Questions tagged [letsencrypt]
Let's Encrypt is a service provided by the Internet Security Research Group (ISRG), a public benefit organization. Use this tag only for questions that are specific to Let's Encrypt features.
110
questions
1
vote
3
answers
14k
views
Unable to get local issuer certificate error with unusual certificate chain
I've encountered a frustrating issue with my SSL implementation due to what may be related to Let's Encrypts CA-X3 certificate expiration.
Forewarned that I am a developer with limited understanding ...
- 1
0
votes
0
answers
109
views
StrongSwan IPSec VPN - IKEv2 - LetsEncrypt Certificate Issue (building CRED_PRIVATE_KEY - RSA failed, tried 10 builders)
StrongSwan IPSec VPN - IKEv2 - LetsEncrypt Certificate Issue (building CRED_PRIVATE_KEY - RSA failed, tried 10 builders)
I followed the link below for setup IKEv2 VPN Using Strongswan and Let's ...
0
votes
0
answers
129
views
SSL certificate mismatch within home network
I use Home Automation to control my heating, lights etc.
I installed a letsencrypt cert and I use a custom domain name to access it securely.
https://home.mydomain.tld/
This uses port 443 natively.
...
- 53
1
vote
1
answer
117
views
What comes first - Certbot or nginx?
I am trying to set up nginx to act as a reverse proxy on a small personal server; however, I am encountering some circular logic when I ask certbot to generate SSL certificates.
From what I can tell, ...
- 21
3
votes
5
answers
7k
views
Thunderbird not updating certificate, keeps using old one and saying it's expired
I have an email server where I have Let's Encrypt SSL certs, expiring every 3 months, and certbot automatically renews it. If I access the server through a website in the browser, the correct and ...
- 1
1
vote
1
answer
3k
views
Connection refused when generating a Let's Encrypt certificate for a subdomain
I'm trying to add a subdomain to my Let's Encrypt certificate but it's giving Connection refused.
The command I ran was sudo certbot --expand -d sub.domain.com
Certbot failed to authenticate some ...
- 1
0
votes
0
answers
632
views
trouble with my first ssl certificate
i'm struggling to get my first ssl certificate to work (but i seem to be at least recieving my certificate).
an example of some output from my docker-compose up is below
ubuntu@ip-172-31-93-63:~/doom ...
- 27
0
votes
0
answers
202
views
Serve SSL certificate directly from PostFix / Dovecot to Thunderbird WITHOUT webserver
Webserver host: web.example.nl
Mailserver host: mail.example.nl
Mail user: [email protected] (letsencrypt cert issued for this domain)
I am trying to setup a new mailserver on mail.example.nl that doesn't ...
- 11
0
votes
1
answer
151
views
NET ERR CERT COMMON NAME INVALID on subdomain, Let's Encrypt
I'm working on new website and use HTTPS. From my personal desktop computer and iPhone everything is working fine, but my friend from another country experiencing the following issue:
NET ERR CERT ...
- 5,832
0
votes
1
answer
453
views
Why is it better to configure ACME client to trust private CA root certificate than to add the certificate to the CA store?
I am creating a self-hosted CA for my internal home network as a hobby project and to learn something new. I'm using Smallstep's open-source step-ca and step CLI.
After creating the CA, the next step ...
0
votes
1
answer
886
views
Updating SSL Certs with PKCS12 or PEM via Bash Script
I currently have my pi-hole setup to request an SSL cert from ZeroSSL using Acme.sh, this works quite well.
I then have to cat the two cert and key files into one, and then relaunch the lighttpd ...
- 91
1
vote
1
answer
2k
views
Binding a certificate to an azure function app
Background
I’m attempting to teach myself some of the basic ins-and-outs of Azure. I’ve got a couple of domains that I’m now hosting the DNS for on Azure. From there, I’ve created a subdomain for one ...
- 11
1
vote
0
answers
1k
views
Certbot 1.12.0 - How to stop ISRG Root X1 from being signed by DST Root CA X3?
I have an NGINX reverse proxy (nginx/1.21.4 & Debian 11) using certbot (v1.12.0) to get Lets Encrypt certificates for my site. Since the expiry of the DST cert, I had intermittent issues with ...
- 101
3
votes
2
answers
16k
views
Website spits out PR_CONNECT_RESET_ERROR in firefox's incognito
So I have a site that uses letsencrypt and ssl works fine when I'm browsing my site in firefox. The moment I try browsing my site using incognito mode in firefox my browser throws this secure ...
- 101
0
votes
0
answers
41
views
How to fix SSL issue from 30-September-2021 [duplicate]
After having this SSL error, I have search and know that it start from 30/09/2021, cause from let's encrypt.
I tried updating my windows, updating chrome, manually downloaded and added some ...
- 1,243
1
vote
1
answer
2k
views
How can I fix cron letsencrypt certbot renew on Ubuntu (SSL3_GET_SERVER_CERTIFICATE, certificate verify failed)?
I have an nginx webserver running with letsencrypt certificates, updated through certbot renew. All on Ubuntu 14.04. Since 1st Oct 2021 I keep getting emails from cron that the certificates could not ...
41
votes
4
answers
20k
views
cURL on Ubuntu 14: all Let's Encrypt certificates are expired (error 60)
Today out of a sudden all HTTPS requests, that my Ubuntu 14 server sends to websites with SSL certificates issued by Let's Encrypt, started to fail. The error produced by cURL is:
curl: (60) SSL ...
- 179
0
votes
0
answers
401
views
wget timeout on Let'Encrypt certificate server
I'am on a CentOS server trying to understand why I cannot connect to another website that is exposing a Let'sEncrypt R3 issued certificate.
# cat /etc/centos-release
CentOS Linux release 7.9.2009 (...
- 101
0
votes
0
answers
441
views
New TortoiseSVN Certificate Error for LetsEncrypt signed server
Related to this old question from 2011, but a new problem:
Tortoise SVN Error Validating Server Certificate
We have an SVN server that has a certificate that is signed by LetsEncrypt.
Until this week, ...
- 254
0
votes
1
answer
2k
views
How to redirect an IP address to a machine/hostname in an Intranet?
I have a couple of intranet applications at home like an NVR server and a Plex Media Server. Each are installed in a FreeNAS jail with corresponding IP addresses like 192.168.0.2 with hostname mynvr ...
- 36.2k
0
votes
1
answer
454
views
Nginx configuration with wildcard LetsEncrypt certificate for sub domains
I'd like to configure nginx with wildcard LetsEncrypt certificate for dynamic sub domains - domains that will be emulated by web application.
Right now I have the following "static" domains:
...
0
votes
0
answers
55
views
Is it bad to use a let's encrypt certificate outside its scope?
I have a let's encrypt certificate issued for my website,
Since I have this certificate's private key, I could use it to sign other stuff like files, etc...
(Assuming I don't leak the private key, of ...
- 335
0
votes
1
answer
152
views
Let's Encrypt domain A loading certificate of domain B
I have a server with nginx, and there are two websites there: A and B.
Site A is an old one and it's been working with SSL certificate Let's Encrypt via certbot package and command.
Tonight I decided ...
- 403
0
votes
0
answers
256
views
Should I continue to use Let's Encrypt after September 2021?
I am very curious about what the community thinks. After Sept 2021, they will no longer be co-signed by DST Root CA X3, and basically any platform from 2016 or older will not validate their ...
- 373
10
votes
2
answers
21k
views
What is the purpose of chain.pem files?
A general question about chaim.pem files; I used a csr obtained from my host, and used the Certbot from LetsEncrypt to generate a https cert; I used the following command
$ certbot certonly --manual -...
- 18.7k
6
votes
2
answers
12k
views
How do I renew ALL certificates with certbot?
I don't want to only renew the certificates which are going to expire soon. (Whatever soon means). I want to renew all of them to make sure they will be on the same timing in the future.
I cannot find ...
- 447
5
votes
3
answers
13k
views
How to install let's Encrypt on Amazon Linux
How do I install Let's Encrypt Certificates on amazon Linux I already have a WordPress website hosted.
Can anyone tell me the steps how do i start with it and what are the commands and what ...
17
votes
1
answer
18k
views
How to add a domain to existing certificate generated by Let’s Encrypt/Certbot?
This question is a continuation of essentially the same question that was closed for being "off-topic" on Stack Overflow.
The OP's question:
I am just simply trying to add the domain test.example....
1
vote
1
answer
979
views
Add a subdomain redirect in Apache to a Nextcloud instance at a local IP
I have a Raspberry Pi serving a couple of static websites through Apache and doing some other stuff.
Now I've been gifted another Raspberry, so I installed NextCloudPi on it, and I would like to ...
- 183
0
votes
1
answer
2k
views
HTTPS connection refused after redirect on my Nginx server
I’m unable to get to my web server via HTTPS. If I try and connect on port 80 the connection is redirected to port 443 as a quick wget shows:
--2021-01-04 22:45:51-- http://corballis.co.uk/
Resolving ...
- 55.6k
1
vote
3
answers
12k
views
letsencrypt/certbot systemd timer/service not working on Ubuntu 18.04
I installed certbot for nginx and the autorenew script set itself up automatically, but this is the email I receive, whenever it runs:
/home/foobar/certbot-renew.sh: 1: /home/foobar/certbot-renew.sh: ...
- 1,312
0
votes
1
answer
383
views
Enable ssl on my apache webdav using letsencrypt and certbot
I have a raspberry pi and use apache and webdav to serve photos to family and friends. I think I have a very basic configuration. I have a file 000-default.conf and a second webdav.conf. In order to ...
- 70.7k
8
votes
2
answers
4k
views
certbot: error: unrecognized arguments: --dns-digitalocean-credentials
Trying to execute this command
sudo certbot certonly --dns-digitalocean --dns-digitalocean-credentials ~/.secrets/digitalocean.ini -d "*.example.com" --preferred-challenges dns --server https://acme-...
- 738
1
vote
1
answer
2k
views
Apache and Let's Encrypt - Chain issues: Incorrect order, Extra certs
I have my webserver configured with Let's Encrypt (CentOS 6.10, Apache 2.2). When running a security analysis on my site with Qualsys's SSL Labs, I get the following warning:
Chain issues: Incorrect ...
- 1,041
-1
votes
1
answer
82
views
Enable SSL for any domain automatically
We are building a site builder and users can set their own domain. Is there any way to enable SSL for their domains automatically?
For example, a wildcard letsencrypt certificate but not just for *....
- 34.8k
-1
votes
1
answer
381
views
can't connect to server after installing let's encrypt on centos 8
I'm trying to install let's encrypt on my centos 8 apache server. I created domain-site.conf file in /etc/httpd/conf.d/ directory with the following content (domain name is replaced with test):
<...
0
votes
1
answer
107
views
I can’t connect to any secured host which is protected with Lets Encrypt SSL on Windows 8.1
I have problems with Windows 8.1 where I can’t connect to any host which is protected with Lets Encrypt.
IE 11 not working and display this page cannot be displayed.
Executing code from CURL or C# ...
1
vote
1
answer
2k
views
How to renew LetsEncrypt SSL wildcard?
I have to renew my SSL certificate, but I want to use a wildcard certificate instead of my current simple SSL using LetsEncrypt also. I usually use this command below, but it doesn't work to update my ...
1
vote
0
answers
534
views
Can't import Let's Encrypt certificate to Amazon Certificate Manager
I have been using certbot to renew my Let's Encrypt certificate every 2.5 months and import it to Amazon Certificate Manager manually through the AWS console to use with cloudfront. The command I use ...
- 105
1
vote
1
answer
459
views
ansible acme create account
I'd like to handle nginx let's encrypt certifs' renewal with ansible. So I've tried to use the module acme_certificate and acme_account. I have difficulty to understand how is created the acme account....
- 101
0
votes
1
answer
3k
views
Let's Encrypt SSL Certificate Auto Renew with Certbot on Amazon Lightsail Server running Ubuntu 16.04.03 LTS
I'm trying to set up SSL Certificate auto renewal on my boss's Amazon LightSail server. It was previously set up by a past contractor who isn't being a lot of help. I am very unfamiliar with Let's ...
CommunityBot
- 1
0
votes
1
answer
2k
views
Renewing Certbot Let's Encrypt WILDCARD Certificates in Cron
I've been searching for a good solution to renew WILDCARD certificates from Let's Encrypt.
It's easy to set up a wildcard certificate:
Apache Debian 9 Stretch:
sudo apt-get install certbot python-...
- 4,099
0
votes
0
answers
58
views
Let's encrypt, multiple webserver, one certificate
Im searching for a long time now.
What is the best way to share a let's encrypt certificate across multiple webserver ?
As example for a HA Cluster.
One way i tought about was, to create a "dummy"...
- 351
3
votes
1
answer
1k
views
How to delete one of the Subject Alternative Names from a Let's Encrypt certificate?
My (currently working) Let's encrypt certificate contains a bunch of Subject Alternative Names. One of these has to be deleted in order to renew the certificate because the domain is no longer ...
- 576
0
votes
0
answers
1k
views
Wildcard cert on Synology NAS
I'm running Synology DSM 6.2.2-24922 Update 4 and I wish to setup a wildcard cert with Let's Encrypt. It has been over a year since I've tried this and that time it didn't go so well. I can remember I ...
- 209
0
votes
2
answers
1k
views
Why can’t certbot auto revew wildcard SSL certs without a DNS plugin?
When I run certbot review, I get the following error.
An authentication script must be provided with --manual-auth-hook when
using the manual plugin non-interactively.
According to the docs, to ...
- 966
1
vote
1
answer
2k
views
Why do "let's encrypt" certificates require root access?
Let's Encrypt puts their certificates for use under: /etc/letsencrypt/live/domain.com/
Why? I cannot access it without running my webserver with sudo priviledges (or changing the the file permissions ...
- 31.2k
0
votes
0
answers
75
views
How to obtain private key from LetsEncrypt trough Heroku?
I'm using Automated Certificate Management on Heroku through Letsencrypt.
We're moving our app to a different hosting environment and would like to move the certificate to this new server as well.
...
- 454k
0
votes
1
answer
521
views
Edge does not show/use TLS/SSL until refresh
We have a webapp that uses 'Let's encrypt' certificates (and the nginx webserver).
The certificates are automatically renewed (a cron job runs every day and we get a new cert every 2 or 3 months).
...
- 258
0
votes
0
answers
60
views
SSL not working
I've a nginx server on aws ec2 instance. I've successfully setup ssl and config for ssl in my nginx.
If I check my ssl setup using websites like:
https://whynopadlock.com
https://www.sslshopper.com/...
