Questions tagged [letsencrypt]

Let's Encrypt is a service provided by the Internet Security Research Group (ISRG), a public benefit organization. Use this tag only for questions that are specific to Let's Encrypt features.

Filter by
Sorted by
Tagged with
0
votes
1answer
34 views

Apache and Let's Encrypt - Chain issues: Incorrect order, Extra certs

I have my webserver configured with Let's Encrypt (CentOS 6.10, Apache 2.2). When running a security analysis on my site with Qualsys's SSL Labs, I get the following warning: Chain issues: Incorrect ...
0
votes
0answers
13 views

How can I force Dovecot to refresh the certificate?

I am running Dovecot on a local CentOS 8 server using a LetsEncrypt certificate. ALl of that is working smoothly. A few days ago, I found I could no longer connect my mail clients, and that the ...
0
votes
0answers
33 views

Traefik ACME Azure DNS-01 getting HTTP 404

After having set-up Traefik to request certificates from Let's Encrypt using the DNS-01 challenge and AWS' Route53 as the DNS provider, I am now trying to do the same thing using Azure DNS as the ...
-1
votes
1answer
60 views

Enable SSL for any domain automatically

We are building a site builder and users can set their own domain. Is there any way to enable SSL for their domains automatically? For example, a wildcard letsencrypt certificate but not just for *....
-1
votes
1answer
38 views

can't connect to server after installing let's encrypt on centos 8

I'm trying to install let's encrypt on my centos 8 apache server. I created domain-site.conf file in /etc/httpd/conf.d/ directory with the following content (domain name is replaced with test): <...
0
votes
1answer
19 views

I can’t connect to any secured host which is protected with Lets Encrypt SSL on Windows 8.1

I have problems with Windows 8.1 where I can’t connect to any host which is protected with Lets Encrypt. IE 11 not working and display this page cannot be displayed. Executing code from CURL or C# ...
1
vote
1answer
39 views

How to renew LetsEncrypt SSL wildcard?

I have to renew my SSL certificate, but I want to use a wildcard certificate instead of my current simple SSL using LetsEncrypt also. I usually use this command below, but it doesn't work to update my ...
0
votes
0answers
52 views

Can't import Let's Encrypt certificate to Amazon Certificate Manager

I have been using certbot to renew my Let's Encrypt certificate every 2.5 months and import it to Amazon Certificate Manager manually through the AWS console to use with cloudfront. The command I use ...
0
votes
0answers
31 views

Let's encrypt, multiple webserver, one certificate

Im searching for a long time now. What is the best way to share a let's encrypt certificate across multiple webserver ? As example for a HA Cluster. One way i tought about was, to create a "dummy"...
0
votes
0answers
11 views

Cannot resolve http challenge of letsencrypt trhough certbot standalone

i'm trying to obtain a certificate using letsencrypt, i need it for securing mosquitto with mqtts. Since i dont need a webserver, i'm using certbot 0.39.0 in standalone mode certbot certonly --...
0
votes
0answers
9 views

letsencrypt/certbot ignores commands: Uses webroot instead of manual

I have domains for which I used the normal certonly with webroot in the past. I want to change this to DNS challenge. Hence I delete the domain with certbot delete. I confirmed there is no trace left ...
2
votes
1answer
124 views

How to delete one of the Subject Alternative Names from a Let's Encrypt certificate?

My (currently working) Let's encrypt certificate contains a bunch of Subject Alternative Names. One of these has to be deleted in order to renew the certificate because the domain is no longer ...
1
vote
1answer
126 views

ansible acme create account

I'd like to handle nginx let's encrypt certifs' renewal with ansible. So I've tried to use the module acme_certificate and acme_account. I have difficulty to understand how is created the acme account....
0
votes
0answers
840 views

Wildcard cert on Synology NAS

I'm running Synology DSM 6.2.2-24922 Update 4 and I wish to setup a wildcard cert with Let's Encrypt. It has been over a year since I've tried this and that time it didn't go so well. I can remember I ...
0
votes
2answers
175 views

Why can’t certbot auto revew wildcard SSL certs without a DNS plugin?

When I run certbot review, I get the following error. An authentication script must be provided with --manual-auth-hook when using the manual plugin non-interactively. According to the docs, to ...
0
votes
1answer
310 views

Why do “let's encrypt” certificates require root access?

Let's Encrypt puts their certificates for use under: /etc/letsencrypt/live/domain.com/ Why? I cannot access it without running my webserver with sudo priviledges (or changing the the file permissions ...
0
votes
0answers
41 views

How to obtain private key from LetsEncrypt trough Heroku?

I'm using Automated Certificate Management on Heroku through Letsencrypt. We're moving our app to a different hosting environment and would like to move the certificate to this new server as well. ...
0
votes
1answer
553 views

Renewing Certbot Let's Encrypt WILDCARD Certificates in Cron

I've been searching for a good solution to renew WILDCARD certificates from Let's Encrypt. It's easy to set up a wildcard certificate: Apache Debian 9 Stretch: sudo apt-get install certbot python-...
1
vote
2answers
866 views

Thunderbird not updating certificate, keeps using old one and saying it's expired

I have an email server where I have Let's Encrypt SSL certs, expiring every 3 months, and certbot automatically renews it. If I access the server through a website in the browser, the correct and ...
0
votes
0answers
49 views

multiple Let's Encrypt certificates cause 443 conflict

I added three Let'sEncrypt certificates for three domains with their own distinct websites. The certificates show as follows: Found the following certs: Certificate Name: mydomain1.info Domains: ...
1
vote
0answers
535 views

Client SSL certificate verify error in Nginx

I was setting up a mutual authentication in nginx and generated certificates from "Let's Encrypt". Server side SSL is working fine. But after enabling the client side certificate verification, it ...
1
vote
1answer
13k views

Website spits out PR_CONNECT_RESET_ERROR in firefox's incognito

So I have a site that uses letsencrypt and ssl works fine when I'm browsing my site in firefox. The moment I try browsing my site using incognito mode in firefox my browser throws this secure ...
1
vote
0answers
167 views

High delays with HTTPS only (!) in internal network

I am really desperate. Since about 3 months I have a problem and could not find a solution yet. The problem first occured with a media server (direct access - no reverse proxy between) I am using. ...
0
votes
0answers
218 views

Certbot on nginx not creating .well-known directory on website

When trying to install a certificate on an nginx server using sudo certbot certonly --webroot -w [my web root] -d [mywebsite] I get this error: Domain: [mywebsite] Type: unauthorized ...
0
votes
0answers
158 views

Enable letsencrypt for Gitlab CE Pages

I run a self-hosted Gitlab CE server (12.1.3-ce.0) and try to enable SSL support for Pages, but with no success. I enable letsencrypt for Pages on: "Admin area --> Settings --> Preferences --> Pages ",...
0
votes
1answer
427 views

certbot dns-cloudflare renewal issue

I am renewing my letsencrypt certificate using certbot with dns-cloudflare authenticator. When I original set things up, I used this command: $ certbot certonly --dns-cloudflare --dns-cloudflare-...
0
votes
1answer
287 views

Setting up an Apache Reverse Proxy to access internal apps with multiple domains on the apache config file and enabling SSL using lets encrypt

Many of the ubuntu server tutorials online only show you how to setup a reverse proxy but not explain how to set it up with SSL lets encrypt and setting it up along with other domains on the server. ...
2
votes
1answer
54 views

Trying to install Let's Encrypt certificate on CentOS 6 and Apache but can’t get a connection working

I have finally succumbed to the pressure of using SSL for my website that has been up since 1996… getting a certificate used to be expensive, error-prone and time-intensive back then… Today it's only ...
0
votes
1answer
70 views

Edge does not show/use TLS/SSL until refresh

We have a webapp that uses 'Let's encrypt' certificates (and the nginx webserver). The certificates are automatically renewed (a cron job runs every day and we get a new cert every 2 or 3 months). ...
0
votes
2answers
861 views

Edit Certbot hooks (letsencrypt)

I have a few websites domains handled by Nginx and I am using Letsencrypt (certbot) to manage certificates. I currently have pre-hooks and post-hooks for every domain : /etc/init.d/nginx stop /etc/...
1
vote
1answer
633 views

NGINX certificate issue : binding to port 80: Could not bind to IPv4 or IPv6

I have an NGINX webserver and I'm using Certbot (letsencrypt) to renew my websites certificates. When I try to renew certificates I have this error : binding to port 80: Could not bind to IPv4 or ...
1
vote
1answer
2k views

traefik not redirecting to https

I'm trying to set up a home automation server, with docker, letsencrypt and traefik. Also using duckdns for ddns. I have some other containers like sickrage and so on on the same machine. I've opened ...
8
votes
2answers
775 views

certbot: error: unrecognized arguments: --dns-digitalocean-credentials

Trying to execute this command sudo certbot certonly --dns-digitalocean --dns-digitalocean-credentials ~/.secrets/digitalocean.ini -d "*.example.com" --preferred-challenges dns --server https://acme-...
0
votes
0answers
51 views

SSL not working

I've a nginx server on aws ec2 instance. I've successfully setup ssl and config for ssl in my nginx. If I check my ssl setup using websites like: https://whynopadlock.com https://www.sslshopper.com/...
0
votes
1answer
239 views

How can I configure SSL certificates on Digital Ocean server to host ReactJS app connecting to GoLang server on the same Droplet?

I am hosting a chess application website on a Digital Ocean Droplet. On the server, I am serving up a static React app using pm2. I am also running a GoLang server with a single Websocket endpoint ...
4
votes
1answer
5k views

How to add a domain to existing certificate generated by Let’s Encrypt/Certbot?

This question is a continuation of essentially the same question that was closed for being "off-topic" on Stack Overflow. The OP's question: I am just simply trying to add the domain test.example....
0
votes
0answers
67 views

How to change the directory in the httpd.conf file to the main index file from OpenEdX?

my main goal is to setup a secure SSL Connection for my Open EdX System. I am using the Open EdX Version from Bitnami. To get a certified SSL certificate I want to use Let's Encrypt. Bitnami already ...
0
votes
1answer
1k views

Let's Encrypt renew failing

I'm trying to renew my website certificate with Let's Encrypt and Apache2. But it returns me that error: sudo certbot --apache renew Saving debug log to /var/log/letsencrypt/letsencrypt.log - - - - -...
0
votes
1answer
2k views

Let's Encrypt SSL Certificate Auto Renew with Certbot on Amazon Lightsail Server running Ubuntu 16.04.03 LTS

I'm trying to set up SSL Certificate auto renewal on my boss's Amazon LightSail server. It was previously set up by a past contractor who isn't being a lot of help. I am very unfamiliar with Let's ...
1
vote
1answer
506 views

Nextcloud share not working in nginx reverse proxy

I have an nginx reverse proxy set up well with the jwilder image and letsencrypt. It all works well and i have several containers running as expected. However i have now created a nextcloud container ...
2
votes
1answer
181 views

Cannot Renew Apache LetsEncrypt Cert

Ok so I forgot to renew my Let's Encrypt Server Certificate, and well I just can't startup Apache. Here is the present CentOS is giving me instead: service httpd status Redirecting to /bin/systemctl ...
0
votes
1answer
46 views

Let's Encrypt certificate smooth update

Let's Encrypt certificates expire after 90 days. There are tools for automatic update (replace expiring certificate with fresh one which is valid next 90 days). Is there a method to make this change ...
0
votes
2answers
1k views

Updating an existing certbot certificate with a new domain for NGINX

I have this certificate root@place:# certbot certificates Saving debug log to /var/log/letsencrypt/letsencrypt.log ------------------------------------------------------------------------------- ...
0
votes
2answers
2k views

Install a LetsEncrypt certificate with no DNS access

A client of mine has a domain, and pointed the A record of his domain to my machine, so I can develop a site. Usually, when I have the control of the DNS it's pretty easy to get the LetsEncrypt ...
0
votes
0answers
288 views

Certbot Apache Augeas installation error

I have a Centos7 server with apache 2 and certbot installed. I ran an update that may have broken the configuration. I keep getting an error when trying to renew my cert. It says: Saving debug ...
0
votes
0answers
43 views

Nginx Varnish Configuration issue

I'm trying to install varnish with ssl from this link: https://www.linode.com/docs/websites/varnish/use-varnish-and-nginx-to-serve-wordpress-over-ssl-and-http-on-debian-8/ I did everything like post ...
3
votes
0answers
2k views

Unable to Register Gitlab Runner (Certificate Failed)

I have a gitlab instance running on my home network. The hostname git.example.com is an IPv6 only dns record, and the nginx server is only listening on [::]. When I try to register the runner with ...
3
votes
0answers
3k views

pfSense, nginx reverse proxy and letsencrypt

I need help configuring letsencrypt to work with an nginx reverse proxy and pfSense firewall / gateway. Setup is as follows: -> 192.168.0.4 ...
0
votes
1answer
75 views

Security, recovery etc of Letsencrypt certificates

I'm looking for a description how to property secure, backup, restore etc Letsencrypt certificates, and how to recover if a server containing such certificates was hacked. Does such a description ...
3
votes
1answer
2k views

How to mount Certificates from CertBot to use inside Docker Container

The official certbot ( https://certbot.eff.org ) tool to issue and renew certificates from Let's Encrypt saves the currently valid certificate to ${prefix}/archive/${domain}/certN.pem, where N is an ...