Are Certbot certificates suitable for Telegram?

Question

Apache HTTP Server

UPD: The
issue is resolved very simply:

has_custom_certificate is a flag for a self-signed certificate. Lets Encrypt doesn't need a Dog (@) icon.

The webhook is set even if you do not send a certificate, but simply set the webhook url with the https prefix

Hello. On my web server, I install the certificates with certbot --apache

Generate Keys:

cert1.pem  chain1.pem  fullchain1.pem  privkey1.pem

When trying to install SetWebHook for Telegram

curl -F "url=https://spend.tk/telegram/setwebhook" -F "[email protected]" "https://api.telegram.org/botAPI/setwebhook"

or

curl -F "url=https://spend.tk/telegram/setwebhook" -F "[email protected]" "https://api.telegram.org/botAPI/setwebhook"

or

curl -F "url=https://spend.tk/telegram/setwebhook" -F "[email protected]" "https://api.telegram.org/botAPI/setwebhook"

i get response:

{"ok":true,"result":true,"description":"Webhook was set"}

But when I check getwebhook I get:

{"ok":true,"result":{"url":"https://spend.tk/telegram/setwebhook","has_custom_certificate":true,"pending_update_count":2,"last_error_date":1614020700,"last_error_message":"SSL error {error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed}","max_connections":40,"ip_address":"95.128.xxx.xxx"}}

None of the auto-generated certificates from certbot match? Is it possible to convert the issued key for Telegram?

Answer 1

If you break through https://www.ssllabs.com/ssltest/analyze.html?d=spend.tk ,
pay attention to certificate #2 - it is not trusted and, in principle, it should not be. You have an error in the web server configuration.