Nextberry letsencrypt certificate installation didnt work

[FMstar]

Steps to reproduce

1.following the installation script for NEXTBERRY
2.letsencrypt certificate installation fails

Expected behaviour

certificates should be installed

Actual behaviour

after reverting setting installation script moves on and installt nextclod without an signed cerificate

Server configuration

Server version:
Nextcloud 12.0.0
PHP
Version: 7.0.19
Arbeitspeichergrenzwert: 268435456

Datenbank
Art: mysql
Version: 5.5.54
Größe: 2.1 MB

Raspberry 2 or 3?
Raspberry 3

NextBerry version
_ _ _ ___ __ __ _ ____
| | | ___ __ | | | _ ) ___ _ _ _ _ _ _ \ \ / // | |_ /
| .` |/ -)\ \ /| || _ / -)| '|| '|| || | \ V / | | _ |
||_|___|/_\ _||/_||| || _, | _/ ||()|_/
|/
https://www.techandme.se - Nextcloud:v12.0.0 - Uptime: 0 days, 01h13m43s

RPI: temp=59.1'C - CPU freq: 1400000 - volt=1.3940V - MEM: gpu=32M arm=976M

Operating system: Raspbian GNU/Linux 8.0 (jessie) (GNU/Linux 4.9.24-v7+ armv7l)

Updated from an older installed version or fresh install:
fresh install

Network

Do you use DHCP?
yes
Is port 80 and/or 443 open?
443 open

Logs / Screenshots

Log file (/var/ncdata/nextcloud.log)

Insert your nextcloud.log file here

Installation log (command output)

Insert the CLI output here
Do you want to install SSL? ([y]es or [N]o):Y
after checking that my domain is reachable:
Installing letsencrypt...
**/var/scripts/activate-ssl.sh:** **line 151: add-apt-repository: command not found_**
[\] Please wait... 
WARNING: apt does not have a stable CLI interface. Use with caution in scripts.
[|] Please wait...  
[|] Please wait... 
WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

Reading package lists...
Building dependency tree...
Reading state information...
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 letsencrypt : Depends: certbot but it is not going to be installed
E: Unable to correct problems, you have held broken packages.
Reading package lists...
Building dependency tree...
Reading state information...
Calculating upgrade...
The following packages were automatically installed and are no longer required:
  libblas-common libblas3 libgfortran3 liblinear1 libpcap0.8 ndiff python-lxml
Use 'apt autoremove' to remove them.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
/etc/apache2/sites-available/myprivatedomain.de.conf was successfully created
Site 000-default already disabled
/var/scripts/activate-ssl.sh: line 232: letsencrypt: command not found
Enabling site 000-default.
To activate the new configuration, you need to run:
  systemctl reload apache2
�[0;96mIt seems like no certs were generated, we will do 2 more tries.�[0m
�[0;32mPress any key to continue...�[0m
/var/scripts/activate-ssl.sh: line 244: letsencrypt: command not found
�[0;96mIt seems like no certs were generated, we will do 1 more try.�[0m
�[0;32mPress any key to continue...�[0m
/var/scripts/activate-ssl.sh: line 252: letsencrypt: command not found
�[0;96mIt seems like no certs were generated, we will do 0 more tries.�[0m
�[0;32mPress any key to continue...�[0m
�[0;96mSorry, last try failed as well. :/�[0m
3.finally:
�[0;32mPress any key to revert settings and exit... �[0m

#### Screenshoots
<!--
Please use http://imgur.com/ for screenshots. Thanks!
-->

[WaaromZoMoeilijk]

Thank you this seems like a scripting error on amd repo vs arm. Fixing this...

[WaaromZoMoeilijk]

Could you run this:

sudo apt-get install python-certbot-apache -t jessie-backports

Then:

sudo bash /var/scripts/
activate-ssl.sh
Please post the output

[FMstar]

Thank you, but unfortunatelly not sucessfull:

ncadmin@nextberry:~$ sudo apt-get install python-certbot-apache -t jessie-backports
[sudo] password for ncadmin:
Reading package lists... Done
E: The value 'jessie-backports' is invalid for APT::Default-Release as such a release is not available in the sources

I also ran the activate.ssl script, but as extected with the same errors:
Installing letsencrypt...
/var/scripts/activate-ssl.sh: line 151: add-apt-repository: command not found

[WaaromZoMoeilijk]

We'll get this working, try this:

sudo apt-get install python-certbot-apache -y

And if.its succesfull then run activate-ssl again

If that doesnt work, we'll git clone the certbot repo

[enoch85]

The PPA is the official one from Ubuntu, so git clone is actually worse as you wont get any updates then. Just sayin.

[WaaromZoMoeilijk]

There is no repo for rasbian, will have to go that way if we want letsencrypt. Thanks @enoch85

[enoch85]

OK 👍

[WaaromZoMoeilijk]

@FMstar please run:

sudo rm /var/scripts/activate-ssl.sh

sudo wget https://raw.githubusercontent.com/techandme/NextBerry/master/lets-encrypt/activate-ssl.sh -P /var/scripts/

sudo bash /var/scripts/activate-ssl.sh

[FMstar]

...that works quite nice.

On first run ive got an error message that cerbot- directory is not empty, but after renaming it the letsencrypt script semms running well.
...untill:
Enabling site 000-default.
To activate the new configuration, you need to run:
systemctl reload apache2
After that the system stops responding, no ping and so on.
But this might be an problem of some meore testings, Multiple runs of the script or anything else.

Ill try an installation from the scratch this evening...

[FMstar]

the last process that i could see is the letsencrypt- process with 99,9 percent cpu consumption.

uups..the headspreader is quite hot on my PI3.
Ill cool him down.

[WaaromZoMoeilijk]

Afterwards please run: ls /etc/letsencrypt/live
And post the output

[enoch85]

@FMstar Don't enable 000-default. It will fail as there already is a redirect in the host created during the LE script.

Eveything is done automatically, so you shouldn't have to fiddle with anything by yourself. ;)

[enoch85]

and @ezraholm50

...that works quite nice.

Told you so ;)

[WaaromZoMoeilijk]

Notice it just now. I disable 000-default by default, might get activated again somewhere.. thanks will figure it out.

[FMstar]

@ezraholm50
the ls /etc/letsencrypt/live
prints out my domain. e.g. myprivatdomain.de

Installation from the scretch runs without any errors, my nextcloud is now online.
THX for the 1st class support.

This project is absolutely recommendable,...and will be rcomendet.