Questions tagged [letsencrypt]
Let's Encrypt is a service provided by the Internet Security Research Group (ISRG), a public benefit organization. Use this tag only for questions that are specific to Let's Encrypt features.
109
questions
0
votes
0
answers
73
views
SSL certificate mismatch within home network
I use Home Automation to control my heating, lights etc.
I installed a letsencrypt cert and I use a custom domain name to access it securely.
https://home.mydomain.tld/
This uses port 443 natively.
...
- 53
1
vote
1
answer
68
views
What comes first - Certbot or nginx?
I am trying to set up nginx to act as a reverse proxy on a small personal server; however, I am encountering some circular logic when I ask certbot to generate SSL certificates.
From what I can tell, ...
- 21
1
vote
1
answer
2k
views
Connection refused when generating a Let's Encrypt certificate for a subdomain
I'm trying to add a subdomain to my Let's Encrypt certificate but it's giving Connection refused.
The command I ran was sudo certbot --expand -d sub.domain.com
Certbot failed to authenticate some ...
- 33
0
votes
0
answers
518
views
trouble with my first ssl certificate
i'm struggling to get my first ssl certificate to work (but i seem to be at least recieving my certificate).
an example of some output from my docker-compose up is below
ubuntu@ip-172-31-93-63:~/doom ...
- 21
0
votes
0
answers
132
views
Serve SSL certificate directly from PostFix / Dovecot to Thunderbird WITHOUT webserver
Webserver host: web.example.nl
Mailserver host: mail.example.nl
Mail user: [email protected] (letsencrypt cert issued for this domain)
I am trying to setup a new mailserver on mail.example.nl that doesn't ...
- 11
0
votes
1
answer
128
views
NET ERR CERT COMMON NAME INVALID on subdomain, Let's Encrypt
I'm working on new website and use HTTPS. From my personal desktop computer and iPhone everything is working fine, but my friend from another country experiencing the following issue:
NET ERR CERT ...
- 175
1
vote
2
answers
10k
views
Unable to get local issuer certificate error with unusual certificate chain
I've encountered a frustrating issue with my SSL implementation due to what may be related to Let's Encrypts CA-X3 certificate expiration.
Forewarned that I am a developer with limited understanding ...
- 56
0
votes
1
answer
348
views
Why is it better to configure ACME client to trust private CA root certificate than to add the certificate to the CA store?
I am creating a self-hosted CA for my internal home network as a hobby project and to learn something new. I'm using Smallstep's open-source step-ca and step CLI.
After creating the CA, the next step ...
- 115
0
votes
1
answer
688
views
Updating SSL Certs with PKCS12 or PEM via Bash Script
I currently have my pi-hole setup to request an SSL cert from ZeroSSL using Acme.sh, this works quite well.
I then have to cat the two cert and key files into one, and then relaunch the lighttpd ...
- 91
1
vote
1
answer
2k
views
Binding a certificate to an azure function app
Background
I’m attempting to teach myself some of the basic ins-and-outs of Azure. I’ve got a couple of domains that I’m now hosting the DNS for on Azure. From there, I’ve created a subdomain for one ...
- 11
1
vote
0
answers
1k
views
Certbot 1.12.0 - How to stop ISRG Root X1 from being signed by DST Root CA X3?
I have an NGINX reverse proxy (nginx/1.21.4 & Debian 11) using certbot (v1.12.0) to get Lets Encrypt certificates for my site. Since the expiry of the DST cert, I had intermittent issues with ...
user1239807
0
votes
0
answers
40
views
How to fix SSL issue from 30-September-2021 [duplicate]
After having this SSL error, I have search and know that it start from 30/09/2021, cause from let's encrypt.
I tried updating my windows, updating chrome, manually downloaded and added some ...
- 1,243
1
vote
1
answer
2k
views
How can I fix cron letsencrypt certbot renew on Ubuntu (SSL3_GET_SERVER_CERTIFICATE, certificate verify failed)?
I have an nginx webserver running with letsencrypt certificates, updated through certbot renew. All on Ubuntu 14.04. Since 1st Oct 2021 I keep getting emails from cron that the certificates could not ...
0
votes
0
answers
378
views
wget timeout on Let'Encrypt certificate server
I'am on a CentOS server trying to understand why I cannot connect to another website that is exposing a Let'sEncrypt R3 issued certificate.
# cat /etc/centos-release
CentOS Linux release 7.9.2009 (...
- 101
0
votes
0
answers
283
views
New TortoiseSVN Certificate Error for LetsEncrypt signed server
Related to this old question from 2011, but a new problem:
Tortoise SVN Error Validating Server Certificate
We have an SVN server that has a certificate that is signed by LetsEncrypt.
Until this week, ...
- 254
40
votes
4
answers
19k
views
cURL on Ubuntu 14: all Let's Encrypt certificates are expired (error 60)
Today out of a sudden all HTTPS requests, that my Ubuntu 14 server sends to websites with SSL certificates issued by Let's Encrypt, started to fail. The error produced by cURL is:
curl: (60) SSL ...
- 1,101
0
votes
1
answer
1k
views
How to redirect an IP address to a machine/hostname in an Intranet?
I have a couple of intranet applications at home like an NVR server and a Plex Media Server. Each are installed in a FreeNAS jail with corresponding IP addresses like 192.168.0.2 with hostname mynvr ...
- 105
0
votes
0
answers
46
views
Is it bad to use a let's encrypt certificate outside its scope?
I have a let's encrypt certificate issued for my website,
Since I have this certificate's private key, I could use it to sign other stuff like files, etc...
(Assuming I don't leak the private key, of ...
- 335
0
votes
1
answer
431
views
Nginx configuration with wildcard LetsEncrypt certificate for sub domains
I'd like to configure nginx with wildcard LetsEncrypt certificate for dynamic sub domains - domains that will be emulated by web application.
Right now I have the following "static" domains:
...
- 175
0
votes
1
answer
128
views
Let's Encrypt domain A loading certificate of domain B
I have a server with nginx, and there are two websites there: A and B.
Site A is an old one and it's been working with SSL certificate Let's Encrypt via certbot package and command.
Tonight I decided ...
- 383
0
votes
0
answers
255
views
Should I continue to use Let's Encrypt after September 2021?
I am very curious about what the community thinks. After Sept 2021, they will no longer be co-signed by DST Root CA X3, and basically any platform from 2016 or older will not validate their ...
- 373
8
votes
2
answers
18k
views
What is the purpose of chain.pem files?
A general question about chaim.pem files; I used a csr obtained from my host, and used the Certbot from LetsEncrypt to generate a https cert; I used the following command
$ certbot certonly --manual -...
- 441
4
votes
2
answers
9k
views
How do I renew ALL certificates with certbot?
I don't want to only renew the certificates which are going to expire soon. (Whatever soon means). I want to renew all of them to make sure they will be on the same timing in the future.
I cannot find ...
- 417
1
vote
1
answer
879
views
Add a subdomain redirect in Apache to a Nextcloud instance at a local IP
I have a Raspberry Pi serving a couple of static websites through Apache and doing some other stuff.
Now I've been gifted another Raspberry, so I installed NextCloudPi on it, and I would like to ...
- 183
0
votes
1
answer
2k
views
HTTPS connection refused after redirect on my Nginx server
I’m unable to get to my web server via HTTPS. If I try and connect on port 80 the connection is redirected to port 443 as a quick wget shows:
--2021-01-04 22:45:51-- http://corballis.co.uk/
Resolving ...
- 11
0
votes
1
answer
350
views
Enable ssl on my apache webdav using letsencrypt and certbot
I have a raspberry pi and use apache and webdav to serve photos to family and friends. I think I have a very basic configuration. I have a file 000-default.conf and a second webdav.conf. In order to ...
- 101
1
vote
1
answer
2k
views
Apache and Let's Encrypt - Chain issues: Incorrect order, Extra certs
I have my webserver configured with Let's Encrypt (CentOS 6.10, Apache 2.2). When running a security analysis on my site with Qualsys's SSL Labs, I get the following warning:
Chain issues: Incorrect ...
- 1,011
-1
votes
1
answer
80
views
Enable SSL for any domain automatically
We are building a site builder and users can set their own domain. Is there any way to enable SSL for their domains automatically?
For example, a wildcard letsencrypt certificate but not just for *....
- 113
-1
votes
1
answer
359
views
can't connect to server after installing let's encrypt on centos 8
I'm trying to install let's encrypt on my centos 8 apache server. I created domain-site.conf file in /etc/httpd/conf.d/ directory with the following content (domain name is replaced with test):
<...
0
votes
1
answer
95
views
I can’t connect to any secured host which is protected with Lets Encrypt SSL on Windows 8.1
I have problems with Windows 8.1 where I can’t connect to any host which is protected with Lets Encrypt.
IE 11 not working and display this page cannot be displayed.
Executing code from CURL or C# ...
- 141
1
vote
1
answer
2k
views
How to renew LetsEncrypt SSL wildcard?
I have to renew my SSL certificate, but I want to use a wildcard certificate instead of my current simple SSL using LetsEncrypt also. I usually use this command below, but it doesn't work to update my ...
1
vote
0
answers
478
views
Can't import Let's Encrypt certificate to Amazon Certificate Manager
I have been using certbot to renew my Let's Encrypt certificate every 2.5 months and import it to Amazon Certificate Manager manually through the AWS console to use with cloudfront. The command I use ...
- 105
0
votes
0
answers
48
views
Let's encrypt, multiple webserver, one certificate
Im searching for a long time now.
What is the best way to share a let's encrypt certificate across multiple webserver ?
As example for a HA Cluster.
One way i tought about was, to create a "dummy"...
- 275
3
votes
1
answer
1k
views
How to delete one of the Subject Alternative Names from a Let's Encrypt certificate?
My (currently working) Let's encrypt certificate contains a bunch of Subject Alternative Names. One of these has to be deleted in order to renew the certificate because the domain is no longer ...
- 506
1
vote
1
answer
421
views
ansible acme create account
I'd like to handle nginx let's encrypt certifs' renewal with ansible. So I've tried to use the module acme_certificate and acme_account. I have difficulty to understand how is created the acme account....
0
votes
0
answers
1k
views
Wildcard cert on Synology NAS
I'm running Synology DSM 6.2.2-24922 Update 4 and I wish to setup a wildcard cert with Let's Encrypt. It has been over a year since I've tried this and that time it didn't go so well. I can remember I ...
- 209
0
votes
2
answers
1k
views
Why can’t certbot auto revew wildcard SSL certs without a DNS plugin?
When I run certbot review, I get the following error.
An authentication script must be provided with --manual-auth-hook when
using the manual plugin non-interactively.
According to the docs, to ...
- 942
1
vote
1
answer
2k
views
Why do "let's encrypt" certificates require root access?
Let's Encrypt puts their certificates for use under: /etc/letsencrypt/live/domain.com/
Why? I cannot access it without running my webserver with sudo priviledges (or changing the the file permissions ...
- 1,215
0
votes
0
answers
65
views
How to obtain private key from LetsEncrypt trough Heroku?
I'm using Automated Certificate Management on Heroku through Letsencrypt.
We're moving our app to a different hosting environment and would like to move the certificate to this new server as well.
...
- 101
0
votes
1
answer
2k
views
Renewing Certbot Let's Encrypt WILDCARD Certificates in Cron
I've been searching for a good solution to renew WILDCARD certificates from Let's Encrypt.
It's easy to set up a wildcard certificate:
Apache Debian 9 Stretch:
sudo apt-get install certbot python-...
- 103
3
votes
5
answers
6k
views
Thunderbird not updating certificate, keeps using old one and saying it's expired
I have an email server where I have Let's Encrypt SSL certs, expiring every 3 months, and certbot automatically renews it. If I access the server through a website in the browser, the correct and ...
- 165
1
vote
0
answers
1k
views
Client SSL certificate verify error in Nginx
I was setting up a mutual authentication in nginx and generated certificates from "Let's Encrypt".
Server side SSL is working fine.
But after enabling the client side certificate verification, it ...
3
votes
2
answers
16k
views
Website spits out PR_CONNECT_RESET_ERROR in firefox's incognito
So I have a site that uses letsencrypt and ssl works fine when I'm browsing my site in firefox. The moment I try browsing my site using incognito mode in firefox my browser throws this secure ...
- 153
1
vote
0
answers
283
views
High delays with HTTPS only (!) in internal network
I am really desperate. Since about 3 months I have a problem and could not find a solution yet. The problem first occured with a media server (direct access - no reverse proxy between) I am using.
...
- 11
0
votes
0
answers
812
views
Certbot on nginx not creating .well-known directory on website
When trying to install a certificate on an nginx server using sudo certbot certonly --webroot -w [my web root] -d [mywebsite] I get this error:
Domain: [mywebsite]
Type: unauthorized
...
0
votes
0
answers
331
views
Enable letsencrypt for Gitlab CE Pages
I run a self-hosted Gitlab CE server (12.1.3-ce.0) and try to enable SSL support for Pages, but with no success. I enable letsencrypt for Pages on:
"Admin area --> Settings --> Preferences --> Pages ",...
0
votes
1
answer
1k
views
certbot dns-cloudflare renewal issue
I am renewing my letsencrypt certificate using certbot with dns-cloudflare authenticator.
When I original set things up, I used this command:
$ certbot certonly --dns-cloudflare --dns-cloudflare-...
- 21
0
votes
1
answer
590
views
Setting up an Apache Reverse Proxy to access internal apps with multiple domains on the apache config file and enabling SSL using lets encrypt
Many of the ubuntu server tutorials online only show you how to setup a reverse proxy but not explain how to set it up with SSL lets encrypt and setting it up along with other domains on the server. ...
- 2,949
2
votes
1
answer
131
views
Trying to install Let's Encrypt certificate on CentOS 6 and Apache but can’t get a connection working
I have finally succumbed to the pressure of using SSL for my website that has been up since 1996… getting a certificate used to be expensive, error-prone and time-intensive back then… Today it's only ...
- 121
0
votes
1
answer
423
views
Edge does not show/use TLS/SSL until refresh
We have a webapp that uses 'Let's encrypt' certificates (and the nginx webserver).
The certificates are automatically renewed (a cron job runs every day and we get a new cert every 2 or 3 months).
...
- 219