question about pip install

[dlapiduz]

question about pip install

[MoebiuZ]

The reason why Letsencrypt doesn't recommend to install via pip or setup.py is just a security recommendation, to avoid installing plugins or the software itself from unknown/non-oficial sources.

This plugin is not "official", so if you use it is under your responsibility.

That said, the plugin itself will not (I think) work with the wrapper "letsencrypt-auto", but you can use it calling "letsencrypt" from the virtualenv generated by "auto".

For that, you have to install it on the virtualenv:

source /home/your-user/.local/share/letsencrypt/bin/activate
pip install letsencrypt-s3front

or

source /home/your-user/.local/share/letsencrypt/bin/activate
git clone https://github.com/dlapiduz/letsencrypt-s3front.git
cd letsencrypt_s3front
python setup.py install

also, you will need to source the virtualenv to launch:

AWS_ACCESS_KEY_ID="your_key" \
AWS_SECRET_ACCESS_KEY="your_secret" \
letsencrypt --agree-tos -a letsencrypt-s3front:auth \
--letsencrypt-s3front:auth-s3-bucket the_bucket \
[ --letsencrypt-s3front:auth-s3-region your-bucket-region-name ] (default is us-west-1) \
-i letsencrypt-s3front:installer \
--letsencrypt-s3front:installer-cf-distribution-id your_cf_distribution_id \
-d the_domain

Probably there are a simpler ways, but that's how I do it.

[dlapiduz]

@ezeeetm did this fix your issue? please ping me if you are still having problems.

[ezeeetm]

@dlapiduz yes, sir. thank you!

[agis]

@dlapiduz I've tried your instructions but I get the following (I'm on Debian):

$ cat cf-letsencrypt.sh
source /home/xxx/.local/share/letsencrypt/bin/activate

AWS_ACCESS_KEY_ID=xxx \
AWS_SECRET_ACCESS_KEY=xxx \
letsencrypt --agree-tos -a letsencrypt-s3front:auth \
--letsencrypt-s3front:auth-s3-bucket xxx \
--letsencrypt-s3front:auth-s3-region eu-central-1 \
-i letsencrypt-s3front:installer \
--letsencrypt-s3front:installer-cf-distribution-id xxx \
-d foo.example.com

$ bash cf-letsencrypt.sh
letssencrypt-auto [SUBCOMMAND] [options] [-d domain] [-d domain] ...

Certbot can obtain and install HTTPS/TLS/SSL certificates.  By default,
it will attempt to use a webserver both for obtaining and installing the
cert. Major SUBCOMMANDS are:

  (default) run        Obtain & install a cert in your current webserver
  certonly             Obtain cert, but do not install it (aka "auth")
  install              Install a previously obtained cert in a server
  renew                Renew previously obtained certs that are near expiry
  revoke               Revoke a previously obtained certificate
  register             Perform tasks related to registering with the CA
  rollback             Rollback server configuration changes made during install
  config_changes       Show changes made to server config during installation
  plugins              Display information about installed plugins
letsencrypt: error: unrecognized arguments: --letsencrypt-s3front:auth-s3-bucket xxx --letsencrypt-s3front:auth-s3-region eu-central-1 --letsencrypt-s3front:installer-cf-distribution-id xxx

Any ideas?

[jhnferraris]

@agis Did you get around with your problem?

[agis]

@jhnferraris yes, this ended up working:

#!/bin/bash
source /home/foo/.local/share/letsencrypt/bin/activate

AWS_ACCESS_KEY_ID=XXXXXXXXXXXXXXXX \
AWS_SECRET_ACCESS_KEY=XXXXXXXXXXXXXX \
certbot --agree-tos -a certbot-s3front:auth \
--certbot-s3front:auth-s3-bucket YOUR-BUCKET-NAME \
--certbot-s3front:auth-s3-region YOUR-REGION-NAME \
-i certbot-s3front:installer \
--certbot-s3front:installer-cf-distribution-id XXXXXXXXXXX \
-d your-domain.com

In other words, replace --letsencrypt- in the arguments with --certbot-.

[jetoneza]

@agis

$ cat upload-ssl-s3.sh
#!/bin/bash

source /home/foo/.local/share/letsencrypt/bin/activate

AWS_ACCESS_KEY_ID=XXX \
AWS_SECRET_ACCESS_KEY=XXX \
certbot --agree-tos -a certbot-s3front:auth \
--certbot-s3front:auth-s3-bucket XXX \
--certbot-s3front:auth-s3-region us-east-1 \
-i certbot-s3front:installer \
--certbot-s3front:installer-cf-distribution-id XXX \
-d mydomain.com

$ bash upload-ssl-s3.sh
usage:
  letsencrypt-auto [SUBCOMMAND] [options] [-d DOMAIN] [-d DOMAIN] ...

Certbot can obtain and install HTTPS/TLS/SSL certificates.  By default,
it will attempt to use a webserver both for obtaining and installing the
certificate.
certbot: error: unrecognized arguments: --certbot-s3front:auth-s3-bucket XXX --certbot-s3front:auth-s3-region us-east-1 --certbot-s3front:installer-cf-distribution-id XXX

The same error.