Your message dated Fri, 6 Apr 2018 23:55:57 -0400
with message-id 
and subject line Re: [Letsencrypt-devel] Bug#873581: fixed in python-certbot 
has caused the Debian Bug report #873581,
regarding certbot: Excessive logging
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact

Debian Bug Tracking System
Contact with problems
--- Begin Message ---
Package: certbot
Version: 0.10.2-1~bpo8+1
Severity: normal

Certbog logs to /var/log/letsencrypt.log using DEBUG as the default
log level. It rotates the log on each invocation, i.e. (at least)
daily. If I understand correctly (,
1000 log files are retained.

On my server, I have hundreds of small log files:

# ls /var/log/letsencrypt|wc -l

Most of the debug information contained in the logs are not very
useful for sysadmins and it is quite difficult to find any relevant
information about certificate renewals etc.

Please consider making the log level configurable and make the default
"info". Also it would be nice, if logrotate would handle log rotation,
so the sysadmin could easily modify the rotation behaviour. Better
yet, the possibility of logging directly into systemd journal would be

-- System Information:
Debian Release: 8.9
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: i386 (i686)

Kernel: Linux 3.16.0-4-686-pae (SMP w/2 CPU cores)
Locale: LANG=fi_FI.UTF-8, LC_CTYPE=fi_FI.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages certbot depends on:
ii  init-system-helpers  1.22
ii  python               2.7.9-1
ii  python-certbot       0.10.2-1~bpo8+1
pn  python:any           <none>

certbot recommends no packages.

Versions of packages certbot suggests:
ii  python-certbot-apache  0.10.2-1~bpo8+1
pn  python-certbot-doc     <none>

-- debconf-show failed

--- End Message ---
--- Begin Message ---

Because certbot is meant to perform delicate operations, up to and
including rewriting configuration files, upstream strongly recommends
having access to the debug logs.  Though the internal certbot log rotation
doesn't support compression, the version that we ship should compress logs
down to quite a small amount.

If it really bothers you, you can symlink /dev/null to
/var/log/letsencrypt/letsencrypt.log and disable the logrotation.


On Fri, Apr 6, 2018 at 9:16 PM, Nye Liu <> wrote:

> This bug should not have been closed. Log rotation does not fix the
> problem of certbot dumping tons of useless debug information into its logs.
> It is inexcusable for an app that generates log files to not have a way to
> adjust log level.
> _______________________________________________
> Letsencrypt-devel mailing list

Harlan Lieberman-Berg

--- End Message ---

Reply via email to