Certbot 安装Let’s Encrypt踩坑记录

1、ImportError: /usr/lib64/python2.7/site-packages/OpenSSL/crypto.so: symbol X509_REVOKED_dup, version libcrypto.so.10 not defined in file libcrypto.so.10 with link time reference

大致的意思就是crypto.so有问题，也查了很多版本又说OpenSSL的问题，但是我机器是环境变量的问题

[root@izufok5hmn78z ~]# certbot -version
Traceback (most recent call last):File "/usr/bin/certbot", line 9, in <module>load_entry_point('certbot==1.3.0', 'console_scripts', 'certbot')()File "/usr/lib/python2.7/site-packages/pkg_resources/__init__.py", line 564, in load_entry_pointreturn get_distribution(dist).load_entry_point(group, name)File "/usr/lib/python2.7/site-packages/pkg_resources/__init__.py", line 2662, in load_entry_pointreturn ep.load()File "/usr/lib/python2.7/site-packages/pkg_resources/__init__.py", line 2316, in loadreturn self.resolve()File "/usr/lib/python2.7/site-packages/pkg_resources/__init__.py", line 2322, in resolvemodule = __import__(self.module_name, fromlist=['__name__'], level=0)File "/usr/lib/python2.7/site-packages/certbot/main.py", line 2, in <module>from certbot._internal import main as internal_mainFile "/usr/lib/python2.7/site-packages/certbot/_internal/main.py", line 10, in <module>import josepy as joseFile "/usr/lib/python2.7/site-packages/josepy/__init__.py", line 41, in <module>from josepy.interfaces import JSONDeSerializableFile "/usr/lib/python2.7/site-packages/josepy/interfaces.py", line 7, in <module>from josepy import errors, utilFile "/usr/lib/python2.7/site-packages/josepy/util.py", line 7, in <module>import OpenSSLFile "/usr/lib64/python2.7/site-packages/OpenSSL/__init__.py", line 36, in <module>from OpenSSL import crypto
ImportError: /usr/lib64/python2.7/site-packages/OpenSSL/crypto.so: symbol X509_REVOKED_dup, version libcrypto.so.10 not defined in file libcrypto.so.10 with link time reference
[root@izufok5hmn78z ~]#

查找原因：找到这个外连接，是有个LD_LIBRARY_PATH 环境变量在控制，libssl.so.10已经指向了其他位置。

正确位置应该是：libcrypto.so.10 => /lib64/libcrypto.so.10 (0x00007ff603c7f000)

[root@izufok5hmn78z OpenSSL]# cd /usr/lib64/python2.7/site-packages/OpenSSL/
[root@izufok5hmn78z OpenSSL]# ldd crypto.so linux-vdso.so.1 =>  (0x00007fff3875e000)libssl.so.10 => /xxxxxxxxxxxxxx/4.1.1/lib/libssl.so.10 (0x00007f2050486000)libcrypto.so.10 => /xxxxxxxxxxxx/4.1.1/lib/libcrypto.so.10 (0x00007f205009b000)libpython2.7.so.1.0 => /lib64/libpython2.7.so.1.0 (0x00007f204fcc6000)libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f204faaa000)libc.so.6 => /lib64/libc.so.6 (0x00007f204f6e8000)libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007f204f49b000)libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f204f1b3000)libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007f204efae000)libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007f204ed7b000)libdl.so.2 => /lib64/libdl.so.2 (0x00007f204eb77000)libz.so.1 => /lib64/libz.so.1 (0x00007f204e960000)libutil.so.1 => /lib64/libutil.so.1 (0x00007f204e75d000)libm.so.6 => /lib64/libm.so.6 (0x00007f204e45b000)/lib64/ld-linux-x86-64.so.2 (0x00007f205090d000)libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f204e24c000)libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007f204e048000)libresolv.so.2 => /lib64/libresolv.so.2 (0x00007f204de2e000)libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f204dc06000)libpcre.so.1 => /lib64/libpcre.so.1 (0x00007f204d9a4000)
[root@izufok5hmn78z OpenSSL]# echo $LD_LIBRARY_PATH
/xxxxxxxxxxxxxxxxxxxx/4.1.1/lib/

解决办法：每个人环境不同可能改变方式不同，我的是因为LD_LIBRARY_PATH 环境变量控制，临时用的话直接设置为空即可

[root@izufok5hmn78z OpenSSL]# export LD_LIBRARY_PATH=""
[root@izufok5hmn78z OpenSSL]# echo $LD_LIBRARY_PATH [root@izufok5hmn78z OpenSSL]#

2、ImportError: cannot import name UnrewindableBodyError，借用别人一张图

解决办法：重装urllib3库

pip uninstall urllib3
pip install urllib3

3、certbot pkg_resources.DistributionNotFound: The 'urllib3<1.23,>=1.21.1' distribution was not found and is required by requests

解决办法：直接运行 # easy_install urllib3==1.21.1

4、ImportError: 'pyOpenSSL' module missing required functionality. Try upgrading to v0.14 or newer.

应该是pyOpenSSL版本和依赖有问题。参考https://github.com/certbot/certbot/issues/5534

pip install --upgrade --force-reinstall 'requests==2.6.0'

如果执行失败，那先安装依赖包，因为我百度都试了一遍，最终成功的是上面这句

yum install -y python-devel
yum install -y openssl-devel
pip install pyOpenSSL

最后，certbot运行成功

[root@izufok5hmn78z OpenSSL]# certbot --version
certbot 1.3.0
[root@izufok5hmn78z OpenSSL]#

Certbot 安装Let’s Encrypt踩坑记录相关推荐

几乎完美安装！ NVIDIA Jetson Nano B01 Ubuntu 18.04.3 LTS 的 ROS 安装和菜鸟的踩坑记录【会继续完善】
几乎完美安装! NVIDIA Jetson Nano B01 Ubuntu 18.04.3 LTS 的 ROS 安装和菜鸟的踩坑记录 NVIDIA Jetson Nano B01技术规格 Ubuntu ...
linux下安装mysql5.7.11全纪录_简单几步在Linux环境下安装MySQL5.7(附踩坑记录)
在Linux下安装MySQL可以说是每个开发者必备的知识刚好我的服务器重装了一下因此重新安装了MySQL 写下本文特此记录下载MySQL的压缩包: 官网:https://dev.mysql.co ...
安装VM15搭建centos7踩坑记录。
项目经理又又又又又又又叕来找我做压测了,好吧这次连开发的机器都没法用了,因为开发也在用.上午问了一圈公司也没有16G内存的闲置电脑,所以明天只能把自己笔记本带来做服务器测试了.没法子,启动服务必须要1 ...
flutter笔记1 VScode安装dart code插件踩坑记录
新手菜鸟一枚,想从产品转入技术坑,目标:移动端APP开发.最近听技术达人飞狐说flutter beta发布了,于是乎零基础入坑~话说想提高英文水平的同学,请移步flutter官网,从知道flutt ...
联想ThinkSystem服务器安装ESXI 7.0 踩坑记录
头铁,上了ThinkSystem服务器,记录下安装esxi7.0遇到的一些问题. 1.制作安装U盘
Ubuntu16.04安装K8s步骤和踩坑记录
文章目录环境信息安装步骤系统配置修改安装docker 安装kubectl,kubelet,kubeadm 配置Master 配置Node 部署结果检查 K8S部署mysql学习新建mysql ...
Ubuntu18.04安装pcl教程以及踩坑记录
参考教程:Ubuntu18.04安装PCL(详细教程)_一盆柠檬的博客-CSDN博客 1.安装依赖 sudo apt-get update sudo apt-get install git build ...
openwrt系统安装到云服务器异常,OpenWrt路由器系统下服务OpenClash 安装教程及其折腾踩坑记录...
主要事情说三遍:请折腾OpenWrt系统的,记得关闭任何一切IPV6协议,因为这个东西,折腾了好几天,各种服务都才正常使用! 主要事情说三遍:请折腾OpenWrt系统的,记得关闭任何一切IPV6协议, ...
python pip安装第三方库版本问题_python使用pip安装第三方库的踩坑记录
我安装第三方库的时候用:pip install 包名,然而各种安装不成功. 还有用pip命令明明安装成功了,但在pycham中导入此模块时提示没有此模块. 然后在百度各种查,各种配置path变量,复制 ...

Certbot 安装Let’s Encrypt踩坑记录

Certbot 安装Let’s Encrypt踩坑记录相关推荐

最新文章

热门文章