Questions tagged [certbot]
The certbot tag has no usage guidance.
235
questions
1
vote
1answer
26 views
Renew Let's Encrypt without root access
I'm in a peculiar and unfortunate situation where our network administrator suddenly passed away and no one was prepared for taking over the server management. We have an internal Linux VM that runs ...
0
votes
0answers
26 views
NGINX Is redirecting to localhost:3000
I'm using ruby on rails in a docker container running my website https://redrebelgames.com on port 3000. I'm trying to setup NGINX to redirect http:// traffic to https:// and redirect port 80 to port ...
0
votes
1answer
21 views
apache how configure multi domain https redirection?
I've an apache running under AWS Elastic beanstalk. I've got several different domains and I want all of them to end in a specific domain name, in HTTPS.
The redirection from other domains e.g. https:/...
0
votes
0answers
39 views
Renew Letsencrypt certificate on Amazon AWS Linux AMI with nginx
I have production and test instances on AWS Linux AMI. On the test instance I am unable to renew letsencrypt certificate with certbot because it requires ACME2 and I am still using old certbot to ...
1
vote
1answer
54 views
Finding out if a certificate is due for renewal without triggering the actual renewal with Certbot
I am trying to use Certbot to allow for semi-automated certificate updates. I don't want fully-automated updates to avoid automatic certificate replacements that could interrupt business and ensure ...
1
vote
1answer
29 views
Litespeed + Certbot - Invalid cert, expired
I keep getting an issue where my site reports the site as having an invalid SSL.
ERR_CERT_DATE_INVALID (in chrome)
It is simply fixed by restarting LSWS.
I therefore checked my cron for certbot and it ...
0
votes
1answer
54 views
Is it necessary or advisable to preserve SSL certificates when moving to a new server?
I have one domain that I'm serving a site on from a VPS. I used certbot to get certificates and automatically set up TLS on the nginx server. If I'm moving the site to a new VPS is there any reason to ...
-1
votes
0answers
11 views
ubuntu, docker, nginx, apache2, need to generate certificate in docker, acme-challenge not saving
I have this structure.
Server ubuntu (host).
Docker nginx, with folders mapping (configuration to host /data/nginx/, certificates to host /data/certs).
Docker apache with app files (php), no mapping ...
1
vote
2answers
102 views
Unable to get a certificate from Letsencrypt using the DNS-01 challenge
I've tried getting a certificate using certbot, caddy, and lego. They've all returned similar errors with this domain.
I used the DNS-01 challenge. Here's output from the lego client:
ananth@wopr ~>...
-1
votes
1answer
43 views
When using Let's Encrypt certbot, how do I restart a network service only once and only if the cerificate was actually renewed?
The certbot command provides two hooks that run after automated renewals, from the docs:
--post-hook POST_HOOK
Command to be run in a shell after attempting to
...
0
votes
0answers
22 views
Automatic SSL certificate renewal using certbot
I am using (docked) certbot to provide my sites with SSL certificates using for example:
docker container run -it --rm --name certbot -v /foo/nginx/:/etc/nginx -v /foo/letsencrypt:/etc/letsencrypt -v /...
-1
votes
2answers
1k views
Invalid response from .well-known/acme-challenge/<token>
I'm trying to use certbot to obtain an SSL certificate for one of my subdomains. However, one of the challenges fails when trying to test .well-known/acme-challenges/<token>. The web server (...
0
votes
2answers
31 views
Possible conflict with multiple SSL certificates?
We currently have a SSL certificate for mycompany.com in GoDaddy and they are asking me to get one for our QA department for the URL qa.mycompany.com. I have installed certificates just fine with Let'...
1
vote
1answer
120 views
Nginx with letsencrypt - duplicate value “TLSv1.2”
SSL test capped my result to B because of enabled TLS 1.0 and 1.1. I know I should add such line to my config: ssl_protocols TLSv1.2 TLSv1.3;
This is my minimized config:
server {
root /var/www/...
0
votes
1answer
406 views
How to automate certbot certificate renewal on Ubuntu 20.04
I'm running certbot on Ubuntu 20.04 in AWS, installed as a snap package. I'm not sure if certbot renewal is running properly. I'd appreciate some help working out how to best get it working.
This is a ...
0
votes
1answer
93 views
DDNS Certificates, Multiple Domains, Let's Encrypt, Certbot, Nginx, Ubuntu
I am a little confused and am looking for some guidance. I am running the latest Nginx on a home machine running Unbuntu 20.04 version 2. I have pfsense as my router/firewall running on a different ...
1
vote
2answers
96 views
Renew Let's encrypt certificate automatically without stopping nginx hosted on docker
I am using nginx as proxy and SSL termination for the site hosted on docker. App & nginx both are on docker. I have installed Let's encrypt SSL using Certbot directly on Ubuntu server. And now ...
-1
votes
2answers
73 views
Debian server unable to run Certbot
root@vps434142:~# certbot
Traceback (most recent call last):
File "/usr/bin/certbot", line 6, in <module>
from pkg_resources import load_entry_point
File "/usr/local/lib/...
2
votes
1answer
110 views
On CentOS Certbot / Lets Encrypt uses snap to keep SSL certificates up to date. Is there another method that will keep certificates up to date?
Environment: Centos 8, Certbot, Lets Encrypt
On CentOS distributions certbot / Lets Encrypt uses snap to keep SSL certificates up to date. Below are the instructions.
certbot instructions: Nginx on ...
2
votes
1answer
55 views
certbot on site tunneled to internal network HTTP site
I have a cloud server running Ubuntu 20.04, a configured domain to the cloud server, and a server in my local network serving an HTTP website. I have successfully tunneled my local network server HTTP ...
0
votes
0answers
90 views
Cron running Cerbot every minute
I have a peculiar problem. For some reason as the clock struck midnight on February 1st, cron is now running certbot every minute trying to renew a certificate.
When running sudo crontab -l I get the ...
0
votes
0answers
10 views
Is it possible to run a script on failed certbot renewal?
I'm trying to set up a warning when certbot renewal fails, and I would like to know which certificates have any issues.
Is it possible?
--deploy-hook won't run when renewal failed, and --pre-hook in ...
0
votes
0answers
150 views
Proxmox | /etc/default/pveproxy file
I have a small problem. I was trying to disable access to the proxmox web panel for the ip address and enable it for my domain. As I saw on the proxmox website (https://pve.proxmox.com/pve-docs/...
0
votes
0answers
16 views
Send command to another machine in a secure credential way
I have a question to ask you: I am creating a script to use with certbot for the renewal of certificates via DNS, everything works correctly on the same machine where BIND is also running (this ...
0
votes
0answers
347 views
No valid IP addresses found for subdomain with certbot
I am currently trying to set up an email server, and recently stumbled over getting a SSL certificate from Let's Encrypt in this question and realizing it isn't necessary if I don't have a web server, ...
1
vote
1answer
44 views
SSL configuration - Lightsail
Having trouble getting SSL working on Amazon Lightsail using let's encrypt (certbot --apache)
Lightsail image Centos7
Added Apache2
note: (example.com, subdomain.example.com are not my domains, I'm ...
1
vote
0answers
150 views
Nginx stopped and failed to restart - open() “/run/nginx.pid” failed
I am running my django apis, deployed on Ubuntu 18, on Nginx and running via Supervisor.
I am using Certbot for SSL certs and this is the only web service running on this webserver. No other websites ...
1
vote
2answers
56 views
How does Apache choose which certificate to use?
Currently Apache is hosting several sub domains with host certificates generated with certbot and a http challenge.
Now I want to setup a default virtual ssl host to redirect non-existing subdomains ...
1
vote
1answer
73 views
How to use certbot-generated .pem files with nginx?
mostly out of curiosity I want to try out nginx for a change. On my production server I have set up an SSL certificate for Apache like this:
SSLCertificateFile /etc/letsencrypt/live/example.de/...
2
votes
1answer
173 views
Why OCSP stapling on NGINX for “buypass” DV certs fails without explicit root declaration?
tl;dr
For buypass DV certs fetched by certbot I need to explicitly tell NGINX to trust buypass root cert to enable OCSP stapling. This is not the case for Let's Encrypt certificates and I cannot ...
0
votes
1answer
98 views
Installing SSL with Certbot on RTMP enabled Nginx Server in Ubuntu
I have a Ubuntu 18.04 OS. I installed rtmp-module for nginx v18.01 and send streams on it. I can access to server with IP and domain name. Indeed I need SSL on this server. But when I install SSL with ...
0
votes
1answer
259 views
Cerbot with DNS Plugins running on multiple Nginx for to renew the same certificate
Am trying to deploy using Ansible (Ansible is not really relevant to the question but is just to give the whole picture) the Certbot configuration in order to obtain wildcard certificates to a cluster ...
2
votes
2answers
37 views
Certbot semi-manual operation
I want to ask if it's possible to use Certbot for a semi-automated setup where the underlying infrastructure is controlled by me and not by Certbot.
I understand that Certbot will communicate with Let'...
0
votes
2answers
143 views
Using certbot DNS authorization with multiple API accounts?
I'm using EFF certbot ACME client to generate a single TLS certificates on my webserver that is hosting multiple domains using Subject Alternative Names (SAN). Up until now all of the domains where ...
1
vote
1answer
49 views
How to make Certbot respect Debian standards for certificate deployment?
Certbot seems to manage X.509 certificates and private keys in its own directory structure in /etc/letsencrypt.
On Debian-based systems (including Ubuntu, Linux Mint and others) X.509 certificates are ...
1
vote
0answers
325 views
Could not allocate new session in SSL session shared cache “le_nginx_SSL” while SSL handshaking
I have a centos 8 server with nginx and certbot installed. When I check:
cat /var/log/nginx/error.log
I get this error a lot:
[alert] 2245236#0: *42902735 could not allocate new session in SSL session ...
0
votes
0answers
17 views
SSL certificate for Cockpit running on separate machine?
I have a machine hosting web content (using Apache) for my domain (let's say example.com). It has a certificate that was created using certbot and is setup to auto-renew.
I've recently added another ...
1
vote
1answer
522 views
TLS 1.0 is obsolete. Enable TLS 1.2 or later. nginx
I have the following nginx configuration under /etc/nginx/sites-enabled/example_com for domain example.com:
server {
server_name example.com;
location / {
proxy_set_header X-...
1
vote
2answers
3k views
Certbot (LetsEncrypt) on custom port (Nginx OR apache)
I've found many similar questions, people asking about how-to setup SSL on different ports (other than 80/443), i.e. 1234 port.
However, all answers were like use redirection or proxying requests or ...
2
votes
1answer
197 views
I have a rewrite in an apache httpd conf file, that breaks certbot. Is there a way to change it so that it doesn't?
I have a subdomain set up in Apache httpd, that is front-ending for a Tomcat server, with the httpd server secured by Let's Encrypt.
If I have the following rewrite active in the conf file, then ...
1
vote
1answer
228 views
Certbot post-renewal/post-deploy hook in cron job
On a mail server I need to reload Dovecot after Certbot renews my Let's Encrypt certificates. According to the Certbot documentation a --deploy-hook can be used:
Command to be run in a shell once for ...
0
votes
0answers
93 views
I am trying to set up a drupal site using docker in a Vagrant VM and can't seem to get Certbot to work
So I am trying to set up a drupal site using docker in a vagrant VM using bento/ubuntu-20.04.
I went through this tutorial: https://www.digitalocean.com/community/tutorials/how-to-install-drupal-with-...
1
vote
1answer
130 views
nginx serving wrong certificate for vitual hosts with own conf file
I've got a few virtual hosts set up through nginx on my centos7 server. I'm getting certs by using letsencrypt certbot. By default certbot writes the vhost info to the /etc/nginx/nginx.conf file. This ...
0
votes
1answer
76 views
Nginx server times out on ports 443 and 80
So my problem is the following. I am using CentOS 7.8 and I installed nginx, php, mariadb and certbot. After successfully generating the SSL certificate certbot automatically overwrote the NGINX ...
0
votes
1answer
211 views
certbot --apache uses wrong domain name but claims to use the right one
I am running a website with apache on RHEL7 on the domain https://www.ayeaye.at. I am using certbot to obtain a certificate.
The webserver works, I get a proper certificate for domain, and certbot ...
0
votes
2answers
1k views
Can't find certbot cron job after successful installation
I've developed a REST API in Node and installed nginx as reverse proxy in front of that in order to handle the SSL certificate from Letsencrypt. It's the first time I've set up nginx but everything ...
0
votes
0answers
159 views
Apache not starting with posthook after certbot renewal
I want to automate the renewal of certificate from letsencrypt. And I don't want to make changes in the configuration of my apache. So I would like to just shut it down and restart it. I have been ...
0
votes
0answers
78 views
Certbot redirect doesn't work
I added a subdomain for my website and I got an error about redirection, then I deleted my ssl conf for certbot to recreate it. This time I had not error but the redirection doesn't work:
...
0
votes
3answers
1k views
Certbot renew dry run fails with error: Input the webroot for sub.mydomain.com:. Skipping
I have a Debian 10 instance running which hosts my Node.js/Express API. I have been using a different subdomain during development and added another subdomain as I'm nearing production. The first ...
0
votes
0answers
328 views
(certbot) How to fix Failed authorization procedure
I am running Ubuntu 18.04 with nginx and I am getting the following error when I try to generate a ssl certificate for my server using certbot:
Failed authorization procedure. irfreeman.ubuviz.com (...
