Questions tagged [certbot]
The certbot tag has no usage guidance.
284
questions
0
votes
0
answers
18
views
Certbot with Nginx in Docker
I am trying to serve a website on HTTPS for the past 2 days. I have gone through a lot of blogs to figure out the solution but to no avail and therefore decided to ask the community about this.
...
0
votes
1
answer
45
views
Why does wildcard dns entry resolve to a singular hostname?
I'm trying to update my letsencrypt wildcard certificate with certbot, but I noticed it behaved strangly when I ran the command. It said it'd add a subdomain name and remove the wildcard as follows:
...
- 65
0
votes
1
answer
26
views
www certificate not getting pulled correctly - nginx and certbot
I am using a docker stack with nginx and certbot. My domain is hosted on google domains.
I want a domain to be accessible via example.tld only:
redirect all http to https
redirect www to non-www
...
- 133
3
votes
1
answer
143
views
Operation of certbot and nginx
I was hoping someone could satisfy my curiosity about how certbot and nginx interact during renewal time.
On my Linux host, I set up certbot and the certbot-nginx plugin.
I had some regular nginx site ...
1
vote
0
answers
49
views
Tunneling a LEMP server through an oracle instance with wireguard. Cannot get Nginx Certbot certificates on LEMP server. How to debug?
I have a LEMP server at home running Ubuntu 22.02 and an Oracle cloud instance running Ubuntu 20.04. The Oracle cloud instance is acting as a Wireguard server. The LEMP server at home is acting as the ...
- 63
1
vote
1
answer
20
views
certbot wildcard cert not a wildcard
I did the following:
sh-3.2# certbot certonly --manual --preferred-challenges=dns --email admin@example.com --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -d *.someDomainlab.com
...
- 147
1
vote
1
answer
25
views
How can I tell if an installed cert is wildcard or not
I installed a cert for my server a while ago using certbot, and cant remember if I setup as a wildcard or not, What command can I run to see if it is or not?
- 147
0
votes
1
answer
578
views
Unable to renew a Certbot NGINX certificate
I have a NGINX server and I use Certbot to generate a Let's Encrypt certificate. I saw that my certificate was not renewing automatically despite the cron I had set up.
I tried to renew it manually ...
0
votes
1
answer
197
views
Server refused to connect after installing SSL via Certbot | Docker + Nginx, AWS Lightsail
I have successfully managed to install SSL via certbot into my Nginx Docker container,
but after installation, all traffic routed via HTTPS refuses to connect.
curl https://www.example.com or curl ...
- 101
0
votes
0
answers
125
views
Change certbot renewal configurations to another Let’s Encrypt-Account
Using certbot 1.26.0.
Due to moving some certificate configurations to another server and creating new ones, I now have got two accounts. That was not intended and I think I don't need two accounts.
...
- 127
0
votes
1
answer
179
views
How do I set up a Let's Encrypt wildcard certificate for Apache on an Amazon Linux 2 AMI EC2 instance?
I have a domain (let's say example.com), and I currently have a Let's Encrypt certificate set up and properly working for example.com and www.example.com for Apache on an Amazon Linux 2 AMI EC2 ...
- 103
0
votes
1
answer
145
views
How to troubleshoot Ubuntu Certbot cron/timer?
lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 20.04.2 LTS
Release: 20.04
Codename: focal
and have installed certbot via apt-get
My issue is ...
- 113
0
votes
0
answers
27
views
Dovecot refusing connection after extending CertBot certificates
I have an Ubuntu server with a website and a setup with postfix, dovecot, and roundcube.
All was working well. But this week, I have extended the wordpress website from 1 single-site to 6 sites (...
0
votes
1
answer
209
views
How to allow certbot to be able to access http://myapi.com/.well-known/acme-challenge/2d8dvxv8x9dvxd9v via nginx?
My nginx.conf file is as follows:
user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;
#the above include brings in the following default files:
#50-...
- 138
0
votes
1
answer
281
views
Certbot unauthorized and connection errors
I have a spring boot application on Google Cloud, CentOS 7. I wish to install SSL certificate via Let's Encrypt and Certbot. When I use certbot --apache -d mydomain.zone command I receive an error:
...
- 23
0
votes
1
answer
104
views
certbot creates a challenge owned by root:root and permissions 640 and apache can't access it - custom ACLs applied on parent directory
On my server I have special permissions that I set on my public_html folder.
First the sticky bit
chmod g+s /home/domain.com/public_html
Also default group permissions.
setfacl -m 'default:group::rwX'...
1
vote
2
answers
743
views
NginX website returns default page with HTTP (HTTPS works correctly)
This has to be a duplicate, but I have been searching for a long time and have not found anything.
When I type in the address of my website using http, I get the NginX default page (https works fine):
...
- 87
0
votes
1
answer
412
views
Nginx not listening on new ports with systemctl reload nginx after adding config with a new port
Not sure how to quickly summary this issue, so I will put my scenario in bulletpoints:
Normal basic nginx install
I only use https(443), so I removed all http(80) config
When you start nginx (or ...
- 101
1
vote
0
answers
224
views
Nginx reverse proxy stop domain from changing to local IP
I'm not familiar with any of this proxy stuff.
nginx config
I can't seem to find a solution to this issue. Right now when I type ex.domain.com it redirects to the IP address 192.168.1.202. How do I ...
- 11
0
votes
1
answer
101
views
Certbot cannot check challenge because of Apache "Redirect / domain.com"
So there is this server that is all messed up but that is besides the point.
I ran certbot and it failed. Checked the vhost for port 80. It has the blanket redirect.
It dose not seem like it would ...
0
votes
0
answers
146
views
Error in multiple domains with nginx when add certboot certificate
I'm using an Ubuntu 20.04 server on Azure, with Nginx, PHP-FPM, and two websites.
The sites are example.com and sub.example.com and They are with the certificate issued by certbot and working fine.
I ...
0
votes
1
answer
73
views
After I ran certbot browsers cannot access css file
After I ran certbot --nginx browsers cannot access css of my website.
style.css is located in ./styles of root of my site.
The error is Failed to load resource: net::ERR_CERT_COMMON_NAME_INVALID style....
0
votes
1
answer
1k
views
permission denied error for letsencrypt certificates
This error is from dovecot where it can't read the certificate because of permissions I tried changing permissions around, presently I have everything on 644 I understand the paths are only links to /...
0
votes
0
answers
192
views
How do I fix issue with renewing my certbot certificates on ubuntu
I am trying to renew my certbot certificates running the command
cerbot renew
and I get this error
2021-12-02 10:46:30,686:INFO:certbot.plugins.selection:Plugins selected: Authenticator nginx, ...
- 1
0
votes
0
answers
92
views
Running certbot on an ECS instance
I am trying to run certbot on an ECS instance which is running a docker image (docker.io/existdb/teipublisher). The image runs well and I have associated it with a custom subdomain teipub.dh-dev.com ...
- 109
0
votes
1
answer
4k
views
How do I specify a port other than 80 when adding SSL certificate using Certbot?
I have a server which runs 2 different web servers (Apache and Nginx). The Apache server takes care of all the traffic directed to Wordpress sites whereas the Nginx server serves my Python API and ...
0
votes
0
answers
114
views
Pagespeed cannot always access page (FAILED_DOCUMENT_REQUEST), SSL certification error?
I found that Google cannot access my page (this is a follow up of https://webmasters.stackexchange.com/questions/137407/page-cannot-be-crawled-by-google-at-all)
Now I am thinking it might be a server ...
- 456
0
votes
1
answer
2k
views
Suddenly getting SSL handshake errors
I have a site https://www.sqeazy.com on a Ubuntu 18.04.1 AWS Lightsail VM running a nginx webserver and using Letsencrypy certbot SSL. The site was running without problems but when I checked it today,...
0
votes
0
answers
37
views
Does certbot mask apache2?
I recently ran a certbot command using --webroot on a server. Everything worked fine for 8+ hours.
This morning my frontend went down. Upon investigation I discovered that the apache2 service was down....
- 101
2
votes
0
answers
991
views
Nginx Docker Container stops working irregularly
The server:
I use Nginx as a ingress-proxy for my server. Nginx runs within a Docker container.
docker-compose.yml:
nginx_ingress:
image: nginx:latest
ports:
- "80:80"
- ...
- 121
5
votes
1
answer
1k
views
How can I disable "Subject Alternative Name" from being included in Certbot Let's Encrypt certificates?
Using Certbot to install an R3 Let's Encrypt certificate on an nginx webserver causes all the other domains in the nginx configuration to be included under "Subject Alternative Name" on the ...
- 334
0
votes
0
answers
400
views
Nginx: Reverse Proxy to Docker Container with SSL
On my Ubuntu (20) server I have a Docker container running on port 3000. I have now installed NGINX on the server and point a domain via a reverse proxy to the Docker container.
server {
listen 80;...
- 101
0
votes
0
answers
98
views
Two domains server_names but separate SSL certificates in NGINX?
My NGINX config has a single server defined, and in server-name I have both my domains listed. However, I'd like to keep their SSL certificates separate if possible. I tried using certbot twice, once ...
- 111
0
votes
1
answer
591
views
Cant install certbot using snap return: Run configure hook of "certbot" snap if present
I want to install certbot using snap, but when I tried Official instruction:
sudo snap install core; sudo snap refresh core
sudo snap install --classic certbot
but returns:
error: cannot perform the ...
0
votes
2
answers
2k
views
How to remove expired Let's Encrypt cert (Debian)
I am trying to remove the expired DST Root CA X3 Let's Encrypt SSL cert (expired yesterday) from a Debian server which is still appearing when I check in SSL Labs:
RSA 2048 bits (e 65537) / ...
- 392
0
votes
2
answers
68
views
Nginx giving precedence to subdomains based in alphabetical order of config files
TLDR: Nginx is giving precedence to subdomains in alphabetical order of the config files, and I want to know a way to prevent this from happening. This is similar to this question, but I am more ...
- 1
1
vote
1
answer
925
views
Install certbot nginx in Amazon Linux AMI
i have a really old amazon linux ami in which i need to install certbot for my nginx which is running a php website. Now i need to install ssl on this website. But i cannot install certbot-nginx on my ...
- 145
0
votes
1
answer
3k
views
Apache Let's Encrypt Certbot Challenge Failed on Linux [closed]
I have a Fedora 34 server running Apache Tomcat. I had certificates from Let's Encrypt working. I installed them with certbot (as one does) and everything was working well. Now, when I go to renew my ...
- 21
1
vote
0
answers
394
views
E: Package 'python-virtualenv' has no installation candidate while using Certbot to renew certificates
We had an old Ubuntu 14 server, on which we install certbot and let's encrypt certificates for SSL. Then we upgraded the server to ubuntu 20.
Since then, whenever I try to renew or generate new ...
- 125
-2
votes
1
answer
2k
views
how to uninstall certbot in CentOS
LetsEncrypt's certbot is not supported on CentOS. However, after installing this, the VPS kept warning me
The filesystem “/var/lib/snapd/snap/certbot/1434” mounted at “/var/lib/snapd/snap/certbot/...
- 97
0
votes
0
answers
106
views
http_ssl_module failed to install when compile from source code of nginx
I am trying to setup my https using certbot , so I need to recompile ngx adding '--with-http_ssl_module', here is the complete steps：
- sudo make clean sudo
- ./auto/configure --prefix=/var/www/...
- 101
0
votes
0
answers
1k
views
Why the certificate Authority always failed the temporary challenge file created by Certbot?
i'm using jonasal/nginx-certbot image for letsencript certificates generate.
docker-compose.yml:
version: '3'
services:
nginx:
image: jonasal/nginx-certbot:latest
restart: unless-stopped
...
- 141
0
votes
0
answers
32
views
how to get www site to automatically redirect to non-www
I'm trying to automatically redirect this site to non-www , I have setup a https certificate through certbot. At the moment I have 2 seperate domains one with www and one without, if a user is logged ...
- 1
0
votes
0
answers
71
views
letsencrypt not working for base domain
I'm using centos 8, and have installed let's Encrypt certificate that's not working for base (root) domain but working for sub domain. I've checked certificates available for both root and sub domains
...
0
votes
1
answer
144
views
Can't use Certbot to SSL for Nginx with reactjs app and laravel subdirectory in subdomain
I have domain at 1 IP and subdomain at other IP. I had config nginx url for FE: http://subdomain/ and for BE: http://subdomain/api. And I need ssl for subdomain use Certbot, at this I have react app ...
1
vote
1
answer
538
views
Why am I unable to access my website after installing an SSL certificate using Certbot? (running Ubuntu and Nginx)
I can not establish a connection to port 443 on my nginx server.
I needed port 443 to enable https connections, I used certbot to install an ssl certificate, and I went with the default installation, ...
- 121
4
votes
1
answer
806
views
Will certbot actually renew my certificate?
Looking at /etc/cron.d/certbot, I don't think it will! That file includes the line:
0 */12 * * * root test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(43200))' ...
- 143
1
vote
1
answer
486
views
What process does certbot run as on Linux?
I'm guessing certbot must operate as a continual running service on Linux however using ps on a server that uses Let's Encrypt certificate auto-renewal, I'm not seeing any obvious process for certbot. ...
- 223
0
votes
0
answers
391
views
Certbot renew running but not renewing - 2021
I have exactly the same issue as this post 3 years ago. Certbot timer is working, but the cert will not renew every 90 days. I resorted to booting the server and the cert will be updated. I have also ...
3
votes
1
answer
1k
views
certbot renew crashes nginx and all websites go offline
When sudo certbot renew command is run, nginx server is crashing. The error log in systemd looks like this:
- The job identifier is 48862.
Sep 01 11:31:52 phoenix.medialab.ntua.gr systemd[1]: nginx....
- 131