Questions tagged [certbot]
certbot is a python command-line client to get X.509 certificates from the Let’s Encrypt authority in order to allow a web server using https to be accepted by most browsers.
47
questions
0
votes
0
answers
19
views
elasticsearch cannot read certificate file - linux file permissions
I generated a certificate file with certbot. It is placed in /etc/letsencrypt/....
I created a group called elk where I added the elasticsearch user, and I recursively set it as the owning group for /...
0
votes
0
answers
118
views
certbot letsencrypt certificate installation failed
I have a small test server at home and I registered with letsencrypt to get a valid certificate.
Certificate expired and wasn't automatically renewed (no harm done, this is strictly for testing ...
10
votes
1
answer
5k
views
How to install certbot via snap on Amazon Linux 2023
I am following this guide on how to Configure SSL/TLS on Amazon Linux 2023. It recommends to obtain a CA-signed certificate using Certbot. And to get Certbot, it's recommended to install Snap.
I have ...
0
votes
0
answers
124
views
Newly created SSL certificate will not update
I have a self-hosted website and recently my SSL certificate expired.
Tried creating a new one with the command sudo certbot certonly -d 'example.com,*.example.com' --manual --preferred-challenges dns....
0
votes
0
answers
50
views
why does certbot still can generate my certs after wipe?
i tested some things in docker and f*d up, also removed all containers and volumes including the certbot ones.
so why is certbot still able to give me my certificates back?
is it because they are ...
-1
votes
1
answer
1k
views
how to setup webroot for new ubuntu server
I am setting up a new server and installing certbot on ubuntu 20.
I am confused with sudo certbot certonly --webroot command of certbot.
While running the command, it asks me input the webroot for ...
1
vote
2
answers
1k
views
Zimbra certbot LetsEncrypt - verification failure - expecting an RSA key
Zimbra Certbot LetsEncrypt
I have installed a LetsEncrypt SSL certificate on a separate server for a different domain without problems.
I followed the same procedures that I used on that server for a ...
2
votes
0
answers
7k
views
How can I solve error of "Fail to fetch" resulting of apt-get update on Debian 8
I've got a issue that stuck me on Debian 8 Jessie when I try to upgrade to Debian 11 Bullseye
Trouble seems come from old version of Letsencrypt certbot that I have uninstall but I still got some ...
1
vote
1
answer
400
views
What's the correct way to setup Certbot for an nginx server with several ports/services under one single domain?
Originally, I had NGINX configured for two services (Radicale and LMS) on two different ports. I did this in /etc/nginx/nginx.conf. Access to MYDOMAIN:8000 and :8009 and 3001 from the internet are ...
2
votes
3
answers
20k
views
How does certbot bind port? Could not bind TCP port 80 because it is already in use by another process on
I enabled both 80 and 443.
sudo certbot certonly --standalone --agree-tos --no-eff-email --staple-ocsp --preferred-challenges http -m **@**.com -d mycomp.com
Saving debug log to /var/log/letsencrypt/...
2
votes
3
answers
5k
views
Can't install Certbot for Apache on CentOS Stream 9 (python3-certbot)
On Centos Stream 9, when I try to install certbot (sudo yum install certbot) into the server it returns:
Error:
Problem: package certbot-1.22.0-1.el8.noarch requires python3-certbot = 1.22.0-1.el8, ...
0
votes
0
answers
2k
views
answer interactive prompt from docker container ran in script (certbot)
So I tried searching far and wide and I can't seem to get what I'm trying to do to work.
Essentially I have a script that runs a certbot docker container with the digital ocean plugin. I can run the ...
0
votes
1
answer
2k
views
lighttpd reverse proxy
I have two raspberry pi servers running. These were set up with DietPi. The one server is used as a NextCloud server. The other (new) server is running weewx. Both use lighttpd as the webserver. Each ...
0
votes
1
answer
963
views
How do I know what process is running for a systemd-timers service?
I'm trying to determine whether a process is running successfully for a service that's scheduled as a systemd-timers service. I have a service scheduled called certbot.service, which I can see using ...
0
votes
1
answer
199
views
SLE: installing certbot and its NGINX plugin
openSUSE Tumbleweed
Installing certbot and its NGINX plugin on openSUSE Tumbleweed was just straightforward:
zypper addrepo https://download.opensuse.org/repositories/home:ecsos:server/...
0
votes
4
answers
3k
views
Upgrade certbot on Debian Jessie
Hi i have a machine based on Debian Jessie running an apache web server along with certbot 0.10.2.
Due to this message i've received:
As of June 1, 2021, you are no longer be able to renew your
...
0
votes
0
answers
4k
views
How can i solve these services errors on boot?
I have an ubuntu 20.04 LTS server running nextcloud, when the server its booting some services failed on boot.
root@demg-srv:/etc/systemd/network# systemctl --failed
UNIT ...
3
votes
1
answer
3k
views
Certbot: Your system is not supported by certbot-auto anymore. Certbot will no longer receive updates
How do I manually update the certificates that Certbot would normally update? I did not change anything in my system so I am assuming it is because I have CentOS 6. I also have Apache. How do I update ...
0
votes
1
answer
71
views
Need help to fix my bash script [closed]
I have create a bash script to renew security certificate for IKEve server. When I run the script it will ask me to press 2 and enter to renew the certificate. Can someone help me to add a command ...
0
votes
0
answers
4k
views
DNS problem: NXDOMAIN looking up A for example-domain - check that a DNS record exists for this domain
I use AWS Linux.
I want to use certbot to make my website from http to https.
when I run:sudo certbot certonly --webroot -w ./ -d example——domain
error shows:
Requested name http://example——domain ...
1
vote
1
answer
346
views
How Should I Move SSL Certificates (Made With Certbot) From One Ubuntu Server To Another?
I have an ubuntu bionic server on which I set up ssl with my own domain name by following this guide.
I would now like to decommission this server and move the ssl domain name to a different ubuntu ...
0
votes
1
answer
1k
views
404 not found error, certbot generating tls certificate
Through installing TLS certificate of turn server, running the command below and got the error message as shown pic, searched on net but couldn't solve..
sudo certbot certonly --standalone --...
0
votes
0
answers
1k
views
Apache stopped working after update - requests just timeout now - problem with firewalld
UPDATE:
I tried rolling back the yum update and it did not resolve the problem. I also tried running the server with only a single virtual host and no SSL and then trying to access site via http. I ...
0
votes
1
answer
231
views
Output double quotes and variable
I'm writing a script to automate Let's Encrypt in PowerDNS,(this is a simple bash shell script to be run on debian)
Certbot runs and calls the script, feeding to it the variable:
$CERTBOT_VALIDATION
...
1
vote
0
answers
283
views
Find out how SSL certificate (from letsencrypt) is auto-renewed
I'm running a Debian 8.11 (jessie) server (don't worry, a upgrade is plannend for later this year). It's a LAMP server, with addition to that, an ISPConfig installation. For the website (served ...
1
vote
0
answers
1k
views
Upgrade client to be ACMEv2 compatible
Ubuntu
Nginx
Cloudflare
I followed instructions here: https://www.digitalocean.com/community/questions/let-s-encrypt-acmev1-protocol-you-should-upgrade-to-an-acmev2.
sudo apt-get update
sudo apt-get ...
9
votes
1
answer
15k
views
How can I add subdomains to letsencrypt using certbots?
I have certbot installed and successfully use it to encrypt my homepage.
Now i tried to setup an email system for my website using dovecot and postfix.
I got it mostly running, only problem is, ...
1
vote
2
answers
174
views
expand an existing fullchain certificate
I want to expand an existing file instead of creating a new certificate for a subdomain.
I have these domains already in the file:
certtool -i < /etc/letsencrypt/live/example.org-0002/fullchain....
2
votes
0
answers
569
views
Set systemd timer to an odd and specific number of days
I'm using systemd.timers on CentOS 7 server and have a timer set to automatically renew Certbot-managed Let's Encrypt website certificate.
autorenewal.service:
[Unit]
Description=certbot certificate ...
1
vote
1
answer
8k
views
nginx: [emerg] BIO_new_file("/etc/letsencrypt/live/site_name/fullchain.pem") failed
I am using CentOS 7, Nginx 1.12.2, certbot 0.31.0 ,
Error after delete all things related to Let's Encrypt of 002.bkit.vn
[root@VMHostDefault 002.bkit.vn]# nginx -t
nginx: [emerg] BIO_new_file("/...
4
votes
1
answer
24k
views
Debian 9 stretch-backports signature couldn't be verified [duplicate]
I'm trying to install certbot on my Debian 9 server on Google compute engine VM.
Here's what I have done so far:
To add backports repository, I have edit the sources.list as:
sudo nano /etc/apt/...
1
vote
1
answer
3k
views
How to configure the Certbot not to include options-ssl-apache.conf into my VirtualHosts?
# cat /etc/letsencrypt/options-ssl-apache.conf
# Baseline setting to Include for SSL sites using Let's Encrypt certificates
SSLEngine on
# Intermediate configuration, tweak to your needs
...
0
votes
1
answer
192
views
Different page from a browser and wget [closed]
EDITED TO REMOVE OBSOLETE EXAMPLES
I have a very curious case that has dumbfounded me.
I was trying to get a certificate from letsencrypt and I was consistently getting errors that certbot is unable ...
0
votes
1
answer
4k
views
Unable to install Let's Encrypt certificate on CentOS 7
I am trying to install a Let's Encrypt SSL certificate to my website using Securing Apache with Let's Encrypt on CentOS 7.
My web server is (include version): Apache (cPanel)
My hosting provider is: ...
1
vote
3
answers
281
views
Certbot does not force Apache2 to read newly generated certificates
System: GNU/Linux Debian 9.5 headless.
Situation & Question
I have just caught the Let's Encrypt Certbot to re-generate the SSL certificate but did not reload Apache2. This has resulted in a ...
0
votes
2
answers
228
views
Certbot-nginx displays error
After executable command sudo certbox --nginx. Certbot give me output
Saving debug log to /var/log/letsencrypt/letsencrypt.log
An unexpected error occurred:
UnicodeDecodeError: 'ascii' codec can't ...
0
votes
1
answer
318
views
Variables from specific parts of an Text File as variable for further usage in shell script
We have an HaProxy setup in our company, and this works with SSL (certbot / crt-list.txt).
We want an automated task that reads the file crt-list.txt and takes out the Domain Name as a variable.
What ...
3
votes
2
answers
2k
views
How to validate / fix an error in Certbot renewal cron
The whole day, I am fixing bugs in mainly TLS area, but this question is not specifically about TLS.
Well, I have one web server with a few web sites, each with its own SSL certificate.
But to the ...
2
votes
1
answer
2k
views
certbot and awscli require different versions of botocore
I have a small script that generates new Let's Encrypt certificates whenever they are due for renewal and then imports the new certificates to our AWS account so that we can use them to sign ...
7
votes
2
answers
3k
views
Debian and Certbot: where does the package install the cron job?
I installed the python-certbot-apache package per the instructions on certbot.eff.org but can't find any entry for the cron job its supposed to set up.
The Certbot packages on your system come with ...
1
vote
1
answer
1k
views
Using -d with 2 versions of the same domain in Certbot [closed]
For Using -d with 2 versions of the same domain in Certbot I tried the following.
Instead doning:
certbot --nginx and then chosing 1+2 (for domain.tld + www.domain.tld), I did:
certbot --nginx -d ...
0
votes
2
answers
5k
views
The server could not connect to the client to verify the domain for Let's Encrypt's Certbot
I am running Sentry on AWS using Docker. The service is now running on port 9000.
I would like to use HTTPS, getting the certificate from Let's Encrypt. However I get the following error:
sudo certbot ...
-1
votes
1
answer
668
views
Combining Certbot with an Nginx server block maker
I have an Ubuntu 16.04 environment with a pure Nginx server and I use the following Bash script to automate creation of server blocks and corresponding (self-signed) SSL certifications.
It allows me ...
2
votes
1
answer
415
views
unable to sign certificate letsencrypt
I have recently set up a cloud via Nextcloud. I have successfully signed a certificate for my domain https://mydomain.home.com (of cource my real domain is different). This all worked out just fine.
...
1
vote
1
answer
2k
views
AWS EC2 instance says apache2 isn't running but the server is still up and httpd is listening on port 80?
So I'm trying to use certbot to get a LetsEncrypt certificate for my wordpress site on EC2 (using the AWS marketplace image by Bitnami, Ubuntu 14.04), but when running certbot --apache I get the ...
0
votes
2
answers
1k
views
Lets Encrypt for private domain? [closed]
I was wondering is it possible to generate Lets Encrypt certificate for private domains on internal network?
I have my own private DNS running, so I want to apply certificate for my Squid ...
3
votes
2
answers
2k
views
Certbot for multiserver configuration
Is there a way to use certbot and letsencrypt certificate for multiserver setup without having to manually copy the certificates from one node to another?
I have a domain name example.com which is ...