dietpi-letsencrypt (certbot) error

Having issues with your DietPi installation, or, found a bug? Post it here.
Post Reply
Game2Freak
Posts: 4
Joined: Sun Dec 11, 2016 9:31 pm

dietpi-letsencrypt (certbot) error

Post by Game2Freak »

Hello

Whenever I try to use 'dietpi-letsencrypt' I enter my details and hit apply but it always fails with the following error:
Performing the following challenges:
Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.
Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.
I'm currently using Apache2.

Any help to rectify this issue would be much appreciated.

Many Thanks
User avatar
MichaIng
Site Admin
Posts: 2421
Joined: Sat Nov 18, 2017 6:21 pm

Re: dietpi-letsencrypt (certbot) error

Post by MichaIng »

Read: https://github.com/Fourdee/DietPi/issue ... -361774084

This is an external error, based on a security issue, found by the certbot/letsencrypt guys.
PR to fix for v6.2 is there, however needs some more testing, as it deals with some other issue/general rework of our letsencrypt/certbot integration: https://github.com/Fourdee/DietPi/pull/1459

To fix it now:

Code: Select all

certbot renew --force-renewal -a webroot -w /var/www/ -i apache
This will switch the authentication method from by issue affected apache to "webroot". Certbot will remember this decision and do further renewals the same.

After the issue is fixed for current certbot packages, we will revert to webserver authentication with then next DietPi version automatically by dietpi-update.
previtech
Posts: 6
Joined: Tue Jan 31, 2017 3:24 pm

Re: dietpi-letsencrypt (certbot) error

Post by previtech »

Game2Freak wrote:Hello

Whenever I try to use 'dietpi-letsencrypt' I enter my details and hit apply but it always fails with the following error:
Performing the following challenges:
Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.
Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.
I'm currently using Apache2.

Any help to rectify this issue would be much appreciated.

Many Thanks
Hi, i had the same problem with a new install; i solved using this guide: https://certbot.eff.org/#debianother-apache
User avatar
MichaIng
Site Admin
Posts: 2421
Joined: Sat Nov 18, 2017 6:21 pm

Re: dietpi-letsencrypt (certbot) error

Post by MichaIng »

Jep this installs the newest non package version directly from certbot sources that fixed the webserver authentication method. However we will stay with Debian package versions and switch authentication method as mentioned above. We will automatically apply that fix on DietPi v6.2 update the next few days.
Post Reply