Setting REQUESTS_CA_BUNDLE
The ACME service TLS uses a publicly anchored certificate for trust, preconfigured in many ACME clients. If your client lacks this configuration, you can instruct Certbot to trust the root CA certificates by setting the REQUESTS_CA_BUNDLE environment variable to the file path that contains these certificates.
| Platform | Command | Example |
|---|---|---|
| Linux | sudo REQUESTS_CA_BUNDLE=<root-CA-cert-file> |
sudo REQUESTS_CA_BUNDLE=/tmp/root_ca.crt |
| Windows | set REQUESTS_CA_BUNDLE=<root-CA-cert-file> |
set REQUESTS_CA_BUNDLE= "C:\root_ca.crt" |