Skip to main content

Questions tagged [letsencrypt]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
1 answer
54 views

Why is my web server serving HTTPS content on port 80?

Apache webserver on Rocky Linux 9, with SSL certs obtained from LetsEncrypt. This is the config of a specific virtual host "myvhost", but the problem arises for all vhosts on my server: /etc/...
dr_'s user avatar
  • 30.1k
1 vote
2 answers
49 views

How to distribute HTTPS certificate/key securely and automatically on internal servers

I have a some internally available servers (all Debian), that share a LetsEncrypt wildcard certificate (*.local.example.com). One server (Server1) keeps the certificate up-to-date and now I'm looking ...
emma.makes's user avatar
1 vote
0 answers
65 views

Change IPSec IKEV2 VPN Default Ports 500 & 4500 To Anothers

For some reason OpenVPN is working on my local machine very well, But IPSec IKEV2 VPN not & it only works when OpenVPN is connect. I have a domain for IPSec IKEV2 VPN & in local machine vpn is ...
helius.dev's user avatar
0 votes
0 answers
182 views

certbot letsencrypt certificate installation failed

I have a small test server at home and I registered with letsencrypt to get a valid certificate. Certificate expired and wasn't automatically renewed (no harm done, this is strictly for testing ...
ZioByte's user avatar
  • 880
1 vote
1 answer
311 views

Update "let's encrypt" certificate from command line

A raspberry pi 3B+ is outfitted with NextCloudPi. Duckdns was setup and runs: the certificate expired August 13, 2023. Is there a terminal command that can force certificate renewal? I did find ...
gatorback's user avatar
  • 1,394
0 votes
1 answer
851 views

Obtain a Wordpress Website with a Proxmox container available from outside with https (ssl encryption)

My prelimanary actions: setting up a ddns hostname with noip service (ok) configured to automatically keep alive the association on my home router(ok) installed a proxmox server v8 (ok) create a lxc ...
Alessandro's user avatar
21 votes
5 answers
17k views

Installing Let's Encrypt on Amazon Linux 2023

I am trying to get SSL certificate with Let's Encrypt nginx on Amazon Linux 2023. First, I added EPEL using the commands wget https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm ...
Sanmi Akande's user avatar
0 votes
0 answers
53 views

why does certbot still can generate my certs after wipe?

i tested some things in docker and f*d up, also removed all containers and volumes including the certbot ones. so why is certbot still able to give me my certificates back? is it because they are ...
sam's user avatar
  • 1
2 votes
2 answers
2k views

How to add and delete a temporary nftables accept rule

To get and renew a Letsencrypt certificate, I need to open the http port 80 while certbot is running, and close it afterwards. (There is no normal web service in this server). With iptables I used ...
mivk's user avatar
  • 3,706
-1 votes
1 answer
1k views

how to setup webroot for new ubuntu server

I am setting up a new server and installing certbot on ubuntu 20. I am confused with sudo certbot certonly --webroot command of certbot. While running the command, it asks me input the webroot for ...
Krunal's user avatar
  • 101
0 votes
1 answer
55 views

Manually deploy LetsEncrypt certificate to Kubernetes

One of my systems (Rocky Linux 9) collects wildcard certificates from LetsEncrypt and distributes it to the various systems that require an SSL certificate. I also have AWX running on Kubernetes (...
Johan G's user avatar
  • 101
2 votes
1 answer
583 views

OpenBSD, relayd and acme-client: Unable to read TLS-certs for subdomains: "Empty reply from server"

OpenBSD server with relayd/httpd/acme-client. Attempting to run https://mydomain.com (app server on port 32489), https://webmail.mydomain.com (48293) and https://forum.mydomain.com (28192). All three ...
Mark Boulder's user avatar
2 votes
1 answer
125 views

Can I install a Let'sEncrypt ssl certificate before I configure a virtual host?

Assuming I am not close on which web server to use, Apache or Nginx but I still want to be over with the SSL certification procedure, can I install a Let'sEncrypt ssl certificate before I configure a ...
automation's user avatar
1 vote
2 answers
1k views

Let's Encrypt Certs Fail "openssl verify" Verification

I've followed the guidance from other Stack answers- there's a gazillion related to this- in building my openssl verify command to validate my Let's Encrypt certs, shown below: openssl verify -...
F1Linux's user avatar
  • 2,574
0 votes
1 answer
3k views

How do I check if my postfix email server is using SSL?

I have an Ubuntu mail server running postfix version 3.6.4. I configured postfix to use ssl by adding the following lines to /etc/postfix/main.cf: # TLS parameters smtpd_tls_cert_file = /etc/...
Trouble Bucket's user avatar
0 votes
1 answer
1k views

How can I remove the last certificate from a PEM file that contains three?

Some systems are still running in Ubuntu 16.04 that cannot be upgraded easily but they will be fully replaced by Ubuntu 22.04 machines later this year; unfortunately, to get LetsEncrypt to work on ...
Henry van Megen's user avatar
0 votes
2 answers
294 views

Ansible include_task based on condition (directory empty or certifcate is expired or 30 days remaining in expiry)

I am using Ansible letsencrypt module to generate SSL certificates. The playbook is working fine, the certificate is generated and applied. Now I want that this task is only played when certain ...
Waqas Ahmed Khan's user avatar
0 votes
1 answer
64 views

how to access TSL certificate locally

I have a valid letsencrypt certificate that is used by apache server. <IfModule mod_ssl.c> <VirtualHost *:443> ServerName mydomain.com SSLCertificateFile /etc/...
geldek's user avatar
  • 103
0 votes
0 answers
124 views

"You can now switch to a Let’s Encrypt certificate." - should I?

I recently apt-get dist-upgraded my Devuan GNU/Linux Chimaera machine. after upgrading the package jitsi-meet-web-config to version 1.0.5818-1, I get a message saying: You can now switch to a Let’s ...
einpoklum's user avatar
  • 9,653
0 votes
0 answers
568 views

Proftp Virtual Hosts Settings

i'm trying to set up proftpd with virtual server settings, but there are always problems during connection. I have two domains which are pointing to the same External IP Address: ftp.domain.tld -> ...
sangul's user avatar
  • 15
0 votes
1 answer
222 views

SLE: installing certbot and its NGINX plugin

openSUSE Tumbleweed Installing certbot and its NGINX plugin on openSUSE Tumbleweed was just straightforward: zypper addrepo https://download.opensuse.org/repositories/home:ecsos:server/...
Megidd's user avatar
  • 1,559
0 votes
0 answers
1k views

How to add Lets Encrypt to local list of trusted certificates in /etc/ssl/certs/ca-certificates.ctr?

Question How can I add Lets Encrypt to the file /etc/ssl/certs/ca-certificates.crt ? This file is a list of certificates from trusted CA and I want to add Lets Encryt to it. I believe that by doing so ...
user avatar
0 votes
1 answer
1k views

Does my system accept the new let's encrypt root certificate?

Let's encrypt changes there root certificate from DST Root CA X3 to ISRG Root X1- how can I check if my server (which connects to an api with let's encrypt certificate) works still in future?
sneaky's user avatar
  • 261
2 votes
2 answers
5k views

Mosquitto unable to use certificates from letsencrypt

I am trying to set up Mosquitto using this guide: https://www.digitalocean.com/community/tutorials/how-to-install-and-secure-the-mosquitto-mqtt-messaging-broker-on-ubuntu-18-04 I am using ubuntu 20.04 ...
Stonecraft's user avatar
1 vote
0 answers
18 views

Website migration

I have a website on a home linux box (Rasperry Pi2B). It is mailnly for my own use, but is exposed to the world, uses a Dynamic DNS service, HTTPS with a LetsEncrypt certificate, which renews ...
NormB's user avatar
  • 11
1 vote
1 answer
536 views

SSL certs for a number of docker container services on a single host

I'm very new to Docker, but I've successfully set up a docker-compose.yaml consisting of a handful of services like Mosquitto, NodeRED, InfluxDB, and Grafana. Each publishes an HTTP endpoint on a ...
Rick's user avatar
  • 205
0 votes
1 answer
652 views

letsencrypt shellinabox

I see this problem all over the internet searches, and can't seem to find the resolution. I want to use shellinabox on whatever.net:54321 I have letsencrypt certificates I've tried to copy /etc/...
bradboy's user avatar
  • 103
1 vote
0 answers
558 views

Rocket chat enable ssl in apache

I have installed rocket chat on docker - on Debian 9 OS. I am unable to enable https for the same. I can access it using fqdn - http://chat.xyz.com:3003 I have generated ssl certificates using certbot....
Aryan Singh's user avatar
0 votes
1 answer
233 views

Output double quotes and variable

I'm writing a script to automate Let's Encrypt in PowerDNS,(this is a simple bash shell script to be run on debian) Certbot runs and calls the script, feeding to it the variable: $CERTBOT_VALIDATION ...
mike's user avatar
  • 1
1 vote
0 answers
284 views

Find out how SSL certificate (from letsencrypt) is auto-renewed

I'm running a Debian 8.11 (jessie) server (don't worry, a upgrade is plannend for later this year). It's a LAMP server, with addition to that, an ISPConfig installation. For the website (served ...
Mathlight's user avatar
  • 123
1 vote
2 answers
361 views

Letsencrypt Wildcard certficate with NFS. [U 18.04]

I'm currently trying to share and use my wildcard certificate from letsencrypt with NFS, but the servers who are supposed to use it, cannot do so. To my Setup: I have 3 VM's (in future maybe 4) ...
Zockerjonny's user avatar
2 votes
1 answer
10k views

Sudden "no "ssl_certificate" is defined for the "listen ... ssl" error

I have a config like this which has worked for years: server { listen 80; server_name www.domain.com domain.com; return 301 https://domain.com$request_uri; } # !!!! # line ...
Dajaku's user avatar
  • 29
11 votes
1 answer
17k views

How can I add subdomains to letsencrypt using certbots?

I have certbot installed and successfully use it to encrypt my homepage. Now i tried to setup an email system for my website using dovecot and postfix. I got it mostly running, only problem is, ...
user2741831's user avatar
1 vote
2 answers
187 views

expand an existing fullchain certificate

I want to expand an existing file instead of creating a new certificate for a subdomain. I have these domains already in the file: certtool -i < /etc/letsencrypt/live/example.org-0002/fullchain....
rubo77's user avatar
  • 29.4k
2 votes
0 answers
587 views

Set systemd timer to an odd and specific number of days

I'm using systemd.timers on CentOS 7 server and have a timer set to automatically renew Certbot-managed Let's Encrypt website certificate. autorenewal.service: [Unit] Description=certbot certificate ...
Anvbis's user avatar
  • 21
0 votes
1 answer
283 views

How to renewal ssl certificate on redbird proxy server

I use redbird proxy server for serve my app. Today expired my certificate. How I can renewal it?. I tried it by this instruction but looks like it works just with ngnix server. my server.js: const ...
Edgaras Karka's user avatar
3 votes
2 answers
3k views

Install Let's Encrypt SSL certificate on Oracle Linux Server

I am trying to install a Let's Encrypt certificate on a Oracle Linux Server 7.6. Since the server does not have a public IP, I had to validate via DNS.I followed the instructions here https://github....
cflasrado's user avatar
1 vote
0 answers
967 views

How to make Nginx picking up nex SSL certificate

I'm using Letsencrypt SSL certificates with Nginx (nginx version: nginx/1.10.3 (Ubuntu)). From my understanding, Nginx needs to be restarted or, at least, have its configuration reloaded in order to ...
Sig's user avatar
  • 133
1 vote
0 answers
25 views

Nginx, Let's encrypt cause error redirect http to https partially

I am using CentOS 7, Let's encrypt (want to clear all thing related 002.bkit.vn), Nginx. I try to install Let's encrypt for 002.bkit.vn , then I remove it, some things still exist, but I don't know ...
Vy Do's user avatar
  • 171
1 vote
1 answer
8k views

nginx: [emerg] BIO_new_file("/etc/letsencrypt/live/site_name/fullchain.pem") failed

I am using CentOS 7, Nginx 1.12.2, certbot 0.31.0 , Error after delete all things related to Let's Encrypt of 002.bkit.vn [root@VMHostDefault 002.bkit.vn]# nginx -t nginx: [emerg] BIO_new_file("/...
Vy Do's user avatar
  • 171
1 vote
1 answer
3k views

How to configure the Certbot not to include options-ssl-apache.conf into my VirtualHosts?

# cat /etc/letsencrypt/options-ssl-apache.conf # Baseline setting to Include for SSL sites using Let's Encrypt certificates SSLEngine on # Intermediate configuration, tweak to your needs ...
Vlastimil Burián's user avatar
1 vote
1 answer
352 views

Logs gzipped and not gzipped

Recently I've changed logs configuration for letsencrypt, because there was no given one and I have files: letsencrypt.log letsencrypt.log.1 letsencrypt.log.10 letsencrypt.log.10.gz letsencrypt.log....
pbies's user avatar
  • 474
0 votes
1 answer
4k views

Unable to install Let's Encrypt certificate on CentOS 7

I am trying to install a Let's Encrypt SSL certificate to my website using Securing Apache with Let's Encrypt on CentOS 7. My web server is (include version): Apache (cPanel) My hosting provider is: ...
current_user's user avatar
0 votes
0 answers
61 views

Let's Encrypt Expire Bot showing different date then command line

Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018. but when I log in to the server, and check the ...
Zhenyu's user avatar
  • 133
0 votes
1 answer
360 views

Postfix can't send email to popular email sites

I have an installation of iRedMail version 0.9.7 running on Scientific Linux (RHEL) 7 : Linux smtp.fabricobjects.com 3.10.0-862.6.3.el7.x86_64 #1 SMP Tue Jun 26 12:13:22 CDT 2018 x86_64 x86_64 ...
Jeffrey Greaux's user avatar
2 votes
2 answers
3k views

LetsEncrypt could not connect to verify the domain (timeout)

I'm trying to set up a SSL certificate for my Nextcloud server with LetsEncrypt, but when I run: $ sudo certbot certonly --webroot -w /var/www/nextcloud --agree-tos \ --no-eff-email --email ...
D. Math's user avatar
  • 21
0 votes
1 answer
3k views

How to upgrade dpkg if already newest version? // apt-get upgrade broken by dpkg; Caused by LetsEncrypt Certbot backport

On Debian 9.4 Stretch Accidently updated && upgraded to the jessie-backports, then changed the sources.list to the correct stretch-backports. Can this kill my apt? If not: sudo apt-get ...
GregorVolkmann's user avatar
0 votes
1 answer
53 views

Chaining a command to the outcome of LetsEncrypt renewal

I would like to automate the running of this command (which is simple enough): ~/dehydrated/dehydrated --cron --domain www.mydomain.com --out . --challenge http-01 The problem is that I need to ...
DDiran's user avatar
  • 115
3 votes
2 answers
5k views

How to do mass virtual hosting with lets encrypt?

I have 2500 public domains (like www.example.com, example.com, www.example.net, and example.net) running on a single IP-address using Apache VirtualHost. I want to setup letsencrypt for all these ...
Ole Tange's user avatar
  • 35.8k
1 vote
0 answers
898 views

Cannot establish SSL connection

I am trying to establish SSL connection so my users entering the site will not refuse to stay because of insecure HTTP. Basically I am trying to move from HTTP to HTTPS. I learned many manuals and ...
John's user avatar
  • 297