UCS 4.3-3 can't install Let's Encrypt

UCS - Univention Corporate Server
#1

Hello,

I Would like to install Let’s Encrpyt on my UCS Master with the App Center. I tried several times but each time it stops after checking the system with someting like: " Can’t repair autmotically" univention-letsencrpyt.

Whats wrong here?

kind regards,

phil

#2

Can you please supply the actual error message? Working from spotty memory is quite difficult.

Please also provide relevant log message from /var/log/univention/appcenter.log

#3

here are the meassages

  3545 packages                         19-03-12 16:41:22 [ WARNING]: E: Problemexecuting scripts APT::Update::Pre-Invoke 'grep -Fqs '# An error occurred during the repository check.' /etc/apt/sources.list.d/15_ucs-online-version.list && ucr commit /etc/apt/sources.list.d/15_ucs-online-version.list ; ! grep -F '# An error occurred during the repository check.' /etc/apt/sources.list.d/15_ucs-online-version.list'
  3545 packages                         19-03-12 16:41:22 [ WARNING]: E: Sub-process returned an error code
  3545 actions.install                  19-03-12 16:41:23 [   DEBUG]: Component letsencrypt_20190118130723 unregistered
  3545 actions.install                  19-03-12 16:41:23 [    INFO]: The following packages are BROKEN:
  3545 actions.install                  19-03-12 16:41:23 [    INFO]:  * univention-letsencrypt
  3545 packages                         19-03-12 16:41:23 [   DEBUG]: Releasing LOCK

the repository seesm to be broken.

thanks phiku

#4

Thanks. Can you please run the following command:

ucr commit /etc/apt/sources.list.d/15_ucs-online-version.list

Afterwards post the content of /etc/apt/sources.list.d/15_ucs-online-version.list here.

#5 
root@sts:~# ucr commit /etc/apt/sources.list.d/15_ucs-online-version.list
root@sts:/etc/apt/sources.list.d# vi 15_ucs-online-version.list
#       raise ConfigurationError(uri, reason)
#   ConfigurationError: Configuration error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)
#

# After fixing this issue, you should rewrite this file with the following command:
#   univention-config-registry commit /etc/apt/sources.list.d/15_ucs-online-version.list
#
#6

This looks like an issue several other people have stumbled across, too. Try updating the CA store and run the update again:

update-ca-certificates
ucr commit /etc/apt/sources.list.d/15_ucs-online-version.list
#7

Yes! that’s it! Thank your for your quick help.

kind regards,
phiku

#8

You’re quite welcome.

Mastodon