Questions tagged [letsencrypt]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
53 views

certbot letsencrypt certificate installation failed

I have a small test server at home and I registered with letsencrypt to get a valid certificate. Certificate expired and wasn't automatically renewed (no harm done, this is strictly for testing ...
ZioByte's user avatar
  • 860
1 vote
1 answer
74 views

Update "let's encrypt" certificate from command line

A raspberry pi 3B+ is outfitted with NextCloudPi. Duckdns was setup and runs: the certificate expired August 13, 2023. Is there a terminal command that can force certificate renewal? I did find ...
gatorback's user avatar
  • 1,254
0 votes
1 answer
120 views

Obtain a Wordpress Website with a Proxmox container available from outside with https (ssl encryption)

My prelimanary actions: setting up a ddns hostname with noip service (ok) configured to automatically keep alive the association on my home router(ok) installed a proxmox server v8 (ok) create a lxc ...
Alessandro's user avatar
12 votes
4 answers
9k views

Installing Let's Encrypt on Amazon Linux 2023

I am trying to get SSL certificate with Let's Encrypt nginx on Amazon Linux 2023. First, I added EPEL using the commands wget https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm ...
Sanmi Akande's user avatar
0 votes
0 answers
45 views

why does certbot still can generate my certs after wipe?

i tested some things in docker and f*d up, also removed all containers and volumes including the certbot ones. so why is certbot still able to give me my certificates back? is it because they are ...
sam's user avatar
  • 1
2 votes
2 answers
1k views

How to add and delete a temporary nftables accept rule

To get and renew a Letsencrypt certificate, I need to open the http port 80 while certbot is running, and close it afterwards. (There is no normal web service in this server). With iptables I used ...
mivk's user avatar
  • 3,506
-1 votes
1 answer
843 views

how to setup webroot for new ubuntu server

I am setting up a new server and installing certbot on ubuntu 20. I am confused with sudo certbot certonly --webroot command of certbot. While running the command, it asks me input the webroot for ...
Krunal's user avatar
  • 101
0 votes
1 answer
40 views

Manually deploy LetsEncrypt certificate to Kubernetes

One of my systems (Rocky Linux 9) collects wildcard certificates from LetsEncrypt and distributes it to the various systems that require an SSL certificate. I also have AWX running on Kubernetes (...
Johan G's user avatar
  • 101
2 votes
1 answer
418 views

OpenBSD, relayd and acme-client: Unable to read TLS-certs for subdomains: "Empty reply from server"

OpenBSD server with relayd/httpd/acme-client. Attempting to run https://mydomain.com (app server on port 32489), https://webmail.mydomain.com (48293) and https://forum.mydomain.com (28192). All three ...
Mark Boulder's user avatar
2 votes
1 answer
125 views

Can I install a Let'sEncrypt ssl certificate before I configure a virtual host?

Assuming I am not close on which web server to use, Apache or Nginx but I still want to be over with the SSL certification procedure, can I install a Let'sEncrypt ssl certificate before I configure a ...
automation's user avatar
1 vote
2 answers
1k views

Let's Encrypt Certs Fail "openssl verify" Verification

I've followed the guidance from other Stack answers- there's a gazillion related to this- in building my openssl verify command to validate my Let's Encrypt certs, shown below: openssl verify -...
F1Linux's user avatar
  • 2,366
0 votes
1 answer
2k views

How do I check if my postfix email server is using SSL?

I have an Ubuntu mail server running postfix version 3.6.4. I configured postfix to use ssl by adding the following lines to /etc/postfix/main.cf: # TLS parameters smtpd_tls_cert_file = /etc/...
trouble_bucket's user avatar
0 votes
1 answer
961 views

How can I remove the last certificate from a PEM file that contains three?

Some systems are still running in Ubuntu 16.04 that cannot be upgraded easily but they will be fully replaced by Ubuntu 22.04 machines later this year; unfortunately, to get LetsEncrypt to work on ...
Henry van Megen's user avatar
0 votes
2 answers
237 views

Ansible include_task based on condition (directory empty or certifcate is expired or 30 days remaining in expiry)

I am using Ansible letsencrypt module to generate SSL certificates. The playbook is working fine, the certificate is generated and applied. Now I want that this task is only played when certain ...
Waqas Ahmed Khan's user avatar
0 votes
1 answer
59 views

how to access TSL certificate locally

I have a valid letsencrypt certificate that is used by apache server. <IfModule mod_ssl.c> <VirtualHost *:443> ServerName mydomain.com SSLCertificateFile /etc/...
geldek's user avatar
  • 103
0 votes
0 answers
100 views

"You can now switch to a Let’s Encrypt certificate." - should I?

I recently apt-get dist-upgraded my Devuan GNU/Linux Chimaera machine. after upgrading the package jitsi-meet-web-config to version 1.0.5818-1, I get a message saying: You can now switch to a Let’s ...
einpoklum's user avatar
  • 9,207
0 votes
0 answers
477 views

Proftp Virtual Hosts Settings

i'm trying to set up proftpd with virtual server settings, but there are always problems during connection. I have two domains which are pointing to the same External IP Address: ftp.domain.tld -> ...
sangul's user avatar
  • 15
0 votes
1 answer
163 views

SLE: installing certbot and its NGINX plugin

openSUSE Tumbleweed Installing certbot and its NGINX plugin on openSUSE Tumbleweed was just straightforward: zypper addrepo https://download.opensuse.org/repositories/home:ecsos:server/...
Megidd's user avatar
  • 1,529
0 votes
0 answers
940 views

How to add Lets Encrypt to local list of trusted certificates in /etc/ssl/certs/ca-certificates.ctr?

Question How can I add Lets Encrypt to the file /etc/ssl/certs/ca-certificates.crt ? This file is a list of certificates from trusted CA and I want to add Lets Encryt to it. I believe that by doing so ...
user avatar
0 votes
1 answer
1k views

Does my system accept the new let's encrypt root certificate?

Let's encrypt changes there root certificate from DST Root CA X3 to ISRG Root X1- how can I check if my server (which connects to an api with let's encrypt certificate) works still in future?
sneaky's user avatar
  • 251
2 votes
2 answers
4k views

Mosquitto unable to use certificates from letsencrypt

I am trying to set up Mosquitto using this guide: https://www.digitalocean.com/community/tutorials/how-to-install-and-secure-the-mosquitto-mqtt-messaging-broker-on-ubuntu-18-04 I am using ubuntu 20.04 ...
Stonecraft's user avatar
1 vote
0 answers
17 views

Website migration

I have a website on a home linux box (Rasperry Pi2B). It is mailnly for my own use, but is exposed to the world, uses a Dynamic DNS service, HTTPS with a LetsEncrypt certificate, which renews ...
NormB's user avatar
  • 11
1 vote
1 answer
407 views

SSL certs for a number of docker container services on a single host

I'm very new to Docker, but I've successfully set up a docker-compose.yaml consisting of a handful of services like Mosquitto, NodeRED, InfluxDB, and Grafana. Each publishes an HTTP endpoint on a ...
Rick's user avatar
  • 205
0 votes
1 answer
499 views

letsencrypt shellinabox

I see this problem all over the internet searches, and can't seem to find the resolution. I want to use shellinabox on whatever.net:54321 I have letsencrypt certificates I've tried to copy /etc/...
bradboy's user avatar
  • 103
1 vote
0 answers
539 views

Rocket chat enable ssl in apache

I have installed rocket chat on docker - on Debian 9 OS. I am unable to enable https for the same. I can access it using fqdn - http://chat.xyz.com:3003 I have generated ssl certificates using certbot....
Aryan Singh's user avatar
0 votes
1 answer
221 views

Output double quotes and variable

I'm writing a script to automate Let's Encrypt in PowerDNS,(this is a simple bash shell script to be run on debian) Certbot runs and calls the script, feeding to it the variable: $CERTBOT_VALIDATION ...
mike's user avatar
  • 1
1 vote
0 answers
279 views

Find out how SSL certificate (from letsencrypt) is auto-renewed

I'm running a Debian 8.11 (jessie) server (don't worry, a upgrade is plannend for later this year). It's a LAMP server, with addition to that, an ISPConfig installation. For the website (served ...
Mathlight's user avatar
  • 123
1 vote
2 answers
333 views

Letsencrypt Wildcard certficate with NFS. [U 18.04]

I'm currently trying to share and use my wildcard certificate from letsencrypt with NFS, but the servers who are supposed to use it, cannot do so. To my Setup: I have 3 VM's (in future maybe 4) ...
Zockerjonny's user avatar
2 votes
1 answer
9k views

Sudden "no "ssl_certificate" is defined for the "listen ... ssl" error

I have a config like this which has worked for years: server { listen 80; server_name www.domain.com domain.com; return 301 https://domain.com$request_uri; } # !!!! # line ...
Dajaku's user avatar
  • 29
6 votes
1 answer
12k views

How can I add subdomains to letsencrypt using certbots?

I have certbot installed and successfully use it to encrypt my homepage. Now i tried to setup an email system for my website using dovecot and postfix. I got it mostly running, only problem is, ...
user2741831's user avatar
1 vote
2 answers
159 views

expand an existing fullchain certificate

I want to expand an existing file instead of creating a new certificate for a subdomain. I have these domains already in the file: certtool -i < /etc/letsencrypt/live/example.org-0002/fullchain....
rubo77's user avatar
  • 28.3k
2 votes
0 answers
551 views

Set systemd timer to an odd and specific number of days

I'm using systemd.timers on CentOS 7 server and have a timer set to automatically renew Certbot-managed Let's Encrypt website certificate. autorenewal.service: [Unit] Description=certbot certificate ...
Anvbis's user avatar
  • 21
0 votes
1 answer
276 views

How to renewal ssl certificate on redbird proxy server

I use redbird proxy server for serve my app. Today expired my certificate. How I can renewal it?. I tried it by this instruction but looks like it works just with ngnix server. my server.js: const ...
Edgaras Karka's user avatar
3 votes
2 answers
3k views

Install Let's Encrypt SSL certificate on Oracle Linux Server

I am trying to install a Let's Encrypt certificate on a Oracle Linux Server 7.6. Since the server does not have a public IP, I had to validate via DNS.I followed the instructions here https://github....
cflasrado's user avatar
1 vote
0 answers
908 views

How to make Nginx picking up nex SSL certificate

I'm using Letsencrypt SSL certificates with Nginx (nginx version: nginx/1.10.3 (Ubuntu)). From my understanding, Nginx needs to be restarted or, at least, have its configuration reloaded in order to ...
Sig's user avatar
  • 133
1 vote
0 answers
24 views

Nginx, Let's encrypt cause error redirect http to https partially

I am using CentOS 7, Let's encrypt (want to clear all thing related 002.bkit.vn), Nginx. I try to install Let's encrypt for 002.bkit.vn , then I remove it, some things still exist, but I don't know ...
Vy Do's user avatar
  • 171
1 vote
1 answer
8k views

nginx: [emerg] BIO_new_file("/etc/letsencrypt/live/site_name/fullchain.pem") failed

I am using CentOS 7, Nginx 1.12.2, certbot 0.31.0 , Error after delete all things related to Let's Encrypt of 002.bkit.vn [root@VMHostDefault 002.bkit.vn]# nginx -t nginx: [emerg] BIO_new_file("/...
Vy Do's user avatar
  • 171
1 vote
1 answer
3k views

How to configure the Certbot not to include options-ssl-apache.conf into my VirtualHosts?

# cat /etc/letsencrypt/options-ssl-apache.conf # Baseline setting to Include for SSL sites using Let's Encrypt certificates SSLEngine on # Intermediate configuration, tweak to your needs ...
Vlastimil Burián's user avatar
1 vote
1 answer
328 views

Logs gzipped and not gzipped

Recently I've changed logs configuration for letsencrypt, because there was no given one and I have files: letsencrypt.log letsencrypt.log.1 letsencrypt.log.10 letsencrypt.log.10.gz letsencrypt.log....
pbies's user avatar
  • 434
0 votes
1 answer
4k views

Unable to install Let's Encrypt certificate on CentOS 7

I am trying to install a Let's Encrypt SSL certificate to my website using Securing Apache with Let's Encrypt on CentOS 7. My web server is (include version): Apache (cPanel) My hosting provider is: ...
current_user's user avatar
0 votes
0 answers
59 views

Let's Encrypt Expire Bot showing different date then command line

Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018. but when I log in to the server, and check the ...
Zhenyu's user avatar
  • 133
0 votes
1 answer
341 views

Postfix can't send email to popular email sites

I have an installation of iRedMail version 0.9.7 running on Scientific Linux (RHEL) 7 : Linux smtp.fabricobjects.com 3.10.0-862.6.3.el7.x86_64 #1 SMP Tue Jun 26 12:13:22 CDT 2018 x86_64 x86_64 ...
Jeffrey Greaux's user avatar
2 votes
2 answers
3k views

LetsEncrypt could not connect to verify the domain (timeout)

I'm trying to set up a SSL certificate for my Nextcloud server with LetsEncrypt, but when I run: $ sudo certbot certonly --webroot -w /var/www/nextcloud --agree-tos \ --no-eff-email --email ...
D. Math's user avatar
  • 21
0 votes
1 answer
3k views

How to upgrade dpkg if already newest version? // apt-get upgrade broken by dpkg; Caused by LetsEncrypt Certbot backport

On Debian 9.4 Stretch Accidently updated && upgraded to the jessie-backports, then changed the sources.list to the correct stretch-backports. Can this kill my apt? If not: sudo apt-get ...
GregorVolkmann's user avatar
0 votes
1 answer
52 views

Chaining a command to the outcome of LetsEncrypt renewal

I would like to automate the running of this command (which is simple enough): ~/dehydrated/dehydrated --cron --domain www.mydomain.com --out . --challenge http-01 The problem is that I need to ...
DDiran's user avatar
  • 115
3 votes
2 answers
5k views

How to do mass virtual hosting with lets encrypt?

I have 2500 public domains (like www.example.com, example.com, www.example.net, and example.net) running on a single IP-address using Apache VirtualHost. I want to setup letsencrypt for all these ...
Ole Tange's user avatar
  • 34.7k
1 vote
0 answers
867 views

Cannot establish SSL connection

I am trying to establish SSL connection so my users entering the site will not refuse to stay because of insecure HTTP. Basically I am trying to move from HTTP to HTTPS. I learned many manuals and ...
John's user avatar
  • 297
3 votes
2 answers
2k views

How to validate / fix an error in Certbot renewal cron

The whole day, I am fixing bugs in mainly TLS area, but this question is not specifically about TLS. Well, I have one web server with a few web sites, each with its own SSL certificate. But to the ...
Vlastimil Burián's user avatar
0 votes
2 answers
5k views

The server could not connect to the client to verify the domain for Let's Encrypt's Certbot

I am running Sentry on AWS using Docker. The service is now running on port 9000. I would like to use HTTPS, getting the certificate from Let's Encrypt. However I get the following error: sudo certbot ...
Thomas's user avatar
  • 181
0 votes
1 answer
343 views

Acme-Challenge not requestable by all sub-domains?

I have Apache 2.4 and the following site-config for acme challenges: <IfModule mod_alias.c> Alias /.well-known/acme-challenge /var/www/letsencrypt/challenges/ <Directory "/var/www/...
Roland's user avatar
  • 1