certbot tries to upgrade openssl on certain hosts and halts seeking manual input, causing the script to crash.
remedy alternatives:
add a new task for installing latest version of openssl
add openssl to default list of packages and set them all to latest.
I prefer second approach.
--
here is the error log..
fatal: [awesomesite.in]: FAILED! => {"changed": true, "cmd": "certbot-auto certonly --standalone -w /app/certbot -d awesomesite.in --email awesomesite@awesomesite.in --agree-tos", "delta": "0:00:03.642259", "end": "2017-12-19 04:29:26.346628", "msg": "non-zero return code", "rc": 1, "start": "2017-12-19 04:29:22.704369", "stderr": "W: http://repo.r1soft.com/apt/dists/stable/Release.gpg: Signature by key 8954063F882837AE08F8D2CB1BF3530AA40384ED uses weak digest algorithm (SHA1)", "stderr_lines": ["W: http://repo.r1soft.com/apt/dists/stable/Release.gpg: Signature by key 8954063F882837AE08F8D2CB1BF3530AA40384ED uses weak digest algorithm (SHA1)"], "stdout": "Bootstrapping dependencies for Debian-based OSes... (you can skip this with --no-bootstrap)\nHit:1 http://archive.ubuntu.com/ubuntu xenial InRelease\nHit:2 http://security.ubuntu.com/ubuntu xenial-security InRelease\nHit:3 http://archive.ubuntu.com/ubuntu xenial-updates InRelease\nIgn:4 http://repo.r1soft.com/apt stable InRelease\nHit:5 http://repo.zabbix.com/zabbix/3.2/ubuntu trusty InRelease\nHit:6 http://repo.r1soft.com/apt stable Release\nReading package lists...\nReading package lists...\nBuilding dependency tree...\nReading state information...\ngcc is already the newest version (4:5.3.1-1ubuntu1).\ngcc set to manually installed.\nlibffi-dev is already the newest version (3.2.1-4).\npython is already the newest version (2.7.11-1).\npython set to manually installed.\npython-dev is already the newest version (2.7.11-1).\naugeas-lenses is already the newest version (1.4.0-0ubuntu1.1).\nca-certificates is already the newest version (20170717~16.04.1).\nca-certificates set to manually installed.\nlibaugeas0 is already the newest version (1.4.0-0ubuntu1.1).\nlibssl-dev is already the newest version (1.0.2g-1ubuntu4.10).\nlibssl-dev set to manually installed.\npython-virtualenv is already the newest version (15.0.1+ds-3ubuntu1).\nvirtualenv is already the newest version (15.0.1+ds-3ubuntu1).\nvirtualenv set to manually installed.\nThe following packages will be upgraded:\n openssl\n1 upgraded, 0 newly installed, 0 to remove and 136 not upgraded.\nNeed to get 492 kB of archives.\nAfter this operation, 0 B of additional disk space will be used.\nDo you want to continue? [Y/n] Abort.", "stdout_lines": ["Bootstrapping dependencies for Debian-based OSes... (you can skip this with --no-bootstrap)", "Hit:1 http://archive.ubuntu.com/ubuntu xenial InRelease", "Hit:2 http://security.ubuntu.com/ubuntu xenial-security InRelease", "Hit:3 http://archive.ubuntu.com/ubuntu xenial-updates InRelease", "Ign:4 http://repo.r1soft.com/apt stable InRelease", "Hit:5 http://repo.zabbix.com/zabbix/3.2/ubuntu trusty InRelease", "Hit:6 http://repo.r1soft.com/apt stable Release", "Reading package lists...", "Reading package lists...", "Building dependency tree...", "Reading state information...", "gcc is already the newest version (4:5.3.1-1ubuntu1).", "gcc set to manually installed.", "libffi-dev is already the newest version (3.2.1-4).", "python is already the newest version (2.7.11-1).", "python set to manually installed.", "python-dev is already the newest version (2.7.11-1).", "augeas-lenses is already the newest version (1.4.0-0ubuntu1.1).", "ca-certificates is already the newest version (20170717~16.04.1).", "ca-certificates set to manually installed.", "libaugeas0 is already the newest version (1.4.0-0ubuntu1.1).", "libssl-dev is already the newest version (1.0.2g-1ubuntu4.10).", "libssl-dev set to manually installed.", "python-virtualenv is already the newest version (15.0.1+ds-3ubuntu1).", "virtualenv is already the newest version (15.0.1+ds-3ubuntu1).", "virtualenv set to manually installed.", "The following packages will be upgraded:", " openssl", "1 upgraded, 0 newly installed, 0 to remove and 136 not upgraded.", "Need to get 492 kB of archives.", "After this operation, 0 B of additional disk space will be used.", "Do you want to continue? [Y/n] Abort."]} to retry, use: --limit @/Users/awesomesite/work/dumbjarvis/provisioner/site.retry
certbot tries to upgrade openssl on certain hosts and halts seeking manual input, causing the script to crash.
remedy alternatives:
I prefer second approach.
-- here is the error log..
fatal: [awesomesite.in]: FAILED! => {"changed": true, "cmd": "certbot-auto certonly --standalone -w /app/certbot -d awesomesite.in --email awesomesite@awesomesite.in --agree-tos", "delta": "0:00:03.642259", "end": "2017-12-19 04:29:26.346628", "msg": "non-zero return code", "rc": 1, "start": "2017-12-19 04:29:22.704369", "stderr": "W: http://repo.r1soft.com/apt/dists/stable/Release.gpg: Signature by key 8954063F882837AE08F8D2CB1BF3530AA40384ED uses weak digest algorithm (SHA1)", "stderr_lines": ["W: http://repo.r1soft.com/apt/dists/stable/Release.gpg: Signature by key 8954063F882837AE08F8D2CB1BF3530AA40384ED uses weak digest algorithm (SHA1)"], "stdout": "Bootstrapping dependencies for Debian-based OSes... (you can skip this with --no-bootstrap)\nHit:1 http://archive.ubuntu.com/ubuntu xenial InRelease\nHit:2 http://security.ubuntu.com/ubuntu xenial-security InRelease\nHit:3 http://archive.ubuntu.com/ubuntu xenial-updates InRelease\nIgn:4 http://repo.r1soft.com/apt stable InRelease\nHit:5 http://repo.zabbix.com/zabbix/3.2/ubuntu trusty InRelease\nHit:6 http://repo.r1soft.com/apt stable Release\nReading package lists...\nReading package lists...\nBuilding dependency tree...\nReading state information...\ngcc is already the newest version (4:5.3.1-1ubuntu1).\ngcc set to manually installed.\nlibffi-dev is already the newest version (3.2.1-4).\npython is already the newest version (2.7.11-1).\npython set to manually installed.\npython-dev is already the newest version (2.7.11-1).\naugeas-lenses is already the newest version (1.4.0-0ubuntu1.1).\nca-certificates is already the newest version (20170717~16.04.1).\nca-certificates set to manually installed.\nlibaugeas0 is already the newest version (1.4.0-0ubuntu1.1).\nlibssl-dev is already the newest version (1.0.2g-1ubuntu4.10).\nlibssl-dev set to manually installed.\npython-virtualenv is already the newest version (15.0.1+ds-3ubuntu1).\nvirtualenv is already the newest version (15.0.1+ds-3ubuntu1).\nvirtualenv set to manually installed.\nThe following packages will be upgraded:\n openssl\n1 upgraded, 0 newly installed, 0 to remove and 136 not upgraded.\nNeed to get 492 kB of archives.\nAfter this operation, 0 B of additional disk space will be used.\nDo you want to continue? [Y/n] Abort.", "stdout_lines": ["Bootstrapping dependencies for Debian-based OSes... (you can skip this with --no-bootstrap)", "Hit:1 http://archive.ubuntu.com/ubuntu xenial InRelease", "Hit:2 http://security.ubuntu.com/ubuntu xenial-security InRelease", "Hit:3 http://archive.ubuntu.com/ubuntu xenial-updates InRelease", "Ign:4 http://repo.r1soft.com/apt stable InRelease", "Hit:5 http://repo.zabbix.com/zabbix/3.2/ubuntu trusty InRelease", "Hit:6 http://repo.r1soft.com/apt stable Release", "Reading package lists...", "Reading package lists...", "Building dependency tree...", "Reading state information...", "gcc is already the newest version (4:5.3.1-1ubuntu1).", "gcc set to manually installed.", "libffi-dev is already the newest version (3.2.1-4).", "python is already the newest version (2.7.11-1).", "python set to manually installed.", "python-dev is already the newest version (2.7.11-1).", "augeas-lenses is already the newest version (1.4.0-0ubuntu1.1).", "ca-certificates is already the newest version (20170717~16.04.1).", "ca-certificates set to manually installed.", "libaugeas0 is already the newest version (1.4.0-0ubuntu1.1).", "libssl-dev is already the newest version (1.0.2g-1ubuntu4.10).", "libssl-dev set to manually installed.", "python-virtualenv is already the newest version (15.0.1+ds-3ubuntu1).", "virtualenv is already the newest version (15.0.1+ds-3ubuntu1).", "virtualenv set to manually installed.", "The following packages will be upgraded:", " openssl", "1 upgraded, 0 newly installed, 0 to remove and 136 not upgraded.", "Need to get 492 kB of archives.", "After this operation, 0 B of additional disk space will be used.", "Do you want to continue? [Y/n] Abort."]} to retry, use: --limit @/Users/awesomesite/work/dumbjarvis/provisioner/site.retry