Questions tagged [letsencrypt]
The letsencrypt tag has no usage guidance.
70
questions
0
votes
0
answers
53
views
certbot letsencrypt certificate installation failed
I have a small test server at home and I registered with letsencrypt to get a valid certificate.
Certificate expired and wasn't automatically renewed (no harm done, this is strictly for testing ...
- 860
1
vote
1
answer
74
views
Update "let's encrypt" certificate from command line
A raspberry pi 3B+ is outfitted with NextCloudPi. Duckdns was setup and runs: the certificate expired August 13, 2023.
Is there a terminal command that can force certificate renewal?
I did find ...
- 1,254
0
votes
1
answer
120
views
Obtain a Wordpress Website with a Proxmox container available from outside with https (ssl encryption)
My prelimanary actions:
setting up a ddns hostname with noip service (ok)
configured to automatically keep alive the association on my home router(ok)
installed a proxmox server v8 (ok)
create a lxc ...
- 51
12
votes
4
answers
9k
views
Installing Let's Encrypt on Amazon Linux 2023
I am trying to get SSL certificate with Let's Encrypt nginx on Amazon Linux 2023.
First, I added EPEL using the commands
wget https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
...
- 121
0
votes
0
answers
45
views
why does certbot still can generate my certs after wipe?
i tested some things in docker and f*d up, also removed all containers and volumes including the certbot ones.
so why is certbot still able to give me my certificates back?
is it because they are ...
- 1
2
votes
2
answers
1k
views
How to add and delete a temporary nftables accept rule
To get and renew a Letsencrypt certificate, I need to open the http port 80 while certbot is running, and close it afterwards. (There is no normal web service in this server).
With iptables I used ...
- 3,506
-1
votes
1
answer
843
views
how to setup webroot for new ubuntu server
I am setting up a new server and installing certbot on ubuntu 20.
I am confused with sudo certbot certonly --webroot command of certbot.
While running the command, it asks me input the webroot for ...
- 101
0
votes
1
answer
40
views
Manually deploy LetsEncrypt certificate to Kubernetes
One of my systems (Rocky Linux 9) collects wildcard certificates from LetsEncrypt and distributes it to the various systems that require an SSL certificate.
I also have AWX running on Kubernetes (...
- 101
2
votes
1
answer
418
views
OpenBSD, relayd and acme-client: Unable to read TLS-certs for subdomains: "Empty reply from server"
OpenBSD server with relayd/httpd/acme-client. Attempting to run https://mydomain.com (app server on port 32489), https://webmail.mydomain.com (48293) and https://forum.mydomain.com (28192). All three ...
- 141
2
votes
1
answer
125
views
Can I install a Let'sEncrypt ssl certificate before I configure a virtual host?
Assuming I am not close on which web server to use, Apache or Nginx but I still want to be over with the SSL certification procedure, can I install a Let'sEncrypt ssl certificate before I configure a ...
- 57
1
vote
2
answers
1k
views
Let's Encrypt Certs Fail "openssl verify" Verification
I've followed the guidance from other Stack answers- there's a gazillion related to this- in building my openssl verify command to validate my Let's Encrypt certs, shown below:
openssl verify -...
- 2,366
0
votes
1
answer
2k
views
How do I check if my postfix email server is using SSL?
I have an Ubuntu mail server running postfix version 3.6.4. I configured postfix to use ssl by adding the following lines to /etc/postfix/main.cf:
# TLS parameters
smtpd_tls_cert_file = /etc/...
- 103
0
votes
1
answer
961
views
How can I remove the last certificate from a PEM file that contains three?
Some systems are still running in Ubuntu 16.04 that cannot be upgraded easily but they will be fully replaced by Ubuntu 22.04 machines later this year; unfortunately, to get LetsEncrypt to work on ...
- 111
0
votes
2
answers
237
views
Ansible include_task based on condition (directory empty or certifcate is expired or 30 days remaining in expiry)
I am using Ansible letsencrypt module to generate SSL certificates. The playbook is working fine, the certificate is generated and applied.
Now I want that this task is only played when certain ...
0
votes
1
answer
59
views
how to access TSL certificate locally
I have a valid letsencrypt certificate that is used by apache server.
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerName mydomain.com
SSLCertificateFile /etc/...
- 103
0
votes
0
answers
100
views
"You can now switch to a Let’s Encrypt certificate." - should I?
I recently apt-get dist-upgraded my Devuan GNU/Linux Chimaera machine. after upgrading the package jitsi-meet-web-config to version 1.0.5818-1, I get a message saying:
You can now switch to a Let’s ...
- 9,207
0
votes
0
answers
477
views
Proftp Virtual Hosts Settings
i'm trying to set up proftpd with virtual server settings, but there are always problems during connection.
I have two domains which are pointing to the same External IP Address:
ftp.domain.tld -> ...
- 15
0
votes
1
answer
163
views
SLE: installing certbot and its NGINX plugin
openSUSE Tumbleweed
Installing certbot and its NGINX plugin on openSUSE Tumbleweed was just straightforward:
zypper addrepo https://download.opensuse.org/repositories/home:ecsos:server/...
- 1,529
0
votes
0
answers
940
views
How to add Lets Encrypt to local list of trusted certificates in /etc/ssl/certs/ca-certificates.ctr?
Question
How can I add Lets Encrypt to the file /etc/ssl/certs/ca-certificates.crt ? This file is a list of certificates from trusted CA and I want to add Lets Encryt to it.
I believe that by doing so ...
user462354
0
votes
1
answer
1k
views
Does my system accept the new let's encrypt root certificate?
Let's encrypt changes there root certificate from DST Root CA X3 to ISRG Root X1- how can I check if my server (which connects to an api with let's encrypt certificate) works still in future?
- 251
2
votes
2
answers
4k
views
Mosquitto unable to use certificates from letsencrypt
I am trying to set up Mosquitto using this guide:
https://www.digitalocean.com/community/tutorials/how-to-install-and-secure-the-mosquitto-mqtt-messaging-broker-on-ubuntu-18-04
I am using ubuntu 20.04 ...
- 779
1
vote
0
answers
17
views
Website migration
I have a website on a home linux box (Rasperry Pi2B). It is mailnly for my own use, but is exposed to the world, uses a Dynamic DNS service, HTTPS with a LetsEncrypt certificate, which renews ...
- 11
1
vote
1
answer
407
views
SSL certs for a number of docker container services on a single host
I'm very new to Docker, but I've successfully set up a docker-compose.yaml consisting of a handful of services like Mosquitto, NodeRED, InfluxDB, and Grafana. Each publishes an HTTP endpoint on a ...
- 205
0
votes
1
answer
499
views
letsencrypt shellinabox
I see this problem all over the internet searches, and can't seem to find the resolution.
I want to use shellinabox on whatever.net:54321
I have letsencrypt certificates
I've tried to copy /etc/...
- 103
1
vote
0
answers
539
views
Rocket chat enable ssl in apache
I have installed rocket chat on docker - on Debian 9 OS.
I am unable to enable https for the same.
I can access it using fqdn - http://chat.xyz.com:3003
I have generated ssl certificates using certbot....
- 11
0
votes
1
answer
221
views
Output double quotes and variable
I'm writing a script to automate Let's Encrypt in PowerDNS,(this is a simple bash shell script to be run on debian)
Certbot runs and calls the script, feeding to it the variable:
$CERTBOT_VALIDATION
...
- 1
1
vote
0
answers
279
views
Find out how SSL certificate (from letsencrypt) is auto-renewed
I'm running a Debian 8.11 (jessie) server (don't worry, a upgrade is plannend for later this year). It's a LAMP server, with addition to that, an ISPConfig installation. For the website (served ...
- 123
1
vote
2
answers
333
views
Letsencrypt Wildcard certficate with NFS. [U 18.04]
I'm currently trying to share and use my wildcard certificate from letsencrypt with NFS, but the servers who are supposed to use it, cannot do so.
To my Setup:
I have 3 VM's (in future maybe 4) ...
- 13
2
votes
1
answer
9k
views
Sudden "no "ssl_certificate" is defined for the "listen ... ssl" error
I have a config like this which has worked for years:
server {
listen 80;
server_name www.domain.com domain.com;
return 301 https://domain.com$request_uri;
}
# !!!!
# line ...
- 29
6
votes
1
answer
12k
views
How can I add subdomains to letsencrypt using certbots?
I have certbot installed and successfully use it to encrypt my homepage.
Now i tried to setup an email system for my website using dovecot and postfix.
I got it mostly running, only problem is, ...
- 213
1
vote
2
answers
159
views
expand an existing fullchain certificate
I want to expand an existing file instead of creating a new certificate for a subdomain.
I have these domains already in the file:
certtool -i < /etc/letsencrypt/live/example.org-0002/fullchain....
- 28.3k
2
votes
0
answers
551
views
Set systemd timer to an odd and specific number of days
I'm using systemd.timers on CentOS 7 server and have a timer set to automatically renew Certbot-managed Let's Encrypt website certificate.
autorenewal.service:
[Unit]
Description=certbot certificate ...
- 21
0
votes
1
answer
276
views
How to renewal ssl certificate on redbird proxy server
I use redbird proxy server for serve my app. Today expired my certificate.
How I can renewal it?. I tried it by this instruction but looks like it works just with ngnix server.
my server.js:
const ...
- 2,497
3
votes
2
answers
3k
views
Install Let's Encrypt SSL certificate on Oracle Linux Server
I am trying to install a Let's Encrypt certificate on a Oracle Linux Server 7.6. Since the server does not have a public IP, I had to validate via DNS.I followed the instructions here https://github....
- 33
1
vote
0
answers
908
views
How to make Nginx picking up nex SSL certificate
I'm using Letsencrypt SSL certificates with Nginx (nginx version: nginx/1.10.3 (Ubuntu)).
From my understanding, Nginx needs to be restarted or, at least, have its configuration reloaded in order to ...
- 133
1
vote
0
answers
24
views
Nginx, Let's encrypt cause error redirect http to https partially
I am using CentOS 7, Let's encrypt (want to clear all thing related 002.bkit.vn), Nginx.
I try to install Let's encrypt for 002.bkit.vn , then I remove it, some things still exist, but I don't know ...
- 171
1
vote
1
answer
8k
views
nginx: [emerg] BIO_new_file("/etc/letsencrypt/live/site_name/fullchain.pem") failed
I am using CentOS 7, Nginx 1.12.2, certbot 0.31.0 ,
Error after delete all things related to Let's Encrypt of 002.bkit.vn
[root@VMHostDefault 002.bkit.vn]# nginx -t
nginx: [emerg] BIO_new_file("/...
- 171
1
vote
1
answer
3k
views
How to configure the Certbot not to include options-ssl-apache.conf into my VirtualHosts?
# cat /etc/letsencrypt/options-ssl-apache.conf
# Baseline setting to Include for SSL sites using Let's Encrypt certificates
SSLEngine on
# Intermediate configuration, tweak to your needs
...
- 28.3k
1
vote
1
answer
328
views
Logs gzipped and not gzipped
Recently I've changed logs configuration for letsencrypt, because there was no given one and I have files:
letsencrypt.log
letsencrypt.log.1
letsencrypt.log.10
letsencrypt.log.10.gz
letsencrypt.log....
- 434
0
votes
1
answer
4k
views
Unable to install Let's Encrypt certificate on CentOS 7
I am trying to install a Let's Encrypt SSL certificate to my website using Securing Apache with Let's Encrypt on CentOS 7.
My web server is (include version): Apache (cPanel)
My hosting provider is: ...
- 81
0
votes
0
answers
59
views
Let's Encrypt Expire Bot showing different date then command line
Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018.
but when I log in to the server, and check the ...
- 133
0
votes
1
answer
341
views
Postfix can't send email to popular email sites
I have an installation of iRedMail version 0.9.7 running on Scientific Linux (RHEL) 7 :
Linux smtp.fabricobjects.com 3.10.0-862.6.3.el7.x86_64 #1 SMP Tue Jun 26 12:13:22 CDT 2018 x86_64 x86_64 ...
2
votes
2
answers
3k
views
LetsEncrypt could not connect to verify the domain (timeout)
I'm trying to set up a SSL certificate for my Nextcloud server with LetsEncrypt, but when I run:
$ sudo certbot certonly --webroot -w /var/www/nextcloud --agree-tos \
--no-eff-email --email ...
- 21
0
votes
1
answer
3k
views
How to upgrade dpkg if already newest version? // apt-get upgrade broken by dpkg; Caused by LetsEncrypt Certbot backport
On Debian 9.4 Stretch
Accidently updated && upgraded to the jessie-backports, then changed the sources.list to the correct stretch-backports.
Can this kill my apt?
If not:
sudo apt-get ...
0
votes
1
answer
52
views
Chaining a command to the outcome of LetsEncrypt renewal
I would like to automate the running of this command (which is simple enough):
~/dehydrated/dehydrated --cron --domain www.mydomain.com --out . --challenge http-01
The problem is that I need to ...
- 115
3
votes
2
answers
5k
views
How to do mass virtual hosting with lets encrypt?
I have 2500 public domains (like www.example.com, example.com, www.example.net, and example.net) running on a single IP-address using Apache VirtualHost.
I want to setup letsencrypt for all these ...
- 34.7k
1
vote
0
answers
867
views
Cannot establish SSL connection
I am trying to establish SSL connection so my users entering the site will not refuse to stay because of insecure HTTP. Basically I am trying to move from HTTP to HTTPS.
I learned many manuals and ...
- 297
3
votes
2
answers
2k
views
How to validate / fix an error in Certbot renewal cron
The whole day, I am fixing bugs in mainly TLS area, but this question is not specifically about TLS.
Well, I have one web server with a few web sites, each with its own SSL certificate.
But to the ...
- 28.3k
0
votes
2
answers
5k
views
The server could not connect to the client to verify the domain for Let's Encrypt's Certbot
I am running Sentry on AWS using Docker. The service is now running on port 9000.
I would like to use HTTPS, getting the certificate from Let's Encrypt. However I get the following error:
sudo certbot ...
- 181
0
votes
1
answer
343
views
Acme-Challenge not requestable by all sub-domains?
I have Apache 2.4 and the following site-config for acme challenges:
<IfModule mod_alias.c>
Alias /.well-known/acme-challenge /var/www/letsencrypt/challenges/
<Directory "/var/www/...
- 1