使用 certbot 更新证书时版本无效

Question

我有一台安装了 Let's encrypt 证书并安装了 certbot 的服务器。我想用以下命令更新它 sudo certbot renew --force-renewal

但我收到错误：

Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/mydomain.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Plugins selected: Authenticator standalone, Installer None
Renewing an existing certificate
Attempting to renew cert (mydomain) from /etc/letsencrypt/renewal/mydomain.conf produced an unexpected error: Invalid version. The only valid version for X509Req is 0.. Skipping.
All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/mydomain/fullchain.pem (failure)

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/mydomain/fullchain.pem (failure)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1 renew failure(s), 0 parse failure(s)

我有 Ubuntu 20.04.4 LTS，Python 3.8.10 我该怎么办？

Answer 1

我在 Ubuntu 18.04 中遇到了同样的问题，这是由 pyOpenSSL 23.2.0 版本引起的。降级到 23.1.1 后又可以正常工作了：

pip3 install pyOpenSSL==23.1.1