Questions tagged [certbot]

certbot is a python command-line client to get X.509 certificates from the Let’s Encrypt authority in order to allow a web server using https to be accepted by most browsers.

Filter by
Sorted by
Tagged with
0 votes
0 answers
19 views

elasticsearch cannot read certificate file - linux file permissions

I generated a certificate file with certbot. It is placed in /etc/letsencrypt/.... I created a group called elk where I added the elasticsearch user, and I recursively set it as the owning group for /...
Vivere's user avatar
  • 203
0 votes
0 answers
118 views

certbot letsencrypt certificate installation failed

I have a small test server at home and I registered with letsencrypt to get a valid certificate. Certificate expired and wasn't automatically renewed (no harm done, this is strictly for testing ...
ZioByte's user avatar
  • 870
10 votes
1 answer
5k views

How to install certbot via snap on Amazon Linux 2023

I am following this guide on how to Configure SSL/TLS on Amazon Linux 2023. It recommends to obtain a CA-signed certificate using Certbot. And to get Certbot, it's recommended to install Snap. I have ...
Razkar's user avatar
  • 201
0 votes
0 answers
124 views

Newly created SSL certificate will not update

I have a self-hosted website and recently my SSL certificate expired. Tried creating a new one with the command sudo certbot certonly -d 'example.com,*.example.com' --manual --preferred-challenges dns....
leevii's user avatar
  • 1
0 votes
0 answers
50 views

why does certbot still can generate my certs after wipe?

i tested some things in docker and f*d up, also removed all containers and volumes including the certbot ones. so why is certbot still able to give me my certificates back? is it because they are ...
sam's user avatar
  • 1
-1 votes
1 answer
1k views

how to setup webroot for new ubuntu server

I am setting up a new server and installing certbot on ubuntu 20. I am confused with sudo certbot certonly --webroot command of certbot. While running the command, it asks me input the webroot for ...
Krunal's user avatar
  • 101
1 vote
2 answers
1k views

Zimbra certbot LetsEncrypt - verification failure - expecting an RSA key

Zimbra Certbot LetsEncrypt I have installed a LetsEncrypt SSL certificate on a separate server for a different domain without problems. I followed the same procedures that I used on that server for a ...
ADEmail's user avatar
  • 11
2 votes
0 answers
7k views

How can I solve error of "Fail to fetch" resulting of apt-get update on Debian 8

I've got a issue that stuck me on Debian 8 Jessie when I try to upgrade to Debian 11 Bullseye Trouble seems come from old version of Letsencrypt certbot that I have uninstall but I still got some ...
Neiak's user avatar
  • 39
1 vote
1 answer
400 views

What's the correct way to setup Certbot for an nginx server with several ports/services under one single domain?

Originally, I had NGINX configured for two services (Radicale and LMS) on two different ports. I did this in /etc/nginx/nginx.conf. Access to MYDOMAIN:8000 and :8009 and 3001 from the internet are ...
bomben's user avatar
  • 499
2 votes
3 answers
20k views

How does certbot bind port? Could not bind TCP port 80 because it is already in use by another process on

I enabled both 80 and 443. sudo certbot certonly --standalone --agree-tos --no-eff-email --staple-ocsp --preferred-challenges http -m **@**.com -d mycomp.com Saving debug log to /var/log/letsencrypt/...
MarkoGM's user avatar
  • 35
2 votes
3 answers
5k views

Can't install Certbot for Apache on CentOS Stream 9 (python3-certbot)

On Centos Stream 9, when I try to install certbot (sudo yum install certbot) into the server it returns: Error: Problem: package certbot-1.22.0-1.el8.noarch requires python3-certbot = 1.22.0-1.el8, ...
Flashlight's user avatar
0 votes
0 answers
2k views

answer interactive prompt from docker container ran in script (certbot)

So I tried searching far and wide and I can't seem to get what I'm trying to do to work. Essentially I have a script that runs a certbot docker container with the digital ocean plugin. I can run the ...
Arthur's user avatar
  • 1
0 votes
1 answer
2k views

lighttpd reverse proxy

I have two raspberry pi servers running. These were set up with DietPi. The one server is used as a NextCloud server. The other (new) server is running weewx. Both use lighttpd as the webserver. Each ...
aterhorst's user avatar
  • 101
0 votes
1 answer
963 views

How do I know what process is running for a systemd-timers service?

I'm trying to determine whether a process is running successfully for a service that's scheduled as a systemd-timers service. I have a service scheduled called certbot.service, which I can see using ...
Chris Halcrow's user avatar
0 votes
1 answer
199 views

SLE: installing certbot and its NGINX plugin

openSUSE Tumbleweed Installing certbot and its NGINX plugin on openSUSE Tumbleweed was just straightforward: zypper addrepo https://download.opensuse.org/repositories/home:ecsos:server/...
Megidd's user avatar
  • 1,549
0 votes
4 answers
3k views

Upgrade certbot on Debian Jessie

Hi i have a machine based on Debian Jessie running an apache web server along with certbot 0.10.2. Due to this message i've received: As of June 1, 2021, you are no longer be able to renew your ...
Mr.Tester's user avatar
0 votes
0 answers
4k views

How can i solve these services errors on boot?

I have an ubuntu 20.04 LTS server running nextcloud, when the server its booting some services failed on boot. root@demg-srv:/etc/systemd/network# systemctl --failed UNIT ...
Matías's user avatar
3 votes
1 answer
3k views

Certbot: Your system is not supported by certbot-auto anymore. Certbot will no longer receive updates

How do I manually update the certificates that Certbot would normally update? I did not change anything in my system so I am assuming it is because I have CentOS 6. I also have Apache. How do I update ...
Chloe's user avatar
  • 538
0 votes
1 answer
71 views

Need help to fix my bash script [closed]

I have create a bash script to renew security certificate for IKEve server. When I run the script it will ask me to press 2 and enter to renew the certificate. Can someone help me to add a command ...
Rizwan Saleem's user avatar
0 votes
0 answers
4k views

DNS problem: NXDOMAIN looking up A for example-domain - check that a DNS record exists for this domain

I use AWS Linux. I want to use certbot to make my website from http to https. when I run:sudo certbot certonly --webroot -w ./ -d example——domain error shows: Requested name http://example——domain ...
Django's user avatar
  • 1
1 vote
1 answer
346 views

How Should I Move SSL Certificates (Made With Certbot) From One Ubuntu Server To Another?

I have an ubuntu bionic server on which I set up ssl with my own domain name by following this guide. I would now like to decommission this server and move the ssl domain name to a different ubuntu ...
Jim's user avatar
  • 113
0 votes
1 answer
1k views

404 not found error, certbot generating tls certificate

Through installing TLS certificate of turn server, running the command below and got the error message as shown pic, searched on net but couldn't solve.. sudo certbot certonly --standalone --...
Y3N3RRR's user avatar
  • 139
0 votes
0 answers
1k views

Apache stopped working after update - requests just timeout now - problem with firewalld

UPDATE: I tried rolling back the yum update and it did not resolve the problem. I also tried running the server with only a single virtual host and no SSL and then trying to access site via http. I ...
JP Howlett's user avatar
0 votes
1 answer
231 views

Output double quotes and variable

I'm writing a script to automate Let's Encrypt in PowerDNS,(this is a simple bash shell script to be run on debian) Certbot runs and calls the script, feeding to it the variable: $CERTBOT_VALIDATION ...
mike's user avatar
  • 1
1 vote
0 answers
283 views

Find out how SSL certificate (from letsencrypt) is auto-renewed

I'm running a Debian 8.11 (jessie) server (don't worry, a upgrade is plannend for later this year). It's a LAMP server, with addition to that, an ISPConfig installation. For the website (served ...
Mathlight's user avatar
  • 123
1 vote
0 answers
1k views

Upgrade client to be ACMEv2 compatible

Ubuntu Nginx Cloudflare I followed instructions here: https://www.digitalocean.com/community/questions/let-s-encrypt-acmev1-protocol-you-should-upgrade-to-an-acmev2. sudo apt-get update sudo apt-get ...
errrk's user avatar
  • 11
9 votes
1 answer
15k views

How can I add subdomains to letsencrypt using certbots?

I have certbot installed and successfully use it to encrypt my homepage. Now i tried to setup an email system for my website using dovecot and postfix. I got it mostly running, only problem is, ...
user2741831's user avatar
1 vote
2 answers
174 views

expand an existing fullchain certificate

I want to expand an existing file instead of creating a new certificate for a subdomain. I have these domains already in the file: certtool -i < /etc/letsencrypt/live/example.org-0002/fullchain....
rubo77's user avatar
  • 28.9k
2 votes
0 answers
569 views

Set systemd timer to an odd and specific number of days

I'm using systemd.timers on CentOS 7 server and have a timer set to automatically renew Certbot-managed Let's Encrypt website certificate. autorenewal.service: [Unit] Description=certbot certificate ...
Anvbis's user avatar
  • 21
1 vote
1 answer
8k views

nginx: [emerg] BIO_new_file("/etc/letsencrypt/live/site_name/fullchain.pem") failed

I am using CentOS 7, Nginx 1.12.2, certbot 0.31.0 , Error after delete all things related to Let's Encrypt of 002.bkit.vn [root@VMHostDefault 002.bkit.vn]# nginx -t nginx: [emerg] BIO_new_file("/...
Vy Do's user avatar
  • 171
4 votes
1 answer
24k views

Debian 9 stretch-backports signature couldn't be verified [duplicate]

I'm trying to install certbot on my Debian 9 server on Google compute engine VM. Here's what I have done so far: To add backports repository, I have edit the sources.list as: sudo nano /etc/apt/...
Abdul Rehman's user avatar
1 vote
1 answer
3k views

How to configure the Certbot not to include options-ssl-apache.conf into my VirtualHosts?

# cat /etc/letsencrypt/options-ssl-apache.conf # Baseline setting to Include for SSL sites using Let's Encrypt certificates SSLEngine on # Intermediate configuration, tweak to your needs ...
Vlastimil Burián's user avatar
0 votes
1 answer
192 views

Different page from a browser and wget [closed]

EDITED TO REMOVE OBSOLETE EXAMPLES I have a very curious case that has dumbfounded me. I was trying to get a certificate from letsencrypt and I was consistently getting errors that certbot is unable ...
RandomWhiteTrash's user avatar
0 votes
1 answer
4k views

Unable to install Let's Encrypt certificate on CentOS 7

I am trying to install a Let's Encrypt SSL certificate to my website using Securing Apache with Let's Encrypt on CentOS 7. My web server is (include version): Apache (cPanel) My hosting provider is: ...
current_user's user avatar
1 vote
3 answers
281 views

Certbot does not force Apache2 to read newly generated certificates

System: GNU/Linux Debian 9.5 headless. Situation & Question I have just caught the Let's Encrypt Certbot to re-generate the SSL certificate but did not reload Apache2. This has resulted in a ...
Vlastimil Burián's user avatar
0 votes
2 answers
228 views

Certbot-nginx displays error

After executable command sudo certbox --nginx. Certbot give me output Saving debug log to /var/log/letsencrypt/letsencrypt.log An unexpected error occurred: UnicodeDecodeError: 'ascii' codec can't ...
Marceli99's user avatar
0 votes
1 answer
318 views

Variables from specific parts of an Text File as variable for further usage in shell script

We have an HaProxy setup in our company, and this works with SSL (certbot / crt-list.txt). We want an automated task that reads the file crt-list.txt and takes out the Domain Name as a variable. What ...
Nicolay Braetter's user avatar
3 votes
2 answers
2k views

How to validate / fix an error in Certbot renewal cron

The whole day, I am fixing bugs in mainly TLS area, but this question is not specifically about TLS. Well, I have one web server with a few web sites, each with its own SSL certificate. But to the ...
Vlastimil Burián's user avatar
2 votes
1 answer
2k views

certbot and awscli require different versions of botocore

I have a small script that generates new Let's Encrypt certificates whenever they are due for renewal and then imports the new certificates to our AWS account so that we can use them to sign ...
Brian Leishman's user avatar
7 votes
2 answers
3k views

Debian and Certbot: where does the package install the cron job?

I installed the python-certbot-apache package per the instructions on certbot.eff.org but can't find any entry for the cron job its supposed to set up. The Certbot packages on your system come with ...
T. Thomas's user avatar
  • 233
1 vote
1 answer
1k views

Using -d with 2 versions of the same domain in Certbot [closed]

For Using -d with 2 versions of the same domain in Certbot I tried the following. Instead doning: certbot --nginx and then chosing 1+2 (for domain.tld + www.domain.tld), I did: certbot --nginx -d ...
user8551674's user avatar
0 votes
2 answers
5k views

The server could not connect to the client to verify the domain for Let's Encrypt's Certbot

I am running Sentry on AWS using Docker. The service is now running on port 9000. I would like to use HTTPS, getting the certificate from Let's Encrypt. However I get the following error: sudo certbot ...
Thomas's user avatar
  • 191
-1 votes
1 answer
668 views

Combining Certbot with an Nginx server block maker

I have an Ubuntu 16.04 environment with a pure Nginx server and I use the following Bash script to automate creation of server blocks and corresponding (self-signed) SSL certifications. It allows me ...
user avatar
2 votes
1 answer
415 views

unable to sign certificate letsencrypt

I have recently set up a cloud via Nextcloud. I have successfully signed a certificate for my domain https://mydomain.home.com (of cource my real domain is different). This all worked out just fine. ...
Felix's user avatar
  • 145
1 vote
1 answer
2k views

AWS EC2 instance says apache2 isn't running but the server is still up and httpd is listening on port 80?

So I'm trying to use certbot to get a LetsEncrypt certificate for my wordpress site on EC2 (using the AWS marketplace image by Bitnami, Ubuntu 14.04), but when running certbot --apache I get the ...
TheRedshift's user avatar
0 votes
2 answers
1k views

Lets Encrypt for private domain? [closed]

I was wondering is it possible to generate Lets Encrypt certificate for private domains on internal network? I have my own private DNS running, so I want to apply certificate for my Squid ...
fugitive's user avatar
  • 1,563
3 votes
2 answers
2k views

Certbot for multiserver configuration

Is there a way to use certbot and letsencrypt certificate for multiserver setup without having to manually copy the certificates from one node to another? I have a domain name example.com which is ...
rush's user avatar
  • 27.4k