Questions tagged [letsencrypt]
The letsencrypt tag has no usage guidance.
57
questions
0
votes
2
answers
33
views
Ansible include_task based on condition (directory empty or certifcate is expired or 30 days remaining in expiry)
I am using Ansible letsencrypt module to generate SSL certificates. The playbook is working fine, the certificate is generated and applied.
Now I want that this task is only played when certain ...
0
votes
1
answer
29
views
how to access TSL certificate locally
I have a valid letsencrypt certificate that is used by apache server.
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerName mydomain.com
SSLCertificateFile /etc/...
0
votes
0
answers
46
views
"You can now switch to a Let’s Encrypt certificate." - should I?
I recently apt-get dist-upgraded my Devuan GNU/Linux Chimaera machine. after upgrading the package jitsi-meet-web-config to version 1.0.5818-1, I get a message saying:
You can now switch to a Let’s ...
0
votes
0
answers
77
views
Proftp Virtual Hosts Settings
i'm trying to set up proftpd with virtual server settings, but there are always problems during connection.
I have two domains which are pointing to the same External IP Address:
ftp.domain.tld -> ...
0
votes
1
answer
45
views
SLE: installing certbot and its NGINX plugin
openSUSE Tumbleweed
Installing certbot and its NGINX plugin on openSUSE Tumbleweed was just straightforward:
zypper addrepo https://download.opensuse.org/repositories/home:ecsos:server/...
0
votes
0
answers
229
views
How to add Lets Encrypt to local list of trusted certificates in /etc/ssl/certs/ca-certificates.ctr?
Question
How can I add Lets Encrypt to the file /etc/ssl/certs/ca-certificates.crt ? This file is a list of certificates from trusted CA and I want to add Lets Encryt to it.
I believe that by doing so ...
0
votes
1
answer
1k
views
Does my system accept the new let's encrypt root certificate?
Let's encrypt changes there root certificate from DST Root CA X3 to ISRG Root X1- how can I check if my server (which connects to an api with let's encrypt certificate) works still in future?
1
vote
1
answer
2k
views
Mosquitto unable to use certificates from letsencrypt
I am trying to set up Mosquitto using this guide:
https://www.digitalocean.com/community/tutorials/how-to-install-and-secure-the-mosquitto-mqtt-messaging-broker-on-ubuntu-18-04
I am using ubuntu 20.04 ...
1
vote
0
answers
16
views
Website migration
I have a website on a home linux box (Rasperry Pi2B). It is mailnly for my own use, but is exposed to the world, uses a Dynamic DNS service, HTTPS with a LetsEncrypt certificate, which renews ...
1
vote
1
answer
151
views
SSL certs for a number of docker container services on a single host
I'm very new to Docker, but I've successfully set up a docker-compose.yaml consisting of a handful of services like Mosquitto, NodeRED, InfluxDB, and Grafana. Each publishes an HTTP endpoint on a ...
0
votes
0
answers
168
views
letsencrypt shellinabox
I see this problem all over the internet searches, and can't seem to find the resolution.
I want to use shellinabox on whatever.net:54321
I have letsencrypt certificates
I've tried to copy /etc/...
1
vote
0
answers
372
views
Rocket chat enable ssl in apache
I have installed rocket chat on docker - on Debian 9 OS.
I am unable to enable https for the same.
I can access it using fqdn - http://chat.xyz.com:3003
I have generated ssl certificates using certbot....
0
votes
1
answer
116
views
Output double quotes and variable
I'm writing a script to automate Let's Encrypt in PowerDNS,(this is a simple bash shell script to be run on debian)
Certbot runs and calls the script, feeding to it the variable:
$CERTBOT_VALIDATION
...
1
vote
0
answers
220
views
Find out how SSL certificate (from letsencrypt) is auto-renewed
I'm running a Debian 8.11 (jessie) server (don't worry, a upgrade is plannend for later this year). It's a LAMP server, with addition to that, an ISPConfig installation. For the website (served ...
1
vote
2
answers
193
views
Letsencrypt Wildcard certficate with NFS. [U 18.04]
I'm currently trying to share and use my wildcard certificate from letsencrypt with NFS, but the servers who are supposed to use it, cannot do so.
To my Setup:
I have 3 VM's (in future maybe 4) ...
2
votes
1
answer
6k
views
Sudden "no "ssl_certificate" is defined for the "listen ... ssl" error
I have a config like this which has worked for years:
server {
listen 80;
server_name www.domain.com domain.com;
return 301 https://domain.com$request_uri;
}
# !!!!
# line ...
0
votes
1
answer
852
views
How can I add subdomains to letsencrypt using certbots?
I have certbot installed and successfully use it to encrypt my homepage.
Now i tried to setup an email system for my website using dovecot and postfix.
I got it mostly running, only problem is, ...
0
votes
1
answer
45
views
expand an existing fullchain certificate
I want to expand an existing file instead of creating a new certificate for a subdomain.
I have these domains already in the file:
certtool -i < /etc/letsencrypt/live/example.org-0002/fullchain....
2
votes
0
answers
456
views
Set systemd timer to an odd and specific number of days
I'm using systemd.timers on CentOS 7 server and have a timer set to automatically renew Certbot-managed Let's Encrypt website certificate.
autorenewal.service:
[Unit]
Description=certbot certificate ...
0
votes
1
answer
221
views
How to renewal ssl certificate on redbird proxy server
I use redbird proxy server for serve my app. Today expired my certificate.
How I can renewal it?. I tried it by this instruction but looks like it works just with ngnix server.
my server.js:
const ...
3
votes
2
answers
2k
views
Install Let's Encrypt SSL certificate on Oracle Linux Server
I am trying to install a Let's Encrypt certificate on a Oracle Linux Server 7.6. Since the server does not have a public IP, I had to validate via DNS.I followed the instructions here https://github....
1
vote
0
answers
415
views
How to make Nginx picking up nex SSL certificate
I'm using Letsencrypt SSL certificates with Nginx (nginx version: nginx/1.10.3 (Ubuntu)).
From my understanding, Nginx needs to be restarted or, at least, have its configuration reloaded in order to ...
1
vote
0
answers
18
views
Nginx, Let's encrypt cause error redirect http to https partially
I am using CentOS 7, Let's encrypt (want to clear all thing related 002.bkit.vn), Nginx.
I try to install Let's encrypt for 002.bkit.vn , then I remove it, some things still exist, but I don't know ...
1
vote
1
answer
6k
views
nginx: [emerg] BIO_new_file("/etc/letsencrypt/live/site_name/fullchain.pem") failed
I am using CentOS 7, Nginx 1.12.2, certbot 0.31.0 ,
Error after delete all things related to Let's Encrypt of 002.bkit.vn
[root@VMHostDefault 002.bkit.vn]# nginx -t
nginx: [emerg] BIO_new_file("/...
1
vote
1
answer
2k
views
How to configure the Certbot not to include options-ssl-apache.conf into my VirtualHosts?
# cat /etc/letsencrypt/options-ssl-apache.conf
# Baseline setting to Include for SSL sites using Let's Encrypt certificates
SSLEngine on
# Intermediate configuration, tweak to your needs
...
1
vote
1
answer
136
views
Logs gzipped and not gzipped
Recently I've changed logs configuration for letsencrypt, because there was no given one and I have files:
letsencrypt.log
letsencrypt.log.1
letsencrypt.log.10
letsencrypt.log.10.gz
letsencrypt.log....
0
votes
1
answer
4k
views
Unable to install Let's Encrypt certificate on CentOS 7
I am trying to install a Let's Encrypt SSL certificate to my website using Securing Apache with Let's Encrypt on CentOS 7.
My web server is (include version): Apache (cPanel)
My hosting provider is: ...
0
votes
0
answers
51
views
Let's Encrypt Expire Bot showing different date then command line
Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018.
but when I log in to the server, and check the ...
0
votes
1
answer
281
views
Postfix can't send email to popular email sites
I have an installation of iRedMail version 0.9.7 running on Scientific Linux (RHEL) 7 :
Linux smtp.fabricobjects.com 3.10.0-862.6.3.el7.x86_64 #1 SMP Tue Jun 26 12:13:22 CDT 2018 x86_64 x86_64 ...
2
votes
2
answers
3k
views
LetsEncrypt could not connect to verify the domain (timeout)
I'm trying to set up a SSL certificate for my Nextcloud server with LetsEncrypt, but when I run:
$ sudo certbot certonly --webroot -w /var/www/nextcloud --agree-tos \
--no-eff-email --email ...
0
votes
1
answer
2k
views
How to upgrade dpkg if already newest version? // apt-get upgrade broken by dpkg; Caused by LetsEncrypt Certbot backport
On Debian 9.4 Stretch
Accidently updated && upgraded to the jessie-backports, then changed the sources.list to the correct stretch-backports.
Can this kill my apt?
If not:
sudo apt-get ...
0
votes
1
answer
47
views
Chaining a command to the outcome of LetsEncrypt renewal
I would like to automate the running of this command (which is simple enough):
~/dehydrated/dehydrated --cron --domain www.mydomain.com --out . --challenge http-01
The problem is that I need to ...
3
votes
2
answers
4k
views
How to do mass virtual hosting with lets encrypt?
I have 2500 public domains (like www.example.com, example.com, www.example.net, and example.net) running on a single IP-address using Apache VirtualHost.
I want to setup letsencrypt for all these ...
1
vote
0
answers
770
views
Cannot establish SSL connection
I am trying to establish SSL connection so my users entering the site will not refuse to stay because of insecure HTTP. Basically I am trying to move from HTTP to HTTPS.
I learned many manuals and ...
3
votes
2
answers
2k
views
How to validate / fix an error in Certbot renewal cron
The whole day, I am fixing bugs in mainly TLS area, but this question is not specifically about TLS.
Well, I have one web server with a few web sites, each with its own SSL certificate.
But to the ...
0
votes
2
answers
5k
views
The server could not connect to the client to verify the domain for Let's Encrypt's Certbot
I am running Sentry on AWS using Docker. The service is now running on port 9000.
I would like to use HTTPS, getting the certificate from Let's Encrypt. However I get the following error:
sudo certbot ...
0
votes
1
answer
328
views
Acme-Challenge not requestable by all sub-domains?
I have Apache 2.4 and the following site-config for acme challenges:
<IfModule mod_alias.c>
Alias /.well-known/acme-challenge /var/www/letsencrypt/challenges/
<Directory "/var/www/...
1
vote
1
answer
385
views
Automating Certbot for OSX Server error in get_cert.sh script [closed]
I am currently facing a problem with my Mac OS-X El Capitan machine when running certbot (or basically letsencrypt).
My machine is a mac mini, that is supposedly running an MDM solution with ...
2
votes
1
answer
400
views
unable to sign certificate letsencrypt
I have recently set up a cloud via Nextcloud. I have successfully signed a certificate for my domain https://mydomain.home.com (of cource my real domain is different). This all worked out just fine.
...
3
votes
4
answers
675
views
Automating OpenSSL certificates creation, Let'sEncrypt signing, and site dir associating, in an Nginx environment
I have an Ubuntu-server 16.04 VPS and Nginx. Now I'm implementing HTTP1 (without TLS, utilizing port 80) but I desire to go "one step forward" and work with HTTP2 (with TLS, utilizing port 443), for ...
0
votes
1
answer
1k
views
Run node app with SSL on 443 port (on 80 is working)
I am trying to configure a server running on Amazon EC2.
I figured out how to run my node app on port 80, but now I'm trying to run on port 443, with Letsencrypt SSL. Before to work on port 80 I ...
0
votes
1
answer
409
views
Finding the webroot directory for Ghost in AWS
I installed Ghost via Bitnami on AWS and registered a domain (750in100.com) from Google Domains with it. Next I tried installing an SSL certificate through Let's Encrypt, and that's where I'm running ...
1
vote
1
answer
2k
views
AWS EC2 instance says apache2 isn't running but the server is still up and httpd is listening on port 80?
So I'm trying to use certbot to get a LetsEncrypt certificate for my wordpress site on EC2 (using the AWS marketplace image by Bitnami, Ubuntu 14.04), but when running certbot --apache I get the ...
2
votes
1
answer
673
views
Switching from letsencrypt (client) to acme-client - where is my account key?
I started using letsencrypt when there was an "official" client called letsencrypt. I now want to change to acme-client - that is, the C implementation.
I think I manage to configure my sites, and ...
13
votes
2
answers
4k
views
Let's Encrypt - Apache - OCSP stapling
I would like to enable OCSP stapling in my Apache server. I'm using:
Server: Apache/2.4.7 on Ubuntu
Certificate: Let's Encrypt
To the file:
/etc/apache2/sites-available/default-ssl.conf
I added:
...
1
vote
0
answers
115
views
Installing letsencrypt on FreeBSD has failed
I've been able to install letsencrypt on FreeBSD the same I've been doing on Linux I do this:
git clone https://github.com/letsencrypt/letsencrypt.git /opt/letsencrypt
cd /opt/letsencrypt
sudo ./...
1
vote
2
answers
1k
views
Lets Encrypt for private domain? [closed]
I was wondering is it possible to generate Lets Encrypt certificate for private domains on internal network?
I have my own private DNS running, so I want to apply certificate for my Squid ...
1
vote
1
answer
571
views
Let's encrypt renewal error
I run the following from cron every month, and got this error:
/opt/letsencrypt/letsencrypt-auto certonly --quiet --standalone --renew-by-default -d example.org -d www.example.org
Creating virtual ...
1
vote
1
answer
3k
views
Apache problems when trying to set up SSL (Debian)
I've been trying to get a Let's Encrypt certificate, key and chain to work.
But I have also done some stuff that I know I didn't need to before I realized what to do.
Port 443 wasn't open so I've ...
2
votes
1
answer
2k
views
Is it possible to get letsencrypt certificates with a shell script?
I would like to create a shell script for getting let's encrypt certificates:
#!/bin/bash
sudo docker run -it --rm -p 443:443 -p 80:80 --name certbot \
-v "/etc/letsencrypt:/etc/letsencrypt" \
...