Questions tagged [letsencrypt]
The letsencrypt tag has no usage guidance.
51
questions
0
votes
0answers
14 views
LetsEncrypt certbot renew-hooks for mail alert and slack alert
I'm automating an SSL certificate renewal from LetsEncrypt's certbot.I followed this https://stackoverflow.com/questions/42300579/letsencrypt-certbot-multiple-renew-hooks .But in the below script i'm ...
0
votes
1answer
35 views
Output double quotes and variable
I'm writing a script to automate Let's Encrypt in PowerDNS,(this is a simple bash shell script to be run on debian)
Certbot runs and calls the script, feeding to it the variable:
$CERTBOT_VALIDATION
...
0
votes
0answers
28 views
Setting multiple subdomains to work over HTTPS on Apache
I would like to have 2 subdomains, where one subdomain would be for connecting to Docker registry on that domain and one subdomain for application that will be runned on that Docker registry.
What I ...
1
vote
0answers
50 views
Find out how SSL certificate (from letsencrypt) is auto-renewed
I'm running a Debian 8.11 (jessie) server (don't worry, a upgrade is plannend for later this year). It's a LAMP server, with addition to that, an ISPConfig installation. For the website (served ...
1
vote
2answers
55 views
Letsencrypt Wildcard certficate with NFS. [U 18.04]
I'm currently trying to share and use my wildcard certificate from letsencrypt with NFS, but the servers who are supposed to use it, cannot do so.
To my Setup:
I have 3 VM's (in future maybe 4) ...
0
votes
1answer
915 views
Sudden “no ”ssl_certificate“ is defined for the ”listen … ssl" error
I have a config like this which has worked for years:
server {
listen 80;
server_name www.domain.com domain.com;
return 301 https://domain.com$request_uri;
}
# !!!!
# line ...
0
votes
1answer
29 views
How can I add subdomains to letsencrypt using certbots?
I have certbot installed and successfully use it to encrypt my homepage.
Now i tried to setup an email system for my website using dovecot and postfix.
I got it mostly running, only problem is, ...
0
votes
0answers
21 views
Https redirects to nginx welcome page but http works well
conf file
user www-data;
worker_processes auto;
pid /run/nginx.pid;
events {
worker_connections 768;
# multi_accept on;
}
http {
##
# Basic Settings
##
passenger_root /usr/...
0
votes
0answers
20 views
Issue in installing the Letsencrypt due to DNS propagation delay
We run the following command to install letsencrypt for domain.
/usr/local/letsencrypt/./certbot-auto certonly --authenticator webroot --webroot-path $file_path --agree-tos --non-interactive --...
0
votes
1answer
14 views
expand an existing fullchain certificate
I want to expand an existing file instead of creating a new certificate for a subdomain.
I have these domains already in the file:
certtool -i < /etc/letsencrypt/live/example.org-0002/fullchain....
0
votes
0answers
17 views
redirects error with ssl certificate
I am using drupal 8 , in a Google cloud engine (http and https traffic allowed) running apache on an Ubuntu 19.04.
All worked, site (refered to here as sub.my-domain.com, it is indeed a subdomain with ...
2
votes
0answers
142 views
Set systemd timer to an odd and specific number of days
I'm using systemd.timers on CentOS 7 server and have a timer set to automatically renew Certbot-managed Let's Encrypt website certificate.
autorenewal.service:
[Unit]
Description=certbot certificate ...
0
votes
1answer
113 views
How to renewal ssl certificate on redbird proxy server
I use redbird proxy server for serve my app. Today expired my certificate.
How I can renewal it?. I tried it by this instruction but looks like it works just with ngnix server.
my server.js:
const ...
3
votes
2answers
443 views
Install Let's Encrypt SSL certificate on Oracle Linux Server
I am trying to install a Let's Encrypt certificate on a Oracle Linux Server 7.6. Since the server does not have a public IP, I had to validate via DNS.I followed the instructions here https://github....
0
votes
0answers
70 views
How to make Nginx picking up nex SSL certificate
I'm using Letsencrypt SSL certificates with Nginx (nginx version: nginx/1.10.3 (Ubuntu)).
From my understanding, Nginx needs to be restarted or, at least, have its configuration reloaded in order to ...
1
vote
0answers
15 views
Nginx, Let's encrypt cause error redirect http to https partially
I am using CentOS 7, Let's encrypt (want to clear all thing related 002.bkit.vn), Nginx.
I try to install Let's encrypt for 002.bkit.vn , then I remove it, some things still exist, but I don't know ...
0
votes
1answer
2k views
nginx: [emerg] BIO_new_file(“/etc/letsencrypt/live/site_name/fullchain.pem”) failed
I am using CentOS 7, Nginx 1.12.2, certbot 0.31.0 ,
Error after delete all things related to Let's Encrypt of 002.bkit.vn
[root@VMHostDefault 002.bkit.vn]# nginx -t
nginx: [emerg] BIO_new_file("/...
0
votes
0answers
33 views
It seems that my cron task doesn't run [duplicate]
I have cron task for root that should run daily:
$ whoami
main_usr
$ sudo crontab -l -u root
0 23 * * * certbot renew --cert-name app.my_domain123.com --pre-hook "systemctl nginx stop" --post-hook ...
0
votes
1answer
1k views
How to configure the Certbot not to include options-ssl-apache.conf into my VirtualHosts?
# cat /etc/letsencrypt/options-ssl-apache.conf
# Baseline setting to Include for SSL sites using Let's Encrypt certificates
SSLEngine on
# Intermediate configuration, tweak to your needs
...
1
vote
1answer
84 views
Logs gzipped and not gzipped
Recently I've changed logs configuration for letsencrypt, because there was no given one and I have files:
letsencrypt.log
letsencrypt.log.1
letsencrypt.log.10
letsencrypt.log.10.gz
letsencrypt.log....
0
votes
1answer
2k views
Unable to install Let's Encrypt certificate on CentOS 7
I am trying to install a Let's Encrypt SSL certificate to my website using Securing Apache with Let's Encrypt on CentOS 7.
My web server is (include version): Apache (cPanel)
My hosting provider is: ...
0
votes
0answers
47 views
Let's Encrypt Expire Bot showing different date then command line
Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018.
but when I log in to the server, and check the ...
0
votes
1answer
108 views
Postfix can't send email to popular email sites
I have an installation of iRedMail version 0.9.7 running on Scientific Linux (RHEL) 7 :
Linux smtp.fabricobjects.com 3.10.0-862.6.3.el7.x86_64 #1 SMP Tue Jun 26 12:13:22 CDT 2018 x86_64 x86_64 ...
2
votes
1answer
2k views
LetsEncrypt could not connect to verify the domain (timeout)
I'm trying to set up a SSL certificate for my Nextcloud server with LetsEncrypt, but when I run:
$ sudo certbot certonly --webroot -w /var/www/nextcloud --agree-tos \
--no-eff-email --email ...
0
votes
1answer
1k views
How to upgrade dpkg if already newest version? // apt-get upgrade broken by dpkg; Caused by LetsEncrypt Certbot backport
On Debian 9.4 Stretch
Accidently updated && upgraded to the jessie-backports, then changed the sources.list to the correct stretch-backports.
Can this kill my apt?
If not:
sudo apt-get ...
0
votes
1answer
45 views
Chaining a command to the outcome of LetsEncrypt renewal
I would like to automate the running of this command (which is simple enough):
~/dehydrated/dehydrated --cron --domain www.mydomain.com --out . --challenge http-01
The problem is that I need to ...
2
votes
2answers
3k views
How to do mass virtual hosting with lets encrypt?
I have 2500 public domains (like www.example.com, example.com, www.example.net, and example.net) running on a single IP-address using Apache VirtualHost.
I want to setup letsencrypt for all these ...
1
vote
0answers
699 views
Cannot establish SSL connection
I am trying to establish SSL connection so my users entering the site will not refuse to stay because of insecure HTTP. Basically I am trying to move from HTTP to HTTPS.
I learned many manuals and ...
3
votes
2answers
1k views
How to validate / fix an error in Certbot renewal cron
The whole day, I am fixing bugs in mainly TLS area, but this question is not specifically about TLS.
Well, I have one web server with a few web sites, each with its own SSL certificate.
But to the ...
0
votes
2answers
4k views
The server could not connect to the client to verify the domain for Let's Encrypt's Certbot
I am running Sentry on AWS using Docker. The service is now running on port 9000.
I would like to use HTTPS, getting the certificate from Let's Encrypt. However I get the following error:
sudo ...
0
votes
1answer
311 views
Acme-Challenge not requestable by all sub-domains?
I have Apache 2.4 and the following site-config for acme challenges:
<IfModule mod_alias.c>
Alias /.well-known/acme-challenge /var/www/letsencrypt/challenges/
<Directory "/var/www/...
1
vote
1answer
312 views
Automating Certbot for OSX Server error in get_cert.sh script [closed]
I am currently facing a problem with my Mac OS-X El Capitan machine when running certbot (or basically letsencrypt).
My machine is a mac mini, that is supposedly running an MDM solution with ...
2
votes
1answer
389 views
unable to sign certificate letsencrypt
I have recently set up a cloud via Nextcloud. I have successfully signed a certificate for my domain https://mydomain.home.com (of cource my real domain is different). This all worked out just fine.
...
3
votes
4answers
495 views
Automating OpenSSL certificates creation, Let'sEncrypt signing, and site dir associating, in an Nginx environment
I have an Ubuntu-server 16.04 VPS and Nginx. Now I'm implementing HTTP1 (without TLS, utilizing port 80) but I desire to go "one step forward" and work with HTTP2 (with TLS, utilizing port 443), for ...
0
votes
1answer
848 views
Run node app with SSL on 443 port (on 80 is working)
I am trying to configure a server running on Amazon EC2.
I figured out how to run my node app on port 80, but now I'm trying to run on port 443, with Letsencrypt SSL. Before to work on port 80 I ...
0
votes
1answer
334 views
Finding the webroot directory for Ghost in AWS
I installed Ghost via Bitnami on AWS and registered a domain (750in100.com) from Google Domains with it. Next I tried installing an SSL certificate through Let's Encrypt, and that's where I'm running ...
1
vote
1answer
1k views
AWS EC2 instance says apache2 isn't running but the server is still up and httpd is listening on port 80?
So I'm trying to use certbot to get a LetsEncrypt certificate for my wordpress site on EC2 (using the AWS marketplace image by Bitnami, Ubuntu 14.04), but when running certbot --apache I get the ...
2
votes
1answer
635 views
Switching from letsencrypt (client) to acme-client - where is my account key?
I started using letsencrypt when there was an "official" client called letsencrypt. I now want to change to acme-client - that is, the C implementation.
I think I manage to configure my sites, and ...
12
votes
2answers
2k views
Let's Encrypt - Apache - OCSP stapling
I would like to enable OCSP stapling in my Apache server. I'm using:
Server: Apache/2.4.7 on Ubuntu
Certificate: Let's Encrypt
To the file:
/etc/apache2/sites-available/default-ssl.conf
I added:
...
1
vote
0answers
113 views
Installing letsencrypt on FreeBSD has failed
I've been able to install letsencrypt on FreeBSD the same I've been doing on Linux I do this:
git clone https://github.com/letsencrypt/letsencrypt.git /opt/letsencrypt
cd /opt/letsencrypt
sudo ./...
1
vote
2answers
971 views
Lets Encrypt for private domain? [closed]
I was wondering is it possible to generate Lets Encrypt certificate for private domains on internal network?
I have my own private DNS running, so I want to apply certificate for my Squid ...
1
vote
1answer
535 views
Let's encrypt renewal error
I run the following from cron every month, and got this error:
/opt/letsencrypt/letsencrypt-auto certonly --quiet --standalone --renew-by-default -d example.org -d www.example.org
Creating virtual ...
asked Feb 1 '17 at 8:40
Sardathrion - against SE abuse
4,0234 gold badges25 silver badges59 bronze badges
1
vote
1answer
3k views
Apache problems when trying to set up SSL (Debian)
I've been trying to get a Let's Encrypt certificate, key and chain to work.
But I have also done some stuff that I know I didn't need to before I realized what to do.
Port 443 wasn't open so I've ...
2
votes
1answer
1k views
Is it possible to get letsencrypt certificates with a shell script?
I would like to create a shell script for getting let's encrypt certificates:
#!/bin/bash
sudo docker run -it --rm -p 443:443 -p 80:80 --name certbot \
-v "/etc/letsencrypt:/etc/letsencrypt" \
...
1
vote
3answers
2k views
I don't know how to bootstrap Certbot on your operating system
I'm trying to add an Let's Encrypt cert on to my OpenBSD 6.0 using an acme-client and certbot - but both returns me:
# ./letsencrypt-auto certonly
Sorry, I don't know how to bootstrap Certbot on ...
0
votes
1answer
296 views
letencrypt on shared hosting: neither yum or dnf found
I am following the directions on the following site
https://www.godaddy.com/help/install-a-lets-encrypt-ssl-apache-20245
and per this question
`sudo: command not found' when following a tutorial ...
3
votes
2answers
783 views
Certbot for multiserver configuration
Is there a way to use certbot and letsencrypt certificate for multiserver setup without having to manually copy the certificates from one node to another?
I have a domain name example.com which is ...
2
votes
0answers
819 views
Use Letsencrypt certificates for Postgresql [closed]
I have successfully configured Letsencrypt for my NGINX webserver on Debian 8 Jessie.
Now I have installed Postgresql 9.4 and want to use the LE certificates (in /etc/letsencrypt/live/mydomain/com/......
5
votes
3answers
8k views
Certbot add www domain to existing domain certificate
I have installed an SSL certificate from Let's Encrypt with Certbot on my Apache server with Debian 8 following this tutorial from Let's Encrypt's own documentation: https://certbot.eff.org/#...
4
votes
0answers
8k views
Uninstall all changes made by Letsencrypt
I installed Letsencrypt during the beta, following the instructions in the email, and now it seems broken on my debian jessie server.
I try to uninstall letsencrypt and want to start over with my (...
