Page 1 of 1

dietpi-letsencrypt (certbot) error

Posted: Wed Jan 31, 2018 12:32 am
by Game2Freak
Hello

Whenever I try to use 'dietpi-letsencrypt' I enter my details and hit apply but it always fails with the following error:
Performing the following challenges:
Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.
Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.
I'm currently using Apache2.

Any help to rectify this issue would be much appreciated.

Many Thanks

Re: dietpi-letsencrypt (certbot) error

Posted: Sun Feb 04, 2018 4:10 pm
by MichaIng
Read: https://github.com/Fourdee/DietPi/issue ... -361774084

This is an external error, based on a security issue, found by the certbot/letsencrypt guys.
PR to fix for v6.2 is there, however needs some more testing, as it deals with some other issue/general rework of our letsencrypt/certbot integration: https://github.com/Fourdee/DietPi/pull/1459

To fix it now:

Code: Select all

certbot renew --force-renewal -a webroot -w /var/www/ -i apache
This will switch the authentication method from by issue affected apache to "webroot". Certbot will remember this decision and do further renewals the same.

After the issue is fixed for current certbot packages, we will revert to webserver authentication with then next DietPi version automatically by dietpi-update.

Re: dietpi-letsencrypt (certbot) error

Posted: Wed Feb 14, 2018 6:39 pm
by previtech
Game2Freak wrote:Hello

Whenever I try to use 'dietpi-letsencrypt' I enter my details and hit apply but it always fails with the following error:
Performing the following challenges:
Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.
Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.
I'm currently using Apache2.

Any help to rectify this issue would be much appreciated.

Many Thanks
Hi, i had the same problem with a new install; i solved using this guide: https://certbot.eff.org/#debianother-apache

Re: dietpi-letsencrypt (certbot) error

Posted: Thu Feb 15, 2018 2:53 am
by MichaIng
Jep this installs the newest non package version directly from certbot sources that fixed the webserver authentication method. However we will stay with Debian package versions and switch authentication method as mentioned above. We will automatically apply that fix on DietPi v6.2 update the next few days.