Questions tagged [letsencrypt]
The letsencrypt tag has no usage guidance.
0
votes
0answers
11 views
Nginx, Let's encrypt cause error redirect http to https partially
I am using CentOS 7, Let's encrypt (want to clear all thing related 002.bkit.vn), Nginx.
I try to install Let's encrypt for 002.bkit.vn , then I remove it, some things still exist, but I don't know ...
0
votes
1answer
18 views
nginx: [emerg] BIO_new_file(“/etc/letsencrypt/live/site_name/fullchain.pem”) failed
I am using CentOS 7, Nginx 1.12.2, certbot 0.31.0 ,
Error after delete all things related to Let's Encrypt of 002.bkit.vn
[root@VMHostDefault 002.bkit.vn]# nginx -t
nginx: [emerg] BIO_new_file("/...
0
votes
0answers
17 views
It seems that my cron task doesn't run [duplicate]
I have cron task for root that should run daily:
$ whoami
main_usr
$ sudo crontab -l -u root
0 23 * * * certbot renew --cert-name app.my_domain123.com --pre-hook "systemctl nginx stop" --post-hook ...
0
votes
1answer
318 views
How to configure the Certbot not to include options-ssl-apache.conf into my VirtualHosts?
# cat /etc/letsencrypt/options-ssl-apache.conf
# Baseline setting to Include for SSL sites using Let's Encrypt certificates
SSLEngine on
# Intermediate configuration, tweak to your needs
...
1
vote
1answer
51 views
Logs gzipped and not gzipped
Recently I've changed logs configuration for letsencrypt, because there was no given one and I have files:
letsencrypt.log
letsencrypt.log.1
letsencrypt.log.10
letsencrypt.log.10.gz
letsencrypt.log....
0
votes
1answer
650 views
Unable to install Let's Encrypt certificate on CentOS 7
I am trying to install a Let's Encrypt SSL certificate to my website using Securing Apache with Let's Encrypt on CentOS 7.
My web server is (include version): Apache (cPanel)
My hosting provider is: ...
0
votes
0answers
40 views
Let's Encrypt Expire Bot showing different date then command line
Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018.
but when I log in to the server, and check the ...
0
votes
1answer
56 views
Postfix can't send email to popular email sites
I have an installation of iRedMail version 0.9.7 running on Scientific Linux (RHEL) 7 :
Linux smtp.fabricobjects.com 3.10.0-862.6.3.el7.x86_64 #1 SMP Tue Jun 26 12:13:22 CDT 2018 x86_64 x86_64 ...
2
votes
1answer
1k views
LetsEncrypt could not connect to verify the domain (timeout)
I'm trying to set up a SSL certificate for my Nextcloud server with LetsEncrypt, but when I run:
$ sudo certbot certonly --webroot -w /var/www/nextcloud --agree-tos \
--no-eff-email --email ...
0
votes
1answer
478 views
How to upgrade dpkg if already newest version? // apt-get upgrade broken by dpkg; Caused by LetsEncrypt Certbot backport
On Debian 9.4 Stretch
Accidently updated && upgraded to the jessie-backports, then changed the sources.list to the correct stretch-backports.
Can this kill my apt?
If not:
sudo apt-get ...
0
votes
1answer
35 views
Chaining a command to the outcome of LetsEncrypt renewal
I would like to automate the running of this command (which is simple enough):
~/dehydrated/dehydrated --cron --domain www.mydomain.com --out . --challenge http-01
The problem is that I need to ...
2
votes
2answers
2k views
How to do mass virtual hosting with lets encrypt?
I have 2500 public domains (like www.example.com, example.com, www.example.net, and example.net) running on a single IP-address using Apache VirtualHost.
I want to setup letsencrypt for all these ...
1
vote
0answers
588 views
Cannot establish SSL connection
I am trying to establish SSL connection so my users entering the site will not refuse to stay because of insecure HTTP. Basically I am trying to move from HTTP to HTTPS.
I learned many manuals and ...
3
votes
2answers
816 views
How to validate / fix an error in Certbot renewal cron
The whole day, I am fixing bugs in mainly TLS area, but this question is not specifically about TLS.
Well, I have one web server with a few web sites, each with its own SSL certificate.
But to the ...
0
votes
2answers
3k views
The server could not connect to the client to verify the domain for Let's Encrypt's Certbot
I am running Sentry on AWS using Docker. The service is now running on port 9000.
I would like to use HTTPS, getting the certificate from Let's Encrypt. However I get the following error:
sudo ...
0
votes
1answer
269 views
Acme-Challenge not requestable by all sub-domains?
I have Apache 2.4 and the following site-config for acme challenges:
<IfModule mod_alias.c>
Alias /.well-known/acme-challenge /var/www/letsencrypt/challenges/
<Directory "/var/www/...
1
vote
1answer
272 views
Automating Certbot for OSX Server error in get_cert.sh script [closed]
I am currently facing a problem with my Mac OS-X El Capitan machine when running certbot (or basically letsencrypt).
My machine is a mac mini, that is supposedly running an MDM solution with ...
2
votes
1answer
331 views
unable to sign certificate letsencrypt
I have recently set up a cloud via Nextcloud. I have successfully signed a certificate for my domain https://mydomain.home.com (of cource my real domain is different). This all worked out just fine.
...
3
votes
4answers
410 views
Automating OpenSSL certificates creation, Let'sEncrypt signing, and site dir associating, in an Nginx environment
I have an Ubuntu-server 16.04 VPS and Nginx. Now I'm implementing HTTP1 (without TLS, utilizing port 80) but I desire to go "one step forward" and work with HTTP2 (with TLS, utilizing port 443), for ...
0
votes
1answer
491 views
Run node app with SSL on 443 port (on 80 is working)
I am trying to configure a server running on Amazon EC2.
I figured out how to run my node app on port 80, but now I'm trying to run on port 443, with Letsencrypt SSL. Before to work on port 80 I ...
0
votes
1answer
240 views
Finding the webroot directory for Ghost in AWS
I installed Ghost via Bitnami on AWS and registered a domain (750in100.com) from Google Domains with it. Next I tried installing an SSL certificate through Let's Encrypt, and that's where I'm running ...
1
vote
1answer
554 views
AWS EC2 instance says apache2 isn't running but the server is still up and httpd is listening on port 80?
So I'm trying to use certbot to get a LetsEncrypt certificate for my wordpress site on EC2 (using the AWS marketplace image by Bitnami, Ubuntu 14.04), but when running certbot --apache I get the ...
2
votes
1answer
570 views
Switching from letsencrypt (client) to acme-client - where is my account key?
I started using letsencrypt when there was an "official" client called letsencrypt. I now want to change to acme-client - that is, the C implementation.
I think I manage to configure my sites, and ...
10
votes
2answers
2k views
Let's Encrypt - Apache - OCSP stapling
I would like to enable OCSP stapling in my Apache server. I'm using:
Server: Apache/2.4.7 on Ubuntu
Certificate: Let's Encrypt
To the file:
/etc/apache2/sites-available/default-ssl.conf
I added:
...
1
vote
0answers
107 views
Installing letsencrypt on FreeBSD has failed
I've been able to install letsencrypt on FreeBSD the same I've been doing on Linux I do this:
git clone https://github.com/letsencrypt/letsencrypt.git /opt/letsencrypt
cd /opt/letsencrypt
sudo ./...
1
vote
2answers
758 views
Lets Encrypt for private domain? [closed]
I was wondering is it possible to generate Lets Encrypt certificate for private domains on internal network?
I have my own private DNS running, so I want to apply certificate for my Squid ...
1
vote
1answer
484 views
Let's encrypt renewal error
I run the following from cron every month, and got this error:
/opt/letsencrypt/letsencrypt-auto certonly --quiet --standalone --renew-by-default -d example.org -d www.example.org
Creating virtual ...
1
vote
1answer
2k views
Apache problems when trying to set up SSL (Debian)
I've been trying to get a Let's Encrypt certificate, key and chain to work.
But I have also done some stuff that I know I didn't need to before I realized what to do.
Port 443 wasn't open so I've ...
2
votes
1answer
693 views
Is it possible to get letsencrypt certificates with a shell script?
I would like to create a shell script for getting let's encrypt certificates:
#!/bin/bash
sudo docker run -it --rm -p 443:443 -p 80:80 --name certbot \
-v "/etc/letsencrypt:/etc/letsencrypt" \
...
1
vote
3answers
2k views
I don't know how to bootstrap Certbot on your operating system
I'm trying to add an Let's Encrypt cert on to my OpenBSD 6.0 using an acme-client and certbot - but both returns me:
# ./letsencrypt-auto certonly
Sorry, I don't know how to bootstrap Certbot on ...
0
votes
1answer
232 views
letencrypt on shared hosting: neither yum or dnf found
I am following the directions on the following site
https://www.godaddy.com/help/install-a-lets-encrypt-ssl-apache-20245
and per this question
`sudo: command not found' when following a tutorial ...
2
votes
2answers
517 views
Certbot for multiserver configuration
Is there a way to use certbot and letsencrypt certificate for multiserver setup without having to manually copy the certificates from one node to another?
I have a domain name example.com which is ...
2
votes
0answers
701 views
Use Letsencrypt certificates for Postgresql [closed]
I have successfully configured Letsencrypt for my NGINX webserver on Debian 8 Jessie.
Now I have installed Postgresql 9.4 and want to use the LE certificates (in /etc/letsencrypt/live/mydomain/com/......
4
votes
3answers
5k views
Certbot add www domain to existing domain certificate
I have installed an SSL certificate from Let's Encrypt with Certbot on my Apache server with Debian 8 following this tutorial from Let's Encrypt's own documentation: https://certbot.eff.org/#...
4
votes
0answers
7k views
Uninstall all changes made by Letsencrypt
I installed Letsencrypt during the beta, following the instructions in the email, and now it seems broken on my debian jessie server.
I try to uninstall letsencrypt and want to start over with my (...
1
vote
1answer
2k views
Changing the port letsencrypt tries to connect on
So, one of my servers is behind NAT, and since there is already a publicly accessible apache server going on my LAN, I decided to access it from the outside with different ports, and remap them to the ...
