I was testing the certbot on my Google Cloud \/ Google Compute Engine (CentOS 7) today, and I ran into the following issues:<\/p>\n
\r\nsudo certbot certonly --apache\r\nTraceback (most recent call last):\r\n File \"\/bin\/certbot\", line 9, in module\r\n load_entry_point('certbot==1.4.0', 'console_scripts', 'certbot')()\r\n File \"\/usr\/lib\/python2.7\/site-packages\/pkg_resources.py\", line 378, in load_entry_point\r\n return get_distribution(dist).load_entry_point(group, name)\r\n File \"\/usr\/lib\/python2.7\/site-packages\/pkg_resources.py\", line 2566, in load_entry_point\r\n return ep.load()\r\n File \"\/usr\/lib\/python2.7\/site-packages\/pkg_resources.py\", line 2260, in load\r\n entry = __import__(self.module_name, globals(),globals(), ['__name__'])\r\n File \"\/usr\/lib\/python2.7\/site-packages\/certbot\/main.py\", line 2, in \r\n from certbot._internal import main as internal_main\r\n File \"\/usr\/lib\/python2.7\/site-packages\/certbot\/_internal\/main.py\", line 16, in <\/module>\r\n from certbot import crypto_util\r\n File \"\/usr\/lib\/python2.7\/site-packages\/certbot\/crypto_util.py\", line 30, in <\/module>\r\n from certbot import util\r\n File \"\/usr\/lib\/python2.7\/site-packages\/certbot\/util.py\", line 23, in <\/module>\r\n from certbot._internal import constants\r\n File \"\/usr\/lib\/python2.7\/site-packages\/certbot\/_internal\/constants.py\", line 6, in <\/module>\r\n from acme import challenges\r\n File \"\/usr\/lib\/python2.7\/site-packages\/acme\/challenges.py\", line 11, in <\/module>\r\n import requests\r\n File \"\/usr\/lib\/python2.7\/site-packages\/requests\/__init__.py\", line 58, in <\/module>\r\n from . import utils\r\n File \"\/usr\/lib\/python2.7\/site-packages\/requests\/utils.py\", line 32, in <\/module>\r\n from .exceptions import InvalidURL\r\n File \"\/usr\/lib\/python2.7\/site-packages\/requests\/exceptions.py\", line 10, in <\/module>\r\n from urllib3.exceptions import HTTPError as BaseHTTPError\r\n File \"\/usr\/lib\/python2.7\/site-packages\/urllib3\/__init__.py\", line 8, in <\/module>\r\n from .connectionpool import (\r\n File \"\/usr\/lib\/python2.7\/site-packages\/urllib3\/connectionpool.py\", line 11, in <\/module>\r\n from .exceptions import (\r\n File \"\/usr\/lib\/python2.7\/site-packages\/urllib3\/exceptions.py\", line 2, in <\/module>\r\n from .packages.six.moves.http_client import (\r\n File \"\/usr\/lib\/python2.7\/site-packages\/urllib3\/packages\/__init__.py\", line 3, in <\/module>\r\n from . import ssl_match_hostname\r\nImportError: cannot import name ssl_match_hostname\r\n<\/module><\/pre>\nIn my case, it was caused by the stupid Google Cloud bloatware: Google Cloud SDK. When I set up the Google Cloud few years ago, Google loaded a lot of bloatware including Google Cloud SDK, which lives here: \/usr\/local\/share\/google\/google-cloud-sdk\/. If you take a look to this directory, you will notice that there are some python packages that may conflict with your system one. In my case, I have three conflicting packages, one from the EPEL repository, one from the PIP and one from Google Cloud SDK. They don’t get along with each other.<\/p>\n
Here is what I did:<\/p>\n
\r\n\r\nfind \/usr\/ -name \"ssl_match_hostname\"\r\n\r\n#My Local server - Good and trouble free:\r\n\/usr\/lib\/python2.7\/site-packages\/backports\/ssl_match_hostname\r\n\/usr\/lib\/python2.7\/site-packages\/urllib3\/packages\/ssl_match_hostname\r\n\r\n\r\n#Google Cloud Server - Bad and gave me trouble:\r\n\/usr\/lib\/python2.7\/site-packages\/backports\/ssl_match_hostname\/\r\n\/usr\/lib\/python2.7\/site-packages\/pip\/_vendor\/urllib3\/packages\/ssl_match_hostname\/\r\n\/usr\/local\/share\/google\/google-cloud-sdk\/lib\/third_party\/urllib3\/packages\/ssl_match_hostname\/\r\n\r\n<\/pre>\nSo I ended up removing this package and reinstalling everything again:<\/p>\n
\r\nsudo yum remove python2-urllib3\r\n\r\n\r\n#Notice that google-compute-engine and python-google-compute-engine are included here. They are the source of the problem:\r\n\r\n=============================================================================================================================================================================================================================================\r\n Package Arch Version Repository Size\r\n=============================================================================================================================================================================================================================================\r\nRemoving:\r\n python2-urllib3 noarch 1.24.1-2.el7 @forensics 708 k\r\nRemoving for dependencies:\r\n certbot noarch 1.4.0-1.el7 @epel 97 k\r\n google-compute-engine noarch 1:20190916.00-g2.el7 @google-cloud-compute 18 k\r\n python-google-compute-engine noarch 1:20191210.00-g1.el7 @google-cloud-compute 398 k\r\n python-requests noarch 2.6.0-9.el7_8 @updates 341 k\r\n python-requests-toolbelt noarch 0.8.0-3.el7 @epel 277 k\r\n python2-acme noarch 1.4.0-2.el7 @epel 347 k\r\n python2-boto noarch 2.45.0-3.el7 @epel 9.4 M\r\n python2-certbot noarch 1.4.0-1.el7 @epel 1.5 M\r\n python2-certbot-apache noarch 1.4.0-1.el7 @epel 579 k\r\n\r\nTransaction Summary\r\n=============================================================================================================================================================================================================================================\r\nRemove 1 Package (+9 Dependent packages)\r\n\r\n\r\n\r\n<\/pre>\nIn my case, I reinstalled the packages I need:<\/p>\n
\r\n#Reinstalling the certbot:\r\nsudo yum install certbot python2-certbot-apache\r\n<\/pre>\n<\/p>\nGood luck!<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"