Questions tagged [letsencrypt]

Let's Encrypt is a service provided by the Internet Security Research Group (ISRG), a public benefit organization. Use this tag only for questions that are specific to Let's Encrypt features.

Filter by
Sorted by
Tagged with
0 votes
1 answer
41 views

Why is it better to configure ACME client to trust private CA root certificate than to add the certificate to the CA store?

I am creating a self-hosted CA for my internal home network as a hobby project and to learn something new. I'm using Smallstep's open-source step-ca and step CLI. After creating the CA, the next step ...
user avatar
  • 115
0 votes
0 answers
34 views

acme-dns server hosted on DigitalOcean fails to issue wildcard certificates

I have the need to issue certbot wildcard certificates for different domain names hosted in different DNS providers. I have installed acme-dns server on a Digital Ocean droplet and I am having ...
user avatar
0 votes
1 answer
49 views

Updating SSL Certs with PKCS12 or PEM via Bash Script

I currently have my pi-hole setup to request an SSL cert from ZeroSSL using Acme.sh, this works quite well. I then have to cat the two cert and key files into one, and then relaunch the lighttpd ...
user avatar
0 votes
0 answers
138 views

Unable To Renew Subdomain's SSL Certificate via LetsEncrypt & Certbot

Really appreciate any help with this. I have a DO droplet (running on OpenLiteSpeed Server with Ubunto 20.04) that is hosting the main domain + 2 subdomains. In that droplet, there are 3 separate ...
user avatar
1 vote
1 answer
97 views

Binding a certificate to an azure function app

Background I’m attempting to teach myself some of the basic ins-and-outs of Azure. I’ve got a couple of domains that I’m now hosting the DNS for on Azure. From there, I’ve created a subdomain for one ...
user avatar
  • 11
0 votes
0 answers
48 views

How do I use Domain Name to Dynamic DNS to Home Server using SSL

**Looking for tips here since I have not had success using SSL. I have had success using non-SSL (ie port 80). I want to use a sub-domain name of a domain I own. I can use A or CNAME or URL forwarding ...
user avatar
0 votes
0 answers
49 views

SSL error from certain browsers/networks using Letsencrypt and apache2

Can someone help me figure out why there is a SSL error on my website? I'm using Letsencrypt for the SSL certificate. I'll do my best to explain. Certain people have told me that mysite is ...
user avatar
0 votes
0 answers
369 views

Certbot 1.12.0 - How to stop ISRG Root X1 from being signed by DST Root CA X3?

I have an NGINX reverse proxy (nginx/1.21.4 & Debian 11) using certbot (v1.12.0) to get Lets Encrypt certificates for my site. Since the expiry of the DST cert, I had intermittent issues with ...
user avatar
  • 13
0 votes
0 answers
56 views

How to force trust SMTP Let's Enrypt cert on Linux?

There's an SMTP server running on ps.mydomain.com:587. When I try to establish SSL connection with it, it fails with certificate verification error. Here's an example openssl output (Debian 11.1, ...
user avatar
  • 1
0 votes
0 answers
37 views

How to fix SSL issue from 30-September-2021 [duplicate]

After having this SSL error, I have search and know that it start from 30/09/2021, cause from let's encrypt. I tried updating my windows, updating chrome, manually downloaded and added some ...
user avatar
  • 1,231
1 vote
1 answer
1k views

How can I fix cron letsencrypt certbot renew on Ubuntu (SSL3_GET_SERVER_CERTIFICATE, certificate verify failed)?

I have an nginx webserver running with letsencrypt certificates, updated through certbot renew. All on Ubuntu 14.04. Since 1st Oct 2021 I keep getting emails from cron that the certificates could not ...
user avatar
0 votes
0 answers
130 views

wget timeout on Let'Encrypt certificate server

I'am on a CentOS server trying to understand why I cannot connect to another website that is exposing a Let'sEncrypt R3 issued certificate. # cat /etc/centos-release CentOS Linux release 7.9.2009 (...
user avatar
  • 101
0 votes
0 answers
83 views

How to get ISGR_Root_X1 working on Ubuntu 14.04 LTS ESM?

After the recent Let's Encrypt change that switched over their root certificate to ISGR Root X1, I needed to make a change to an old Ubuntu 14.04 server running an old django application on an apache2 ...
user avatar
0 votes
0 answers
48 views

New TortoiseSVN Certificate Error for LetsEncrypt signed server

Related to this old question from 2011, but a new problem: Tortoise SVN Error Validating Server Certificate We have an SVN server that has a certificate that is signed by LetsEncrypt. Until this week, ...
user avatar
37 votes
4 answers
16k views

cURL on Ubuntu 14: all Let's Encrypt certificates are expired (error 60)

Today out of a sudden all HTTPS requests, that my Ubuntu 14 server sends to websites with SSL certificates issued by Let's Encrypt, started to fail. The error produced by cURL is: curl: (60) SSL ...
user avatar
  • 1,041
0 votes
1 answer
109 views

How to redirect an IP address to a machine/hostname in an Intranet?

I have a couple of intranet applications at home like an NVR server and a Plex Media Server. Each are installed in a FreeNAS jail with corresponding IP addresses like 192.168.0.2 with hostname mynvr ...
user avatar
  • 105
0 votes
0 answers
36 views

Is it bad to use a let's encrypt certificate outside its scope?

I have a let's encrypt certificate issued for my website, Since I have this certificate's private key, I could use it to sign other stuff like files, etc... (Assuming I don't leak the private key, of ...
user avatar
0 votes
1 answer
139 views

Nginx configuration with wildcard LetsEncrypt certificate for sub domains

I'd like to configure nginx with wildcard LetsEncrypt certificate for dynamic sub domains - domains that will be emulated by web application. Right now I have the following "static" domains: ...
user avatar
  • 161
0 votes
1 answer
57 views

Let's Encrypt domain A loading certificate of domain B

I have a server with nginx, and there are two websites there: A and B. Site A is an old one and it's been working with SSL certificate Let's Encrypt via certbot package and command. Tonight I decided ...
user avatar
  • 193
0 votes
0 answers
247 views

Should I continue to use Let's Encrypt after September 2021?

I am very curious about what the community thinks. After Sept 2021, they will no longer be co-signed by DST Root CA X3, and basically any platform from 2016 or older will not validate their ...
user avatar
  • 343
6 votes
2 answers
6k views

What is the purpose of chain.pem files?

A general question about chaim.pem files; I used a csr obtained from my host, and used the Certbot from LetsEncrypt to generate a https cert; I used the following command $ certbot certonly --manual -...
user avatar
  • 365
1 vote
2 answers
1k views

How do I renew ALL certificates with certbot?

I don't want to only renew the certificates which are going to expire soon. (Whatever soon means). I want to renew all of them to make sure they will be on the same timing in the future. I cannot find ...
user avatar
1 vote
1 answer
338 views

Add a subdomain redirect in Apache to a Nextcloud instance at a local IP

I have a Raspberry Pi serving a couple of static websites through Apache and doing some other stuff. Now I've been gifted another Raspberry, so I installed NextCloudPi on it, and I would like to ...
user avatar
  • 173
0 votes
1 answer
902 views

HTTPS connection refused after redirect on my Nginx server

I’m unable to get to my web server via HTTPS. If I try and connect on port 80 the connection is redirected to port 443 as a quick wget shows: --2021-01-04 22:45:51-- http://corballis.co.uk/ Resolving ...
user avatar
  • 11
0 votes
1 answer
149 views

Enable ssl on my apache webdav using letsencrypt and certbot

I have a raspberry pi and use apache and webdav to serve photos to family and friends. I think I have a very basic configuration. I have a file 000-default.conf and a second webdav.conf. In order to ...
user avatar
  • 101
1 vote
1 answer
1k views

Apache and Let's Encrypt - Chain issues: Incorrect order, Extra certs

I have my webserver configured with Let's Encrypt (CentOS 6.10, Apache 2.2). When running a security analysis on my site with Qualsys's SSL Labs, I get the following warning: Chain issues: Incorrect ...
user avatar
  • 901
-1 votes
1 answer
72 views

Enable SSL for any domain automatically

We are building a site builder and users can set their own domain. Is there any way to enable SSL for their domains automatically? For example, a wildcard letsencrypt certificate but not just for *....
user avatar
  • 113
-1 votes
1 answer
186 views

can't connect to server after installing let's encrypt on centos 8

I'm trying to install let's encrypt on my centos 8 apache server. I created domain-site.conf file in /etc/httpd/conf.d/ directory with the following content (domain name is replaced with test): <...
user avatar
0 votes
1 answer
52 views

I can’t connect to any secured host which is protected with Lets Encrypt SSL on Windows 8.1

I have problems with Windows 8.1 where I can’t connect to any host which is protected with Lets Encrypt. IE 11 not working and display this page cannot be displayed. Executing code from CURL or C# ...
user avatar
  • 141
1 vote
1 answer
544 views

How to renew LetsEncrypt SSL wildcard?

I have to renew my SSL certificate, but I want to use a wildcard certificate instead of my current simple SSL using LetsEncrypt also. I usually use this command below, but it doesn't work to update my ...
user avatar
1 vote
0 answers
324 views

Can't import Let's Encrypt certificate to Amazon Certificate Manager

I have been using certbot to renew my Let's Encrypt certificate every 2.5 months and import it to Amazon Certificate Manager manually through the AWS console to use with cloudfront. The command I use ...
user avatar
  • 95
0 votes
0 answers
33 views

Let's encrypt, multiple webserver, one certificate

Im searching for a long time now. What is the best way to share a let's encrypt certificate across multiple webserver ? As example for a HA Cluster. One way i tought about was, to create a "dummy"...
user avatar
  • 225
3 votes
1 answer
617 views

How to delete one of the Subject Alternative Names from a Let's Encrypt certificate?

My (currently working) Let's encrypt certificate contains a bunch of Subject Alternative Names. One of these has to be deleted in order to renew the certificate because the domain is no longer ...
user avatar
  • 408
1 vote
1 answer
281 views

ansible acme create account

I'd like to handle nginx let's encrypt certifs' renewal with ansible. So I've tried to use the module acme_certificate and acme_account. I have difficulty to understand how is created the acme account....
user avatar
0 votes
0 answers
1k views

Wildcard cert on Synology NAS

I'm running Synology DSM 6.2.2-24922 Update 4 and I wish to setup a wildcard cert with Let's Encrypt. It has been over a year since I've tried this and that time it didn't go so well. I can remember I ...
user avatar
0 votes
2 answers
606 views

Why can’t certbot auto revew wildcard SSL certs without a DNS plugin?

When I run certbot review, I get the following error. An authentication script must be provided with --manual-auth-hook when using the manual plugin non-interactively. According to the docs, to ...
user avatar
1 vote
1 answer
1k views

Why do "let's encrypt" certificates require root access?

Let's Encrypt puts their certificates for use under: /etc/letsencrypt/live/domain.com/ Why? I cannot access it without running my webserver with sudo priviledges (or changing the the file permissions ...
user avatar
  • 1,155
0 votes
0 answers
52 views

How to obtain private key from LetsEncrypt trough Heroku?

I'm using Automated Certificate Management on Heroku through Letsencrypt. We're moving our app to a different hosting environment and would like to move the certificate to this new server as well. ...
user avatar
  • 101
0 votes
1 answer
1k views

Renewing Certbot Let's Encrypt WILDCARD Certificates in Cron

I've been searching for a good solution to renew WILDCARD certificates from Let's Encrypt. It's easy to set up a wildcard certificate: Apache Debian 9 Stretch: sudo apt-get install certbot python-...
user avatar
3 votes
4 answers
4k views

Thunderbird not updating certificate, keeps using old one and saying it's expired

I have an email server where I have Let's Encrypt SSL certs, expiring every 3 months, and certbot automatically renews it. If I access the server through a website in the browser, the correct and ...
user avatar
  • 165
1 vote
0 answers
928 views

Client SSL certificate verify error in Nginx

I was setting up a mutual authentication in nginx and generated certificates from "Let's Encrypt". Server side SSL is working fine. But after enabling the client side certificate verification, it ...
user avatar
3 votes
2 answers
15k views

Website spits out PR_CONNECT_RESET_ERROR in firefox's incognito

So I have a site that uses letsencrypt and ssl works fine when I'm browsing my site in firefox. The moment I try browsing my site using incognito mode in firefox my browser throws this secure ...
user avatar
  • 153
1 vote
0 answers
221 views

High delays with HTTPS only (!) in internal network

I am really desperate. Since about 3 months I have a problem and could not find a solution yet. The problem first occured with a media server (direct access - no reverse proxy between) I am using. ...
user avatar
  • 11
0 votes
0 answers
378 views

Certbot on nginx not creating .well-known directory on website

When trying to install a certificate on an nginx server using sudo certbot certonly --webroot -w [my web root] -d [mywebsite] I get this error: Domain: [mywebsite] Type: unauthorized ...
user avatar
0 votes
0 answers
238 views

Enable letsencrypt for Gitlab CE Pages

I run a self-hosted Gitlab CE server (12.1.3-ce.0) and try to enable SSL support for Pages, but with no success. I enable letsencrypt for Pages on: "Admin area --> Settings --> Preferences --> Pages ",...
user avatar
0 votes
1 answer
786 views

certbot dns-cloudflare renewal issue

I am renewing my letsencrypt certificate using certbot with dns-cloudflare authenticator. When I original set things up, I used this command: $ certbot certonly --dns-cloudflare --dns-cloudflare-...
user avatar
  • 11
0 votes
1 answer
522 views

Setting up an Apache Reverse Proxy to access internal apps with multiple domains on the apache config file and enabling SSL using lets encrypt

Many of the ubuntu server tutorials online only show you how to setup a reverse proxy but not explain how to set it up with SSL lets encrypt and setting it up along with other domains on the server. ...
user avatar
2 votes
1 answer
97 views

Trying to install Let's Encrypt certificate on CentOS 6 and Apache but can’t get a connection working

I have finally succumbed to the pressure of using SSL for my website that has been up since 1996… getting a certificate used to be expensive, error-prone and time-intensive back then… Today it's only ...
user avatar
  • 121
0 votes
1 answer
154 views

Edge does not show/use TLS/SSL until refresh

We have a webapp that uses 'Let's encrypt' certificates (and the nginx webserver). The certificates are automatically renewed (a cron job runs every day and we get a new cert every 2 or 3 months). ...
user avatar
  • 117
0 votes
2 answers
2k views

Edit Certbot hooks (letsencrypt)

I have a few websites domains handled by Nginx and I am using Letsencrypt (certbot) to manage certificates. I currently have pre-hooks and post-hooks for every domain : /etc/init.d/nginx stop /etc/...
user avatar
  • 15