Ubuntu 18.04 certbot upgrade

[Byung-Hee HWANG]

Karl Auer <kauer at biplane.com.au> writes:

> On Sun, 2023-05-21 at 21:58 +0900, Byung-Hee HWANG wrote:
>> I did try `sudo apt update' then `sudo apt upgrade' But there is no
>> difference. Still certbot is 0.27. How can i upgrade certbot?
>
> You don't get new versions of things from a distro repo. You will get
> security updates, but no new versions.
>
> To upgrade certbot, you will have to install it manually, unless
> someone out there happens to have packaged a later version for 18.04.
>
> But perhaps you could tell us why you want to upgrade it? There may be
> other solutions to the problem you are trying to solve...
>

Hellow Karl,

There is long story. I have running two mail server. One is Ubuntu 18.04
LTS (Inbond only) <<yw-0919.doraji.xyz>>. The other is Debian 11
Bullseye (Outbond only) <<yw-1204.doraji.xyz>>. Both are Postfix.

Recently i was making DANE (RFC7671) for two mail servers. It is very
hard to me. So i was talking about DANE with Postfix hackers in Postfix
mailing list. A professional guy, Viktor, gave me some advice adding
some option to cli.ini of certbot:

<quote: /etc/letsencrypt/cli.ini>
[renewalparams]
reuse-key = True
preferred-chain = ISRG Root X1
</quote>

But, according to my test, above options did now work certbot (0.27)
under Ubuntu 18.04 LTS. So i thought that i have to drop my plan to make
DANE security for mail servers, if i cannot upgrade certbot.

Still i'm wondering. Thanks for kind replyig, indeed.


Sincerely, Byung-Hee