Credential-Zugriff
Reads account keys, private keys, webroot paths, and DNS provider credentials.
brew / Rang 738
certbot mit Homebrew installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für certbot in AI-Agent-Workflows.
Agent-Sicherheit
Antwort zur Agent-Sicherheit
certbot manages TLS certificates and can change web-server certificate state.
Änderungen an Remote-Zustand
Can request certificates and modify local server config or DNS plugins.
Publish-/Artefakt-Risiko
Can create certificates used by public services.
Empfohlene Kontrolle
Gate renew, certonly, private-key reads, and DNS credential use.
Hinweise für Agent-Nutzung
Allow certificate status checks; require approval before issuing, renewing, or editing live certs.
Installation
Weitere Installationsbefehle
macOS
Homebrewverifiziert · 100%
brew install certbotprovider-native install command
Überblick
Paketzusammenfassung
Tool to obtain certs from Let's Encrypt and autoenable HTTPS
Projektlinks
Befehle und Aliase
- certbot
Verlauf
Projektgeschichte und Nutzung
Certbot is EFF's ACME client for obtaining and renewing HTTPS certificates, most commonly from Let's Encrypt, and optionally configuring web servers such as Apache and nginx.
Projektgeschichte
The repository was created in 2014 during the early Let's Encrypt client era. In 2016, EFF announced the client would move under the Certbot name to distinguish the client from the Let's Encrypt certificate authority and ISRG organization.
Adoptionsgeschichte
Certbot rode the same adoption wave as Let's Encrypt: EFF's 2016 announcement noted Let's Encrypt had issued its three millionth certificate, and EFF later reported Certbot installed on more than 4 million web servers maintaining certificates for more than 31 million websites.
Wie es verwendet wird
Certbot is intended to run on the server that hosts the site. It obtains certificates, saves them under /etc/letsencrypt/live, renews them on a schedule, and can use plugins for Apache, nginx, webroot, standalone, manual, and DNS-based validation.
Warum Paket-Nerds sich dafür interessieren
Certbot is one of the canonical examples of a security CLI becoming distribution infrastructure: it appears in many package managers, replaced the older letsencrypt command name in user documentation, deprecated certbot-auto, and standardized operational files under /etc/letsencrypt.
Zeitleiste
- 2014: Public certbot/certbot repository created.
- 2016: EFF announced the Let's Encrypt client rename to Certbot and the new certbot.eff.org site.
- 2025: Certbot 5.0.0 released, removing older deprecated APIs and Python 3.9 support.
- 2026: Certbot 5.6.0 released according to the official changelog.
Related projects
- Let's Encrypt is the default certificate authority commonly used with Certbot.
- ACME is the protocol Certbot speaks, standardized as RFC 8555.
- certbot-apache, certbot-nginx, and Certbot DNS plugins provide authenticator and installer integrations.
Quellen
- https://api.github.com/repos/certbot/certbot
- https://github.com/certbot/certbot
- https://certbot.eff.org/
- https://certbot.eff.org/docs
- https://www.eff.org/deeplinks/2016/05/announcing-certbot-new-tls-robot
- https://www.eff.org/deeplinks/2024/03/should-caddy-and-traefik-replace-certbot
- https://github.com/certbot/certbot/blob/main/certbot/CHANGELOG.md
- https://formulae.brew.sh/api/formula/certbot.json
Sicherheitslage
Noch keine Protected-Tool-Abdeckung gefunden
Für certbot wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.
Installationsverhalten
- Es wurden keine Homebrew-Bottle-Metadaten erfasst.
Empfohlene Prüfung
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Credential files
Credential-bearing paths to review before unattended agent runs.
- macOS
~/Library/Application Support/letsencrypt- Unix
~/.config/letsencrypt~/.letsencrypt
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
certbot | Executable | indexiertes Executable | Aus dem lokalen Executable-Index erkannt. |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-08-03
Manager-Version5.7.0
Manager aktualisiert2026-07-16
lokale Datenunbekannt
Upstreamnicht verfügbar
neueste erkannte Versionnicht erkannt
- OKEs wurden keine Aktualitätswarnungen generiert.
Installationsmetadaten
Paketmetadaten
| Paketschlüssel | brew:certbot |
|---|---|
| Version | 5.7.0 |
| Paketmanager | Homebrew |
| Homepage | https://certbot.eff.org/ |
| Repository | https://github.com/certbot/certbot |
| Zuletzt aktualisiert | 2026-07-16T20:51:03Z |
| Pulse | updated |
| Bottle | nicht erfasst |
| Dienst | keiner deklariert |
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Combined YAML source
View the package source record on GitHub.
Verwendete Quellen
- Geiger risk classifier
- Nucleus package database
- curated agent safety answer
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation