Automic VaultAutomic Vault

brew / Protected-Tool-Abdeckung / Rang 686

certbot installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für certbot in AI-Agent-Workflows.

agent safety

Agent safety answer

certbot manages TLS certificates and can change web-server certificate state.

Credential access

Reads account keys, private keys, webroot paths, and DNS provider credentials.

Remote mutation

Can request certificates and modify local server config or DNS plugins.

Publish/artifact risk

Can create certificates used by public services.

Recommended control

Gate renew, certonly, private-key reads, and DNS credential use.

Agent-use guidance

Allow certificate status checks; require approval before issuing, renewing, or editing live certs.

Installation

Mit Automic Vault installieren

Automic Vault
sudo av install brew:certbot

macOS

Homebrewverified · 100%
brew install certbot

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install certbot

MacPorts ports tree · security/certbot/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add certbot

Alpine Linux edge package indexes · certbot · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%
sudo apt install certbot

Debian stable package indexes · certbot · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install certbot

Fedora Rawhide package metadata · certbot · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#certbot

nixpkgs package indexes · pkgs/by-name/ce/certbot/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S certbot

Arch Linux sync databases · certbot · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%
sudo zypper install python311-certbot

openSUSE Tumbleweed package metadata · python311-certbot · source: download.opensuse.org

Windows

Windows Package Managerverified · 92%
winget install --id EFF.Certbot -e

Windows Package Manager source index · EFF.Certbot · source: cdn.winget.microsoft.com

Plattformhinweise

  • Es waren keine paketspezifischen Plattformhinweise vorhanden.

Überblick

Paketzusammenfassung

Tool to obtain certs from Let's Encrypt and autoenable HTTPS

Befehle und Aliase

  • certbot

Protected-Tool-Abdeckung

Plain Text Certbot Account And Certificate Keys

Certbot stores ACME account keys and issued certificate private keys under its configuration directory. Those keys are deployment state and are normally renewed in place. Automic Vault detects unencrypted keys in bounded user-level Certbot configuration directories, but does not migrate them because wrapper-only remediation would break renewal semantics.

Risk classifier

green risk · low confidence · appliance

Why

  • no executable entrypoint in the package index

Signals

  • metadata:no-indexed-executables

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 6 runtime dependencies.

Lokaler README-Auszug

Certbot Protected-tool coverage

Detect-only coverage for Certbot key material.

Certbot's ACME account keys and certificate private keys are service deployment state. This protected-tool coverage reports unencrypted user-level keys without attempting to move Certbot's renewal-managed files.

Quelle: local coverage notes

Quelle der Abdeckung

Quellauszug

Caveats

  • This radioisotope is detect-only.
  • We detect user-level Certbot config directories under HOME.
  • Root-owned system Certbot deployments are not scanned from an unprivileged user detector.

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
certbotcliglobal executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-06-10
Manager-Version5.6.0
Manager aktualisiert2026-05-20
lokale Datenok
Upstreamnot checked
neueste erkannte Versionnot detected

https://certbot.eff.org/

Installationsmetadaten

Paketmetadaten

Package keybrew:certbot
Version5.6.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/certbot
Homepagehttps://certbot.eff.org/
Repositoryhttps://github.com/certbot/certbot
Upstream docshttps://certbot.eff.org/docs
LicenseApache-2.0
Source archivehttps://files.pythonhosted.org/packages/4b/c0/838942a6c5fb07e42fdf48a5cc306214fd118c98dae673f1fb0b2d1f88ef/certbot-5.6.0.tar.gz
Last updated2026-05-20T11:26:15Z
Pulseupdated
Dependenciesaugeas, certifi, cryptography, libyaml, pydantic, python@3.14
Uses from macOSlibffi
Bottleavailable (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecertbot
Version Scheme0
Revision1
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

certbot 4.0.0-2+deb13u1

automatically configure HTTPS using Let's Encrypt

https://certbot.eff.org/

sudo apt install certbot
  • Section: web
  • Architecture: all
  • Source Package: python-certbot
  • 4 dependencies
  • 1 provides
  • 3 optional deps
  • normalized package name match
  • Matched by: Certbot
Debian stable package indexes · deb.debian.org · Debian stable package indexes: certbot from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

certbot

nix profile install nixpkgs#certbot
  • normalized package name match
  • Matched by: Certbot
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ce/certbot/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

certbot 2.9.0-1

automatically configure HTTPS using Let's Encrypt

https://certbot.eff.org/

sudo apt install certbot
  • Section: universe/web
  • Architecture: all
  • Source Package: python-certbot
  • 4 dependencies
  • 1 provides
  • 3 optional deps
  • normalized package name match
  • Matched by: Certbot
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: certbot from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

certbot 5.6.0-r0

An ACME client that can update Apache/Nginx configurations

https://github.com/certbot/certbot

sudo apk add certbot
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: certbot
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: certbot from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

certbot-pyc 5.6.0-r0

Precompiled Python bytecode for certbot

https://github.com/certbot/certbot

sudo apk add certbot-pyc
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: certbot
  • 1 dependencies
  • normalized package name match
  • Matched by: Certbot
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: certbot-pyc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

certbot 5.4.0-1.fc45

A free, automated certificate authority client

https://github.com/certbot/certbot

sudo dnf install certbot
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 5 dependencies
  • 3 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: certbot from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-acme-doc 5.4.0-1.fc45

Documenation for python-acme-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-acme-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-acme-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-cloudflare-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-cloudflare-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-cloudflare-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-cloudflare-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-digitalocean-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-digitalocean-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-digitalocean-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-digitalocean-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-dnsimple-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-dnsimple-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-dnsimple-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-dnsimple-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-dnsmadeeasy-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-dnsmadeeasy-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-dnsmadeeasy-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-dnsmadeeasy-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-gehirn-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-gehirn-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-gehirn-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-gehirn-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-google-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-google-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-google-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-google-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-linode-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-linode-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-linode-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-linode-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-luadns-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-luadns-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-luadns-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-luadns-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-nsone-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-nsone-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-nsone-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-nsone-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • external package-manager database matches
  • local coverage README
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • secret-handling manifest