Re: certbot

"John Levine" <johnl@iecc.com> writes:
> Gerard E. Seibert <jerry@seibercom.net, questions@freebsd.org> writes:
> > If I run the command from the command line, it works as expected. I did
> > place the following in the environment: CRYPTOGRAPHY_OPENSSL_NO_LEGACY=1
> > I still do not understand why this error only happens from CRON.
>
> Most likely because that variable is not there. Cron uses a standard
> rather sparse environment.  See "man 5 crontab".
>
> In this case rather than messing with the script, just set the
> variable on the command line in the crontab, e.g.
>
> 0 1 * * * CRYPTOGRAPHY_OPENSSL_NO_LEGACY=1 certbot ...

Even simpler:

CRYPTOGRAPHY_OPENSSL_NO_LEGACY=1 
@daily certbot renew --apache

put this in, say, /etc/cron.d/certbot.

DES
-- 
Dag-Erling Smørgrav - des@FreeBSD.org