Questions tagged [certbot]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
321 views

How do I auto-renew a manual Certbot cert?

I manually set up a Certbot cert on an EC2 instance so that I could set up a wildcard cert. Specifically, I used the following command (with the real domain, not example.com) to set up the manual ...
user avatar
0 votes
1 answer
58 views

Why is it better to configure ACME client to trust private CA root certificate than to add the certificate to the CA store?

I am creating a self-hosted CA for my internal home network as a hobby project and to learn something new. I'm using Smallstep's open-source step-ca and step CLI. After creating the CA, the next step ...
user avatar
  • 115
1 vote
2 answers
1k views

How to remove Certbot completely ubuntu 20.04

I ran this command sudo dpkg -l *certbot* and I got this certbot and the version number listed in the terminal: Next I ran this 2 commands sudo apt-get remove certbot and sudo apt autoremove and I ...
user avatar
  • 111
1 vote
0 answers
549 views

PHP webpage downloads instead of opens in browser (nginx, php on debian10 server)

I have a server running Debian 10. I have installed nginx (1.18.0) and php and php-fpm (7.4.28). Following this guide https://landchad.net/index I was able to get html website with certification by ...
user avatar
0 votes
0 answers
452 views

Certbot 1.12.0 - How to stop ISRG Root X1 from being signed by DST Root CA X3?

I have an NGINX reverse proxy (nginx/1.21.4 & Debian 11) using certbot (v1.12.0) to get Lets Encrypt certificates for my site. Since the expiry of the DST cert, I had intermittent issues with ...
user avatar
  • 13
0 votes
0 answers
49 views

On Windows, Apache service fails to start: SSLCertificateFile: Invalid file path

On Windows Server 2019, my Apache 2.4 service fails to start. The application logs tells me: The Apache service named reported the following error: SSLCertificateFile: Invalid file path C:\Certbot\...
user avatar
  • 137
0 votes
1 answer
193 views

Why is Snappy hanging on any command?

Server is AlmaLinux 8.5 (converted from CentOS). I had been doing some work to add a new web site which included the usual dnf update and also installing php81-php-fpm and some associated packages. ...
user avatar
  • 103
1 vote
1 answer
1k views

How can I fix cron letsencrypt certbot renew on Ubuntu (SSL3_GET_SERVER_CERTIFICATE, certificate verify failed)?

I have an nginx webserver running with letsencrypt certificates, updated through certbot renew. All on Ubuntu 14.04. Since 1st Oct 2021 I keep getting emails from cron that the certificates could not ...
user avatar
0 votes
2 answers
86 views

Is it possible to re-enter the process in Linux?

I ran the certbot program to give out a certificate for a domain. During domain verification when the program was running my ssh session with the server crashed. Logging back to the server I wanted to ...
user avatar
0 votes
1 answer
32 views

Certbot won't generate ssl for my mail-prefixed domains

I recently developed my first full-stack website, and I attempted to get it out there with a vps. My problem is, I can't seem to generate an ssl certificate for one of my domains. The www.website_name....
user avatar
  • 11
0 votes
1 answer
26 views

Is there anything like certbot (auto-renewal) for paid SSL certs? [closed]

For maximumum compatibility, I want to use simple DV PositiveSSL certs, similar to what Let's Encrypt does. But the biggest pain in the neck is that I can't find anything which renews automatically ...
user avatar
  • 353
0 votes
0 answers
249 views

Should I continue to use Let's Encrypt after September 2021?

I am very curious about what the community thinks. After Sept 2021, they will no longer be co-signed by DST Root CA X3, and basically any platform from 2016 or older will not validate their ...
user avatar
  • 353
6 votes
2 answers
7k views

What is the purpose of chain.pem files?

A general question about chaim.pem files; I used a csr obtained from my host, and used the Certbot from LetsEncrypt to generate a https cert; I used the following command $ certbot certonly --manual -...
user avatar
  • 387
0 votes
1 answer
472 views

Certbot fails to start nginx

I am using kernel 3.10 on CentOS 7. I have successfully installed CertBot 1.10.1 using alternative installation instructions as certbot-auto. I have manually added certbot-auto to autorun via systemd ...
user avatar
  • 182
0 votes
1 answer
795 views

How to remove deprecated certbot-auto, but keep certbot and existing configuration

Blindly following an installation tutorial, I ended up with both certbot-auto (git clone to /etc/letsencrypt) and the actual certbot tool. Now I would really like to clean-up my Ubuntu installation ...
user avatar
  • 1
1 vote
2 answers
1k views

How do I renew ALL certificates with certbot?

I don't want to only renew the certificates which are going to expire soon. (Whatever soon means). I want to renew all of them to make sure they will be on the same timing in the future. I cannot find ...
user avatar
3 votes
1 answer
229 views

certbot-auto fails to install automatic renewal?

I am using kernel 3.10 on CentOS 7. I have successfully installed CertBot 1.10.1 using alternative installation instructions as certbot-auto. Running certbot-auto successfully generated certificates ...
user avatar
  • 182
0 votes
1 answer
165 views

Enable ssl on my apache webdav using letsencrypt and certbot

I have a raspberry pi and use apache and webdav to serve photos to family and friends. I think I have a very basic configuration. I have a file 000-default.conf and a second webdav.conf. In order to ...
user avatar
  • 101
-1 votes
1 answer
217 views

can't connect to server after installing let's encrypt on centos 8

I'm trying to install let's encrypt on my centos 8 apache server. I created domain-site.conf file in /etc/httpd/conf.d/ directory with the following content (domain name is replaced with test): <...
user avatar
1 vote
1 answer
663 views

How to renew LetsEncrypt SSL wildcard?

I have to renew my SSL certificate, but I want to use a wildcard certificate instead of my current simple SSL using LetsEncrypt also. I usually use this command below, but it doesn't work to update my ...
user avatar
1 vote
0 answers
183 views

Generating SSL cert using certbot - multiple DNS entries

I currently have 2 DNS A records for main domain pointing to the different IP addresses. This is creating problems when I try to use certbot to generate Let's Encrypt's SSL certificate for my domain, ...
user avatar
0 votes
2 answers
654 views

Why can’t certbot auto revew wildcard SSL certs without a DNS plugin?

When I run certbot review, I get the following error. An authentication script must be provided with --manual-auth-hook when using the manual plugin non-interactively. According to the docs, to ...
user avatar
0 votes
1 answer
2k views

certbot (Let’s Encrypt) for local domain NXDOMAIN looking up A for **.domain

I am trying to use certbot (Let’s Encrypt) for a local domain. In /etc/hosts I have this. 127.0.0.1 myapp.whitebear.com But when I run certbot (Let’s Encrypt) shows this error. How can I set ...
user avatar
  • 497
0 votes
0 answers
21 views

nginx and certbot fails

Im trying to setup two sites on my nginx server. pma (phpmyadmin) works as it should. myhome.domain.tld - dosnt work. here is the nginx.conf file. user www-data; worker_processes auto; pid /run/...
user avatar
  • 35
0 votes
1 answer
1k views

Renewing Certbot Let's Encrypt WILDCARD Certificates in Cron

I've been searching for a good solution to renew WILDCARD certificates from Let's Encrypt. It's easy to set up a wildcard certificate: Apache Debian 9 Stretch: sudo apt-get install certbot python-...
user avatar
0 votes
1 answer
229 views

Let's Encrypt + certbot - no /etc/letsencrypt/live dir

I tried to install certificates for three domains on Apache running under Linux 2 at Amazon AWS. One of the domains failed. Got this message: Performing the following challenges: http-01 challenge ...
user avatar
0 votes
0 answers
435 views

Certbot on nginx not creating .well-known directory on website

When trying to install a certificate on an nginx server using sudo certbot certonly --webroot -w [my web root] -d [mywebsite] I get this error: Domain: [mywebsite] Type: unauthorized ...
user avatar
0 votes
1 answer
1k views

Configuring Certbot for my website: "Network is unreachable"

I am trying to add SSL certificate on my website, I use for this Cerbot from this guide. And when I am typing this command sudo certbot --nginx I see this error: root@vps685363:~# sudo certbot --...
user avatar
  • 1
0 votes
1 answer
819 views

certbot dns-cloudflare renewal issue

I am renewing my letsencrypt certificate using certbot with dns-cloudflare authenticator. When I original set things up, I used this command: $ certbot certonly --dns-cloudflare --dns-cloudflare-...
user avatar
  • 11
0 votes
1 answer
729 views

Running Separate Docker Applications on Different Ports, one as Subdomain

I've rebuilt my personal website as a Dockerized chain as well as a colleagues' web app. Both projects are built using containers are displaying on two separate ports, one on port 80 and one on port ...
user avatar
8 votes
2 answers
3k views

certbot: error: unrecognized arguments: --dns-digitalocean-credentials

Trying to execute this command sudo certbot certonly --dns-digitalocean --dns-digitalocean-credentials ~/.secrets/digitalocean.ini -d "*.example.com" --preferred-challenges dns --server https://acme-...
user avatar
10 votes
1 answer
10k views

How to add a domain to existing certificate generated by Let’s Encrypt/Certbot?

This question is a continuation of essentially the same question that was closed for being "off-topic" on Stack Overflow. The OP's question: I am just simply trying to add the domain test.example....
user avatar
1 vote
0 answers
286 views

Certbot triggers nginx duplicate listen

I am trying to use Certbot with my nginx application, but every time I run sudo certbot --nginx and select "1: Attempt to reinstall this existing certificate" I get this error: Deploying Certificate ...
user avatar
0 votes
1 answer
3k views

Let's Encrypt SSL Certificate Auto Renew with Certbot on Amazon Lightsail Server running Ubuntu 16.04.03 LTS

I'm trying to set up SSL Certificate auto renewal on my boss's Amazon LightSail server. It was previously set up by a past contractor who isn't being a lot of help. I am very unfamiliar with Let's ...
user avatar
0 votes
0 answers
66 views

Certbot DNS Bind Address?

Is there a way to execute certbot such that the outgoing IP will be one of a set of interfaces on the machine instead of the default interface? One of the messages certbot gives when using: certbot ...
user avatar
  • 314
1 vote
1 answer
489 views

certbot certonly dynu (dynamic dns) timeout during connect even though the URL is accessible

I see other questions with the same error but their answers/resolutions do not work or apply to me. My setup: I have a server at home behind a router There is no firewall on the server and it is ...
user avatar
1 vote
2 answers
5k views

Install a LetsEncrypt certificate with no DNS access

A client of mine has a domain, and pointed the A record of his domain to my machine, so I can develop a site. Usually, when I have the control of the DNS it's pretty easy to get the LetsEncrypt ...
user avatar
0 votes
0 answers
476 views

Certbot Apache Augeas installation error

I have a Centos7 server with apache 2 and certbot installed. I ran an update that may have broken the configuration. I keep getting an error when trying to renew my cert. It says: Saving debug ...
user avatar
5 votes
1 answer
4k views

How to mount Certificates from CertBot to use inside Docker Container

The official certbot ( https://certbot.eff.org ) tool to issue and renew certificates from Let's Encrypt saves the currently valid certificate to ${prefix}/archive/${domain}/certN.pem, where N is an ...
user avatar
  • 692
1 vote
3 answers
9k views

letsencrypt/certbot systemd timer/service not working on Ubuntu 18.04

I installed certbot for nginx and the autorenew script set itself up automatically, but this is the email I receive, whenever it runs: /home/foobar/certbot-renew.sh: 1: /home/foobar/certbot-renew.sh: ...
user avatar
0 votes
1 answer
90 views

OpenVpn appliance: where to put cert files for HTTPS of builtin web server?

I successfully run OpenVpn appliance. It a VM Ware , to be precise. I finally run certbot and so I got two pem files . I was hoping that certbot could install the certificate files automatically, ...
user avatar
  • 474
0 votes
1 answer
402 views

Let's Encrypt and Bluehost

I'm having a problem with Bluehost hosting and my Let's Encrypt certificates I use for my website https://shinesolar.com. It seems like three or four times a week (I can't see a pattern), something ...
user avatar
0 votes
1 answer
341 views

local server with Let's Encrypt SSL certificate

I'm running a Confluence server in my local domain that I want to access from the outside using OpenVPN. Since I want to use the Confluence app, I need to enable SSL and use a cert which is stored ...
user avatar
  • 311
0 votes
0 answers
716 views

Certbot can't install certificate on nginx

I have a mysterious error when I try to install a certificate on nginx with certbot. I get the following output when I run certbot --authenticator webroot --installer nginx: nginx: [emerg] a ...
user avatar
0 votes
1 answer
374 views

Failure installing `linux-cloud-tools-common` on Ubuntu 14.04

I'm trying to set up Certbot on an Ubuntu machine but getting the following error when trying to run apt-get install software-properties-common: Setting up linux-cloud-tools-common (3.13.0-46.77) ... ...
user avatar
  • 101
5 votes
2 answers
2k views

certbot-auto ImportError: No module named _ssl

Running certbot-auto gives this output: Error: couldn't get currently installed version for ... File "/opt/eff.org/certbot/venv/local/lib/python2.7/site-packages/cryptography/hazmat/bindings/...
user avatar
  • 271
1 vote
0 answers
1k views

Why does certbot (letsencrypt) recieve a 403 forbidden?

Trying to create certificates for my domain on a nginx webserver. When certbot is ran it gives me a 403 unauthorized error since it cannot see the file on the domain for some reason, but if I ...
user avatar
  • 163
0 votes
2 answers
2k views

Error When Setting up SSL on Alternate Port

I have a web server running on a Raspberry Pi. I am running stunnel on port 443, so I have been working to move my web server to port 8443. I use Let's Encrypt (Certbot) for my SSL certificates, and ...
user avatar
1 vote
1 answer
1k views

Letsencrypt Timeout reasons

I am having problems when renewing my letsencrypt certificate. I am using nginx and certbot for renewal. Output is the following: Attempting to renew cert from /etc/letsencrypt/renewal/example.com....
user avatar
1 vote
2 answers
8k views

How do I stop DeprecationWarning for Python 2.6?

I have to run this command daily in a cron to refresh certifications. # /root/certbot-auto renew --quiet /root/.local/share/letsencrypt/lib/python2.6/site-packages/cryptography/__init__.py:26: ...
user avatar
  • 5,426