I tried to configure Let’s encrypt today on the nethserver using this guide:
In Step ./letsencrypt-auto it fails during “Installing Python packages…” it fails with this error (I think this is the first error in the long output):
c/_cffi_backend.c:13:17: error: ffi.h: No such file or directory
at the End there are additionally this two errors:
Command /root/.local/share/letsencrypt/bin/python -c "import setuptools;__file__='/tmp/pip-NB83nO-build/setup.py';exec(compile(open(__file__).read().replace('\r\n', '\n'), __file__, 'exec'))" install --record /tmp/pip-oi7Glg-record/install-record.txt --single-version-externally-managed --install-headers /root/.local/share/letsencrypt/include/site/python2.7 failed with error code 1 in /tmp/pip-NB83nO-build
UnicodeDecodeError: 'ascii' codec can't decode byte 0xe2 in position 75: ordinal not in range(128)
I searched on many websites for a solutions but found no one.
I did:
sudo yum install centos-release-scl --enablerepo=extras
yum update
yum install scl-utils python27 python27-scldevel
scl enable python27 bash
sudo yum install epel-release
rpm -ivh https://rhel6.iuscommunity.org/ius-release.rpm
yum --enablerepo=ius install git python27 python27-devel python27-pip python27-setuptools python27-virtualenv -y
sudo yum install gcc libffi-devel python-devel openssl-devel
sudo git clone https://github.com/letsencrypt/letsencrypt /opt/letsencrypt
cd /opt/letsencrypt
./letsencrypt-auto
Maybe some things in there are duplicates or not necessary. Never the less, it’s not working.
Because Let’s Encrypt is still in Beta and I hope that this issue may be solved someday by Let’s Encrypt client, I will use my current certificates until they are close to expire and then I will try again.
I will not do the idea I described in a previous thread. Its easier to manage it on the Apache of nethserver itself.
See https://www.shivering-isles.com/lets-encrypt-get-certifiactes-for-reverse-proxied-services/