.1 installed:
certbot --version
certbot 0.26.1
I tried to install it using the guide from here: https://certbot.eff.org/lets-encrypt/ubuntubionic-nginx
Here are some outputs from the current system:
apt-get install python-certbot-nginx
python-certbot-nginx is already the newest version (0.28.0-1+ubuntu18.04.1+certbot+3).
certbot --version
certbot 0.26.1
which certbot
/usr/bin/certbot
dpkg-query -L python-certbot-nginx
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/python-certbot-nginx
/usr/share/doc/python-certbot-nginx/changelog.Debian.gz
/usr/share/doc/python-certbot-nginx/copyright
so it looks like to me, that "python-certbot-nginx" package doesn't install any binaries. That am I doing wrong here? I have some totally different packages that can be upgraded (e.g. MySQL, PHP), but I can upgrade these only this sunday. But I believe this is absolutely unrelated to my problem. Thanks!
To get a wildcard SSL certificate from LetsEncrypt you need to run certbot version 0.22 or later according to https://community.letsencrypt.org/t/acme-v2-production-environment-wildcards/55578
I've installed certbot from apt using
sudo apt-get install certbot
However, that reports:
certbot is already the newest version (0.17.0-2).
How can I upgrade certbot to a version that supports wildcard certificates?
I use a Ubuntu 16.04 with Nginx and Certbot.
I tried to execute, for example:
certbot -v
certbot -V
certbot --version
man certbot
none gave any relevant output. How could I know the version currently installed in my Ubuntu?