Questions tagged [letsencrypt]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
2 answers
33 views

Ansible include_task based on condition (directory empty or certifcate is expired or 30 days remaining in expiry)

I am using Ansible letsencrypt module to generate SSL certificates. The playbook is working fine, the certificate is generated and applied. Now I want that this task is only played when certain ...
user avatar
0 votes
1 answer
29 views

how to access TSL certificate locally

I have a valid letsencrypt certificate that is used by apache server. <IfModule mod_ssl.c> <VirtualHost *:443> ServerName mydomain.com SSLCertificateFile /etc/...
user avatar
  • 103
0 votes
0 answers
46 views

"You can now switch to a Let’s Encrypt certificate." - should I?

I recently apt-get dist-upgraded my Devuan GNU/Linux Chimaera machine. after upgrading the package jitsi-meet-web-config to version 1.0.5818-1, I get a message saying: You can now switch to a Let’s ...
user avatar
  • 7,311
0 votes
0 answers
77 views

Proftp Virtual Hosts Settings

i'm trying to set up proftpd with virtual server settings, but there are always problems during connection. I have two domains which are pointing to the same External IP Address: ftp.domain.tld -> ...
user avatar
  • 15
0 votes
1 answer
45 views

SLE: installing certbot and its NGINX plugin

openSUSE Tumbleweed Installing certbot and its NGINX plugin on openSUSE Tumbleweed was just straightforward: zypper addrepo https://download.opensuse.org/repositories/home:ecsos:server/...
user avatar
  • 1,315
0 votes
0 answers
229 views

How to add Lets Encrypt to local list of trusted certificates in /etc/ssl/certs/ca-certificates.ctr?

Question How can I add Lets Encrypt to the file /etc/ssl/certs/ca-certificates.crt ? This file is a list of certificates from trusted CA and I want to add Lets Encryt to it. I believe that by doing so ...
user avatar
0 votes
1 answer
1k views

Does my system accept the new let's encrypt root certificate?

Let's encrypt changes there root certificate from DST Root CA X3 to ISRG Root X1- how can I check if my server (which connects to an api with let's encrypt certificate) works still in future?
user avatar
  • 231
1 vote
1 answer
2k views

Mosquitto unable to use certificates from letsencrypt

I am trying to set up Mosquitto using this guide: https://www.digitalocean.com/community/tutorials/how-to-install-and-secure-the-mosquitto-mqtt-messaging-broker-on-ubuntu-18-04 I am using ubuntu 20.04 ...
user avatar
1 vote
0 answers
16 views

Website migration

I have a website on a home linux box (Rasperry Pi2B). It is mailnly for my own use, but is exposed to the world, uses a Dynamic DNS service, HTTPS with a LetsEncrypt certificate, which renews ...
user avatar
  • 11
1 vote
1 answer
151 views

SSL certs for a number of docker container services on a single host

I'm very new to Docker, but I've successfully set up a docker-compose.yaml consisting of a handful of services like Mosquitto, NodeRED, InfluxDB, and Grafana. Each publishes an HTTP endpoint on a ...
user avatar
  • 135
0 votes
0 answers
168 views

letsencrypt shellinabox

I see this problem all over the internet searches, and can't seem to find the resolution. I want to use shellinabox on whatever.net:54321 I have letsencrypt certificates I've tried to copy /etc/...
user avatar
  • 93
1 vote
0 answers
372 views

Rocket chat enable ssl in apache

I have installed rocket chat on docker - on Debian 9 OS. I am unable to enable https for the same. I can access it using fqdn - http://chat.xyz.com:3003 I have generated ssl certificates using certbot....
user avatar
0 votes
1 answer
116 views

Output double quotes and variable

I'm writing a script to automate Let's Encrypt in PowerDNS,(this is a simple bash shell script to be run on debian) Certbot runs and calls the script, feeding to it the variable: $CERTBOT_VALIDATION ...
user avatar
  • 1
1 vote
0 answers
220 views

Find out how SSL certificate (from letsencrypt) is auto-renewed

I'm running a Debian 8.11 (jessie) server (don't worry, a upgrade is plannend for later this year). It's a LAMP server, with addition to that, an ISPConfig installation. For the website (served ...
user avatar
  • 123
1 vote
2 answers
193 views

Letsencrypt Wildcard certficate with NFS. [U 18.04]

I'm currently trying to share and use my wildcard certificate from letsencrypt with NFS, but the servers who are supposed to use it, cannot do so. To my Setup: I have 3 VM's (in future maybe 4) ...
user avatar
2 votes
1 answer
6k views

Sudden "no "ssl_certificate" is defined for the "listen ... ssl" error

I have a config like this which has worked for years: server { listen 80; server_name www.domain.com domain.com; return 301 https://domain.com$request_uri; } # !!!! # line ...
user avatar
  • 29
0 votes
1 answer
852 views

How can I add subdomains to letsencrypt using certbots?

I have certbot installed and successfully use it to encrypt my homepage. Now i tried to setup an email system for my website using dovecot and postfix. I got it mostly running, only problem is, ...
user avatar
0 votes
1 answer
45 views

expand an existing fullchain certificate

I want to expand an existing file instead of creating a new certificate for a subdomain. I have these domains already in the file: certtool -i < /etc/letsencrypt/live/example.org-0002/fullchain....
user avatar
  • 24.9k
2 votes
0 answers
456 views

Set systemd timer to an odd and specific number of days

I'm using systemd.timers on CentOS 7 server and have a timer set to automatically renew Certbot-managed Let's Encrypt website certificate. autorenewal.service: [Unit] Description=certbot certificate ...
user avatar
  • 21
0 votes
1 answer
221 views

How to renewal ssl certificate on redbird proxy server

I use redbird proxy server for serve my app. Today expired my certificate. How I can renewal it?. I tried it by this instruction but looks like it works just with ngnix server. my server.js: const ...
user avatar
3 votes
2 answers
2k views

Install Let's Encrypt SSL certificate on Oracle Linux Server

I am trying to install a Let's Encrypt certificate on a Oracle Linux Server 7.6. Since the server does not have a public IP, I had to validate via DNS.I followed the instructions here https://github....
user avatar
1 vote
0 answers
415 views

How to make Nginx picking up nex SSL certificate

I'm using Letsencrypt SSL certificates with Nginx (nginx version: nginx/1.10.3 (Ubuntu)). From my understanding, Nginx needs to be restarted or, at least, have its configuration reloaded in order to ...
user avatar
  • 111
1 vote
0 answers
18 views

Nginx, Let's encrypt cause error redirect http to https partially

I am using CentOS 7, Let's encrypt (want to clear all thing related 002.bkit.vn), Nginx. I try to install Let's encrypt for 002.bkit.vn , then I remove it, some things still exist, but I don't know ...
user avatar
1 vote
1 answer
6k views

nginx: [emerg] BIO_new_file("/etc/letsencrypt/live/site_name/fullchain.pem") failed

I am using CentOS 7, Nginx 1.12.2, certbot 0.31.0 , Error after delete all things related to Let's Encrypt of 002.bkit.vn [root@VMHostDefault 002.bkit.vn]# nginx -t nginx: [emerg] BIO_new_file("/...
user avatar
1 vote
1 answer
2k views

How to configure the Certbot not to include options-ssl-apache.conf into my VirtualHosts?

# cat /etc/letsencrypt/options-ssl-apache.conf # Baseline setting to Include for SSL sites using Let's Encrypt certificates SSLEngine on # Intermediate configuration, tweak to your needs ...
user avatar
1 vote
1 answer
136 views

Logs gzipped and not gzipped

Recently I've changed logs configuration for letsencrypt, because there was no given one and I have files: letsencrypt.log letsencrypt.log.1 letsencrypt.log.10 letsencrypt.log.10.gz letsencrypt.log....
user avatar
  • 291
0 votes
1 answer
4k views

Unable to install Let's Encrypt certificate on CentOS 7

I am trying to install a Let's Encrypt SSL certificate to my website using Securing Apache with Let's Encrypt on CentOS 7. My web server is (include version): Apache (cPanel) My hosting provider is: ...
user avatar
0 votes
0 answers
51 views

Let's Encrypt Expire Bot showing different date then command line

Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018. but when I log in to the server, and check the ...
user avatar
  • 133
0 votes
1 answer
281 views

Postfix can't send email to popular email sites

I have an installation of iRedMail version 0.9.7 running on Scientific Linux (RHEL) 7 : Linux smtp.fabricobjects.com 3.10.0-862.6.3.el7.x86_64 #1 SMP Tue Jun 26 12:13:22 CDT 2018 x86_64 x86_64 ...
user avatar
2 votes
2 answers
3k views

LetsEncrypt could not connect to verify the domain (timeout)

I'm trying to set up a SSL certificate for my Nextcloud server with LetsEncrypt, but when I run: $ sudo certbot certonly --webroot -w /var/www/nextcloud --agree-tos \ --no-eff-email --email ...
user avatar
  • 21
0 votes
1 answer
2k views

How to upgrade dpkg if already newest version? // apt-get upgrade broken by dpkg; Caused by LetsEncrypt Certbot backport

On Debian 9.4 Stretch Accidently updated && upgraded to the jessie-backports, then changed the sources.list to the correct stretch-backports. Can this kill my apt? If not: sudo apt-get ...
user avatar
0 votes
1 answer
47 views

Chaining a command to the outcome of LetsEncrypt renewal

I would like to automate the running of this command (which is simple enough): ~/dehydrated/dehydrated --cron --domain www.mydomain.com --out . --challenge http-01 The problem is that I need to ...
user avatar
  • 115
3 votes
2 answers
4k views

How to do mass virtual hosting with lets encrypt?

I have 2500 public domains (like www.example.com, example.com, www.example.net, and example.net) running on a single IP-address using Apache VirtualHost. I want to setup letsencrypt for all these ...
user avatar
  • 29.9k
1 vote
0 answers
770 views

Cannot establish SSL connection

I am trying to establish SSL connection so my users entering the site will not refuse to stay because of insecure HTTP. Basically I am trying to move from HTTP to HTTPS. I learned many manuals and ...
user avatar
  • 257
3 votes
2 answers
2k views

How to validate / fix an error in Certbot renewal cron

The whole day, I am fixing bugs in mainly TLS area, but this question is not specifically about TLS. Well, I have one web server with a few web sites, each with its own SSL certificate. But to the ...
user avatar
0 votes
2 answers
5k views

The server could not connect to the client to verify the domain for Let's Encrypt's Certbot

I am running Sentry on AWS using Docker. The service is now running on port 9000. I would like to use HTTPS, getting the certificate from Let's Encrypt. However I get the following error: sudo certbot ...
user avatar
  • 171
0 votes
1 answer
328 views

Acme-Challenge not requestable by all sub-domains?

I have Apache 2.4 and the following site-config for acme challenges: <IfModule mod_alias.c> Alias /.well-known/acme-challenge /var/www/letsencrypt/challenges/ <Directory "/var/www/...
user avatar
  • 1
1 vote
1 answer
385 views

Automating Certbot for OSX Server error in get_cert.sh script [closed]

I am currently facing a problem with my Mac OS-X El Capitan machine when running certbot (or basically letsencrypt). My machine is a mac mini, that is supposedly running an MDM solution with ...
user avatar
  • 31
2 votes
1 answer
400 views

unable to sign certificate letsencrypt

I have recently set up a cloud via Nextcloud. I have successfully signed a certificate for my domain https://mydomain.home.com (of cource my real domain is different). This all worked out just fine. ...
user avatar
  • 95
3 votes
4 answers
675 views

Automating OpenSSL certificates creation, Let'sEncrypt signing, and site dir associating, in an Nginx environment

I have an Ubuntu-server 16.04 VPS and Nginx. Now I'm implementing HTTP1 (without TLS, utilizing port 80) but I desire to go "one step forward" and work with HTTP2 (with TLS, utilizing port 443), for ...
user avatar
0 votes
1 answer
1k views

Run node app with SSL on 443 port (on 80 is working)

I am trying to configure a server running on Amazon EC2. I figured out how to run my node app on port 80, but now I'm trying to run on port 443, with Letsencrypt SSL. Before to work on port 80 I ...
user avatar
0 votes
1 answer
409 views

Finding the webroot directory for Ghost in AWS

I installed Ghost via Bitnami on AWS and registered a domain (750in100.com) from Google Domains with it. Next I tried installing an SSL certificate through Let's Encrypt, and that's where I'm running ...
user avatar
1 vote
1 answer
2k views

AWS EC2 instance says apache2 isn't running but the server is still up and httpd is listening on port 80?

So I'm trying to use certbot to get a LetsEncrypt certificate for my wordpress site on EC2 (using the AWS marketplace image by Bitnami, Ubuntu 14.04), but when running certbot --apache I get the ...
user avatar
2 votes
1 answer
673 views

Switching from letsencrypt (client) to acme-client - where is my account key?

I started using letsencrypt when there was an "official" client called letsencrypt. I now want to change to acme-client - that is, the C implementation. I think I manage to configure my sites, and ...
user avatar
  • 748
13 votes
2 answers
4k views

Let's Encrypt - Apache - OCSP stapling

I would like to enable OCSP stapling in my Apache server. I'm using: Server: Apache/2.4.7 on Ubuntu Certificate: Let's Encrypt To the file: /etc/apache2/sites-available/default-ssl.conf I added: ...
user avatar
1 vote
0 answers
115 views

Installing letsencrypt on FreeBSD has failed

I've been able to install letsencrypt on FreeBSD the same I've been doing on Linux I do this: git clone https://github.com/letsencrypt/letsencrypt.git /opt/letsencrypt cd /opt/letsencrypt sudo ./...
user avatar
  • 151
1 vote
2 answers
1k views

Lets Encrypt for private domain? [closed]

I was wondering is it possible to generate Lets Encrypt certificate for private domains on internal network? I have my own private DNS running, so I want to apply certificate for my Squid ...
user avatar
  • 1,465
1 vote
1 answer
571 views

Let's encrypt renewal error

I run the following from cron every month, and got this error: /opt/letsencrypt/letsencrypt-auto certonly --quiet --standalone --renew-by-default -d example.org -d www.example.org Creating virtual ...
user avatar
1 vote
1 answer
3k views

Apache problems when trying to set up SSL (Debian)

I've been trying to get a Let's Encrypt certificate, key and chain to work. But I have also done some stuff that I know I didn't need to before I realized what to do. Port 443 wasn't open so I've ...
user avatar
  • 207
2 votes
1 answer
2k views

Is it possible to get letsencrypt certificates with a shell script?

I would like to create a shell script for getting let's encrypt certificates: #!/bin/bash sudo docker run -it --rm -p 443:443 -p 80:80 --name certbot \ -v "/etc/letsencrypt:/etc/letsencrypt" \ ...
user avatar
  • 1,369