Setting REQUESTS_CA_BUNDLE
The ACME service TLS uses a publicly anchored certificate for trust, and many ACME clients come with this trust preconfigured. However, if this is not the case, you can instruct Certbot to trust the root CA certificates by setting the REQUESTS_CA_BUNDLE environment variable to the file path containing those certificates.
| Platform | Command | Example |
|---|---|---|
| Linux | sudo REQUESTS_CA_BUNDLE=<root-CA-cert-file> |
sudo REQUESTS_CA_BUNDLE=/tmp/root_ca.crt |
| Windows | set REQUESTS_CA_BUNDLE=<root-CA-cert-file> |
set REQUESTS_CA_BUNDLE= "C:\root_ca.crt" |