Naar inhoud springen

Certbot

Uit VanderSchaft
Versie door Dschaft (overleg | bijdragen) op 24 jun 2025 om 12:54 (Nieuwe pagina aangemaakt met 'Message from py311-certbot-3.1.0,1: -- This port installs the "standalone" client only, which does not use and is not the certbot-auto bootstrap/wrapper script. The simplest form of usage to obtain certificates is: # sudo certbot certonly --standalone -d <domain>, [domain2, ... domainN]> NOTE: The client requires the ability to bind on TCP port 80 or 443 (depending on the --preferred-challenges option used). If a server is running on that port, it will n...')
(wijz) ← Oudere versie | Huidige versie (wijz) | Nieuwere versie → (wijz)

Message from py311-certbot-3.1.0,1:

-- This port installs the "standalone" client only, which does not use and is not the certbot-auto bootstrap/wrapper script.

The simplest form of usage to obtain certificates is:

# sudo certbot certonly --standalone -d <domain>, [domain2, ... domainN]>

NOTE:

The client requires the ability to bind on TCP port 80 or 443 (depending on the --preferred-challenges option used). If a server is running on that port, it will need to be temporarily stopped so that the standalone server can listen on that port to complete the challenge authentication process.

For more information on the 'standalone' mode, see:

 https://certbot.eff.org/docs/using.html#standalone

The certbot plugins to support apache and nginx certificate installation will be made available in the following ports:

* Apache plugin: security/py-certbot-apache
* Nginx plugin: security/py-certbot-nginx

In order to automatically renew the certificates, add this line to /etc/periodic.conf:

   weekly_certbot_enable="YES"

More config details in the certbot periodic script:


/usr/local/etc/periodic/weekly/500.certbot-3.11

=

Message from py311-urllib3-1.26.20,1:

-- Since version 1.25 HTTPS connections are now verified by default which is done via "cert_reqs = 'CERT_REQUIRED'". While certificate verification can be disabled via "cert_reqs = 'CERT_NONE'", it's highly recommended to leave it on.

Various consumers of net/py-urllib3 already have implemented routines that either explicitly enable or disable HTTPS certificate verification (e.g. via configuration settings, CLI arguments, etc.).

Yet it may happen that there are still some consumers which don't explicitly enable/disable certificate verification for HTTPS connections which could then lead to errors (as is often the case with self-signed certificates).

In case of an error one should try first to temporarily disable certificate verification of the problematic urllib3 consumer to see if that approach will remedy the issue.

=

Message from python311-3.11.12_1:

-- Note that some standard Python modules are provided as separate ports as they require additional dependencies. They are available as:

py311-gdbm databases/py-gdbm@py311 py311-sqlite3 databases/py-sqlite3@py311 py311-tkinter x11-toolkits/py-tkinter@py311