Automic VaultAutomic Vault

brew / 受保护工具覆盖 / 排名 686

安装 certbot

查看 certbot 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

agent safety

Agent safety answer

certbot manages TLS certificates and can change web-server certificate state.

Credential access

Reads account keys, private keys, webroot paths, and DNS provider credentials.

Remote mutation

Can request certificates and modify local server config or DNS plugins.

Publish/artifact risk

Can create certificates used by public services.

Recommended control

Gate renew, certonly, private-key reads, and DNS credential use.

Agent-use guidance

Allow certificate status checks; require approval before issuing, renewing, or editing live certs.

安装

使用 Automic Vault 安装

Automic Vault
下载 AV
sudo av install brew:certbot

macOS

Homebrewverified · 100%
brew install certbot

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install certbot

MacPorts ports tree · security/certbot/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add certbot

Alpine Linux edge package indexes · certbot · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%
sudo apt install certbot

Debian stable package indexes · certbot · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install certbot

Fedora Rawhide package metadata · certbot · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#certbot

nixpkgs package indexes · pkgs/by-name/ce/certbot/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S certbot

Arch Linux sync databases · certbot · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%
sudo zypper install python311-certbot

openSUSE Tumbleweed package metadata · python311-certbot · source: download.opensuse.org

Windows

Windows Package Managerverified · 92%
winget install --id EFF.Certbot -e

Windows Package Manager source index · EFF.Certbot · source: cdn.winget.microsoft.com

平台说明

  • 没有特定于此软件包的平台说明。

概览

软件包摘要

Tool to obtain certs from Let's Encrypt and autoenable HTTPS

命令和别名

  • certbot

受保护工具覆盖

Plain Text Certbot Account And Certificate Keys

Certbot stores ACME account keys and issued certificate private keys under its configuration directory. Those keys are deployment state and are normally renewed in place. Automic Vault detects unencrypted keys in bounded user-level Certbot configuration directories, but does not migrate them because wrapper-only remediation would break renewal semantics.

Risk classifier

green risk · low confidence · appliance

Why

  • no executable entrypoint in the package index

Signals

  • metadata:no-indexed-executables

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 6 runtime dependencies.

本地 README 摘录

Certbot Protected-tool coverage

Detect-only coverage for Certbot key material.

Certbot's ACME account keys and certificate private keys are service deployment state. This protected-tool coverage reports unencrypted user-level keys without attempting to move Certbot's renewal-managed files.

来源: local coverage notes

覆盖来源

来源摘录

Caveats

  • This radioisotope is detect-only.
  • We detect user-level Certbot config directories under HOME.
  • Root-owned system Certbot deployments are not scanned from an unprivileged user detector.

可执行文件

已安装的可执行文件

命令类型暴露范围备注
certbotcliglobal executable

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-06-10
管理器版本5.6.0
管理器更新时间2026-05-20
本地数据ok
上游not checked
检测到的最新版本not detected

https://certbot.eff.org/

安装元数据

软件包元数据

Package keybrew:certbot
Version5.6.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/certbot
Homepagehttps://certbot.eff.org/
Repositoryhttps://github.com/certbot/certbot
Upstream docshttps://certbot.eff.org/docs
LicenseApache-2.0
Source archivehttps://files.pythonhosted.org/packages/4b/c0/838942a6c5fb07e42fdf48a5cc306214fd118c98dae673f1fb0b2d1f88ef/certbot-5.6.0.tar.gz
Last updated2026-05-20T11:26:15Z
Pulseupdated
Dependenciesaugeas, certifi, cryptography, libyaml, pydantic, python@3.14
Uses from macOSlibffi
Bottleavailable (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecertbot
Version Scheme0
Revision1
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

certbot 4.0.0-2+deb13u1

automatically configure HTTPS using Let's Encrypt

https://certbot.eff.org/

sudo apt install certbot
  • Section: web
  • Architecture: all
  • Source Package: python-certbot
  • 4 dependencies
  • 1 provides
  • 3 optional deps
  • normalized package name match
  • Matched by: Certbot
Debian stable package indexes · deb.debian.org · Debian stable package indexes: certbot from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

certbot

nix profile install nixpkgs#certbot
  • normalized package name match
  • Matched by: Certbot
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ce/certbot/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

certbot 2.9.0-1

automatically configure HTTPS using Let's Encrypt

https://certbot.eff.org/

sudo apt install certbot
  • Section: universe/web
  • Architecture: all
  • Source Package: python-certbot
  • 4 dependencies
  • 1 provides
  • 3 optional deps
  • normalized package name match
  • Matched by: Certbot
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: certbot from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

certbot 5.6.0-r0

An ACME client that can update Apache/Nginx configurations

https://github.com/certbot/certbot

sudo apk add certbot
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: certbot
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: certbot from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

certbot-pyc 5.6.0-r0

Precompiled Python bytecode for certbot

https://github.com/certbot/certbot

sudo apk add certbot-pyc
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: certbot
  • 1 dependencies
  • normalized package name match
  • Matched by: Certbot
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: certbot-pyc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

certbot 5.4.0-1.fc45

A free, automated certificate authority client

https://github.com/certbot/certbot

sudo dnf install certbot
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 5 dependencies
  • 3 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: certbot from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-acme-doc 5.4.0-1.fc45

Documenation for python-acme-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-acme-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-acme-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-cloudflare-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-cloudflare-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-cloudflare-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-cloudflare-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-digitalocean-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-digitalocean-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-digitalocean-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-digitalocean-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-dnsimple-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-dnsimple-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-dnsimple-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-dnsimple-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-dnsmadeeasy-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-dnsmadeeasy-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-dnsmadeeasy-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-dnsmadeeasy-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-gehirn-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-gehirn-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-gehirn-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-gehirn-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-google-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-google-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-google-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-google-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-linode-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-linode-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-linode-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-linode-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-luadns-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-luadns-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-luadns-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-luadns-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
dnf95%

python-certbot-dns-nsone-doc 5.4.0-1.fc45

Documenation for python-certbot-dns-nsone-doc libraries

https://github.com/certbot/certbot

sudo dnf install python-certbot-dns-nsone-doc
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: certbot
  • 1 provides
  • normalized package name match
  • Matched by: Certbot
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: python-certbot-dns-nsone-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • external package-manager database matches
  • local coverage README
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • secret-handling manifest