Questions tagged [certbot]
The certbot tag has no usage guidance.
56
questions
1
vote
1
answer
59
views
Can’t renew LE certs behind haproxy after upgrade
My previous setup to maintain Let's Encrypt certificates, which worked, was:
WAN -> pfSense -> Ubuntu 18.04 -> haproxy -> certbot v0.27.0 (for renewal)
pfSense forwarded all TCP traffic on ...
- 455
0
votes
1
answer
26
views
I cannot change my Nginx configuration no matter what I try
I'm trying to create a subdomain for hosting files and no matter what I try, autoindex doesn't do anything. I can successfully redirect "public.example.com" to "example.com", but ...
- 347
0
votes
0
answers
14
views
Docker certbot trouble after relocating data-root
Because of my Docker images/containers filling up my root partition, I've been trying to move the data-root directory of my Docker installation to a different location (current: /usr/lib/docker; ...
- 103
1
vote
0
answers
212
views
SSL certificates not being generated with Certbot for Nginx when using Docker
If I understand this correctly what you are required to do is to have a web server being hosted at a specific domain and then execute the certbot command with specific arguments.
I have created a ...
- 11
1
vote
1
answer
158
views
What comes first - Certbot or nginx?
I am trying to set up nginx to act as a reverse proxy on a small personal server; however, I am encountering some circular logic when I ask certbot to generate SSL certificates.
From what I can tell, ...
- 21
1
vote
1
answer
3k
views
Connection refused when generating a Let's Encrypt certificate for a subdomain
I'm trying to add a subdomain to my Let's Encrypt certificate but it's giving Connection refused.
The command I ran was sudo certbot --expand -d sub.domain.com
Certbot failed to authenticate some ...
- 33
0
votes
1
answer
202
views
Certbot frequently/always fails in cron with a hostname mismatch
Update 2023-05-06: Yep. Looks like CentOS7's NetworkManager overwriting /etc/resolv.conf. Haven't had an issue since disabling it.
Update 2023-04-20: It looks like CentOS7's NetworkManager is the ...
- 332
0
votes
2
answers
3k
views
How do I auto-renew a manual Certbot cert?
I manually set up a Certbot cert on an EC2 instance so that I could set up a wildcard cert.
Specifically, I used the following command (with the real domain, not example.com) to set up the manual ...
- 125
0
votes
1
answer
546
views
Why is it better to configure ACME client to trust private CA root certificate than to add the certificate to the CA store?
I am creating a self-hosted CA for my internal home network as a hobby project and to learn something new. I'm using Smallstep's open-source step-ca and step CLI.
After creating the CA, the next step ...
- 115
2
votes
2
answers
15k
views
How to remove Certbot completely ubuntu 20.04
I ran this command sudo dpkg -l *certbot* and I got this certbot and the version number listed in the terminal:
Next I ran this 2 commands sudo apt-get remove certbot and sudo apt autoremove and I ...
- 121
1
vote
0
answers
3k
views
PHP webpage downloads instead of opens in browser (nginx, php on debian10 server)
I have a server running Debian 10. I have installed nginx (1.18.0) and php and php-fpm (7.4.28). Following this guide https://landchad.net/index I was able to get html website with certification by ...
- 111
1
vote
0
answers
1k
views
Certbot 1.12.0 - How to stop ISRG Root X1 from being signed by DST Root CA X3?
I have an NGINX reverse proxy (nginx/1.21.4 & Debian 11) using certbot (v1.12.0) to get Lets Encrypt certificates for my site. Since the expiry of the DST cert, I had intermittent issues with ...
user1239807
0
votes
1
answer
450
views
Why is Snappy hanging on any command?
Server is AlmaLinux 8.5 (converted from CentOS).
I had been doing some work to add a new web site which included the usual dnf update and also installing php81-php-fpm and some associated packages. ...
- 103
1
vote
1
answer
2k
views
How can I fix cron letsencrypt certbot renew on Ubuntu (SSL3_GET_SERVER_CERTIFICATE, certificate verify failed)?
I have an nginx webserver running with letsencrypt certificates, updated through certbot renew. All on Ubuntu 14.04. Since 1st Oct 2021 I keep getting emails from cron that the certificates could not ...
0
votes
2
answers
319
views
Is it possible to re-enter the process in Linux?
I ran the certbot program to give out a certificate for a domain. During domain verification when the program was running my ssh session with the server crashed. Logging back to the server I wanted to ...
- 101
0
votes
1
answer
52
views
Certbot won't generate ssl for my mail-prefixed domains
I recently developed my first full-stack website, and I attempted to get it out there with a vps. My problem is, I can't seem to generate an ssl certificate for one of my domains. The www.website_name....
- 11
0
votes
1
answer
42
views
Is there anything like certbot (auto-renewal) for paid SSL certs? [closed]
For maximumum compatibility, I want to use simple DV PositiveSSL certs, similar to what Let's Encrypt does.
But the biggest pain in the neck is that I can't find anything which renews automatically ...
- 363
0
votes
0
answers
257
views
Should I continue to use Let's Encrypt after September 2021?
I am very curious about what the community thinks. After Sept 2021, they will no longer be co-signed by DST Root CA X3, and basically any platform from 2016 or older will not validate their ...
- 363
10
votes
2
answers
24k
views
What is the purpose of chain.pem files?
A general question about chaim.pem files; I used a csr obtained from my host, and used the Certbot from LetsEncrypt to generate a https cert; I used the following command
$ certbot certonly --manual -...
- 471
0
votes
1
answer
1k
views
Certbot fails to start nginx
I am using kernel 3.10 on CentOS 7. I have successfully installed CertBot 1.10.1 using alternative installation instructions as certbot-auto. I have manually added certbot-auto to autorun via systemd ...
- 192
1
vote
1
answer
2k
views
How to remove deprecated certbot-auto, but keep certbot and existing configuration
Blindly following an installation tutorial, I ended up with both certbot-auto (git clone to /etc/letsencrypt) and the actual certbot tool. Now I would really like to clean-up my Ubuntu installation ...
- 11
7
votes
3
answers
14k
views
How do I renew ALL certificates with certbot?
I don't want to only renew the certificates which are going to expire soon. (Whatever soon means). I want to renew all of them to make sure they will be on the same timing in the future.
I cannot find ...
- 457
3
votes
1
answer
423
views
certbot-auto fails to install automatic renewal?
I am using kernel 3.10 on CentOS 7. I have successfully installed CertBot 1.10.1 using alternative installation instructions as certbot-auto. Running certbot-auto successfully generated certificates ...
- 192
0
votes
1
answer
421
views
Enable ssl on my apache webdav using letsencrypt and certbot
I have a raspberry pi and use apache and webdav to serve photos to family and friends. I think I have a very basic configuration. I have a file 000-default.conf and a second webdav.conf. In order to ...
- 101
-1
votes
1
answer
406
views
can't connect to server after installing let's encrypt on centos 8
I'm trying to install let's encrypt on my centos 8 apache server. I created domain-site.conf file in /etc/httpd/conf.d/ directory with the following content (domain name is replaced with test):
<...
1
vote
1
answer
3k
views
How to renew LetsEncrypt SSL wildcard?
I have to renew my SSL certificate, but I want to use a wildcard certificate instead of my current simple SSL using LetsEncrypt also. I usually use this command below, but it doesn't work to update my ...
1
vote
0
answers
340
views
Generating SSL cert using certbot - multiple DNS entries
I currently have 2 DNS A records for main domain pointing to the different IP addresses. This is creating problems when I try to use certbot to generate Let's Encrypt's SSL certificate for my domain, ...
- 111
0
votes
2
answers
2k
views
Why can’t certbot auto revew wildcard SSL certs without a DNS plugin?
When I run certbot review, I get the following error.
An authentication script must be provided with --manual-auth-hook when
using the manual plugin non-interactively.
According to the docs, to ...
- 1,010
0
votes
1
answer
4k
views
certbot (Let’s Encrypt) for local domain NXDOMAIN looking up A for **.domain
I am trying to use certbot (Let’s Encrypt) for a local domain.
In /etc/hosts I have this.
127.0.0.1 myapp.whitebear.com
But when I run certbot (Let’s Encrypt) shows this error.
How can I set ...
- 715
0
votes
0
answers
23
views
nginx and certbot fails
Im trying to setup two sites on my nginx server.
pma (phpmyadmin) works as it should.
myhome.domain.tld - dosnt work.
here is the nginx.conf file.
user www-data;
worker_processes auto;
pid /run/...
- 45
0
votes
1
answer
2k
views
Renewing Certbot Let's Encrypt WILDCARD Certificates in Cron
I've been searching for a good solution to renew WILDCARD certificates from Let's Encrypt.
It's easy to set up a wildcard certificate:
Apache Debian 9 Stretch:
sudo apt-get install certbot python-...
- 121
1
vote
1
answer
681
views
Let's Encrypt + certbot - no /etc/letsencrypt/live dir
I tried to install certificates for three domains on Apache running under Linux 2 at Amazon AWS. One of the domains failed. Got this message:
Performing the following challenges:
http-01 challenge ...
- 111
0
votes
0
answers
895
views
Certbot on nginx not creating .well-known directory on website
When trying to install a certificate on an nginx server using sudo certbot certonly --webroot -w [my web root] -d [mywebsite] I get this error:
Domain: [mywebsite]
Type: unauthorized
...
1
vote
1
answer
2k
views
Configuring Certbot for my website: "Network is unreachable"
I am trying to add SSL certificate on my website, I use for this Cerbot from this guide. And when I am typing this command
sudo certbot --nginx
I see this error:
root@vps685363:~# sudo certbot --...
- 11
0
votes
1
answer
2k
views
certbot dns-cloudflare renewal issue
I am renewing my letsencrypt certificate using certbot with dns-cloudflare authenticator.
When I original set things up, I used this command:
$ certbot certonly --dns-cloudflare --dns-cloudflare-...
- 21
1
vote
1
answer
1k
views
Running Separate Docker Applications on Different Ports, one as Subdomain
I've rebuilt my personal website as a Dockerized chain as well as a colleagues' web app. Both projects are built using containers are displaying on two separate ports, one on port 80 and one on port ...
- 15
8
votes
2
answers
5k
views
certbot: error: unrecognized arguments: --dns-digitalocean-credentials
Trying to execute this command
sudo certbot certonly --dns-digitalocean --dns-digitalocean-credentials ~/.secrets/digitalocean.ini -d "*.example.com" --preferred-challenges dns --server https://acme-...
19
votes
1
answer
20k
views
How to add a domain to existing certificate generated by Let’s Encrypt/Certbot?
This question is a continuation of essentially the same question that was closed for being "off-topic" on Stack Overflow.
The OP's question:
I am just simply trying to add the domain test.example....
- 745
1
vote
0
answers
617
views
Certbot triggers nginx duplicate listen
I am trying to use Certbot with my nginx application, but every time I run sudo certbot --nginx and select "1: Attempt to reinstall this existing certificate" I get this error:
Deploying Certificate ...
- 111
0
votes
1
answer
3k
views
Let's Encrypt SSL Certificate Auto Renew with Certbot on Amazon Lightsail Server running Ubuntu 16.04.03 LTS
I'm trying to set up SSL Certificate auto renewal on my boss's Amazon LightSail server. It was previously set up by a past contractor who isn't being a lot of help. I am very unfamiliar with Let's ...
- 1
0
votes
0
answers
133
views
Certbot DNS Bind Address?
Is there a way to execute certbot such that the outgoing IP will be one of a set of interfaces on the machine instead of the default interface?
One of the messages certbot gives when using:
certbot ...
- 314
1
vote
1
answer
604
views
certbot certonly dynu (dynamic dns) timeout during connect even though the URL is accessible
I see other questions with the same error but their answers/resolutions do not work or apply to me.
My setup:
I have a server at home behind a router
There is no firewall on the server and it is ...
- 418
1
vote
2
answers
11k
views
Install a LetsEncrypt certificate with no DNS access
A client of mine has a domain, and pointed the A record of his domain to my machine, so I can develop a site. Usually, when I have the control of the DNS it's pretty easy to get the LetsEncrypt ...
- 113
0
votes
0
answers
668
views
Certbot Apache Augeas installation error
I have a Centos7 server with apache 2 and certbot installed. I ran an update that may have broken the configuration. I keep getting an error when trying to renew my cert. It says:
Saving debug ...
6
votes
1
answer
6k
views
How to mount Certificates from CertBot to use inside Docker Container
The official certbot ( https://certbot.eff.org ) tool to issue and renew certificates from Let's Encrypt saves the currently valid certificate to ${prefix}/archive/${domain}/certN.pem, where N is an ...
- 792
1
vote
3
answers
12k
views
letsencrypt/certbot systemd timer/service not working on Ubuntu 18.04
I installed certbot for nginx and the autorenew script set itself up automatically, but this is the email I receive, whenever it runs:
/home/foobar/certbot-renew.sh: 1: /home/foobar/certbot-renew.sh: ...
- 11
0
votes
1
answer
160
views
OpenVpn appliance: where to put cert files for HTTPS of builtin web server?
I successfully run OpenVpn appliance. It a VM Ware , to be precise.
I finally run certbot and so I got two pem files .
I was hoping that certbot could install the certificate files automatically, ...
- 620
0
votes
1
answer
537
views
Let's Encrypt and Bluehost
I'm having a problem with Bluehost hosting and my Let's Encrypt certificates I use for my website https://shinesolar.com.
It seems like three or four times a week (I can't see a pattern), something ...
- 123
0
votes
1
answer
433
views
local server with Let's Encrypt SSL certificate
I'm running a Confluence server in my local domain that I want to access from the outside using OpenVPN.
Since I want to use the Confluence app, I need to enable SSL and use a cert which is stored ...
- 353
0
votes
0
answers
953
views
Certbot can't install certificate on nginx
I have a mysterious error when I try to install a certificate on nginx with certbot. I get the following output when I run certbot --authenticator webroot --installer nginx:
nginx: [emerg] a ...
- 13