Questions tagged [certbot]
The certbot tag has no usage guidance.
182
questions
0
votes
1answer
20 views
Certbot failing with: ssl.SSLError: [X509] no certificate or crl found (_ssl.c:3732)
This is a copy of a recent Let's Encrypt community forum thread which helped me mitigate the issue. I am adding this here since it could potentially affect more users.
I have a server with currently ...
0
votes
0answers
26 views
Certbot certificate not valid after domain transfer [closed]
After transferring my domain from one registrar to another my certificates are no longer valid.
The server runs Wordpress, I used Certbot to generate the certificates. A simple certbot renew does not ...
0
votes
2answers
62 views
How do I check SSL certificate when using Cloudflare DNS?
So usually I just create a letsencrypt certificate and setup it up, then i open up the browser and click the "LOCK" icon and check the certificate info, this tells me that my setup actually ...
0
votes
1answer
109 views
Can't access Nginx webserver after configuring SSL (Certbot, LetsEncrypt)
I'm brand new to AWS and web servers, using nginx for this project & MERN stack for the code. Anyways I got my website up and running using this tutorial, and used this tutorial (uses letsencrypt ...
0
votes
0answers
48 views
Can I enable TLS 1.3 with Certbot?
I am working with Nginx and Certbot, I have secured a domain with HTTPS. I would like to get the domain up to TLS 1.3.
The Nginx server block for my domain get's it's SSL protocols from the included ...
1
vote
0answers
41 views
Ubuntu server 18.04 nginx crashes and reboots when testing SSL certificates
So far I installed ubuntu server 18.04, made the latest upgrades and dist-upgrades then I installed nginx with apt install after that I used cerbot to get the SSL certificates.
server {
server_name ...
0
votes
1answer
28 views
Can't install certbot on an Amazon Linux 2 EC2 instance
I set up Amazon Linux AMI EC2 instance via ECS (elastic container service).
It seems like by default it doesn't have that many packages installed.
When I'm trying to install certbot using the command:
...
0
votes
2answers
222 views
how to install certbot on Amazon Linux 2
I have an EC2 VM running Amazon Linux release 2 (Karoo)
How can I get certbot?
It comes with the awscli tools installed, which seem to be incompatible with the certbot in epel:
$ sudo bash
# yum ...
0
votes
3answers
43 views
Certbot is killing my apache server
So once in a while I receive an email about apache being unreachable. I mean it actively rejects connections (ERR_CONNECTION_REFUSED for Chrome).
systemctl status apache2
● apache2.service - The ...
0
votes
1answer
18 views
SSL: is it possible to use a certificate for a specific subdomain and a wilcard for all other sub domain?
I have a domain, say domain.com.
I have some random subdomains which all point to the same server. (eg: user-00.domain.com, user-01.domain.com, etc.)
I also have some fixed sub domain names, let's ...
0
votes
2answers
32 views
I can't access my website after installing certbot SSL on gcloud
I followed this tutorial on how to install let's encrypt ssl on Google cloud
Everything was working fine before installing but after install the certbot on my WordPress click to deploy site running ...
google-cloud-platform
0
votes
3answers
278 views
Can't upgrade certbot because of libc6 version
I am trying to update Certbot from 0.10.2 to some version with support to ACME 2 in Debian 9.1 with Python 2.7.9.
apt-cache policy certbot
certbot:
Installed: 0.10.2-1
Candidate: 0.28.0-1~deb9u2
...
0
votes
1answer
42 views
certbot installation on CentOS 8 fails
Trying to install certbot on CentOS 8 with sudo dnf install certbot python3-certbot-nginx, as suggested at certbot's website fails with the following error
Error:
Problem 1: package python3-certbot-...
1
vote
3answers
190 views
Unable to use LetsEncrypt - CertBot - When HTTP to HTTPS redirect is setup
I am trying to configure CertBot and it only works when I serve my site over http. Usually I have an https redirect and I don't want to have to change the site config each time I need to use certbot. ...
0
votes
1answer
73 views
What's the proper way to use certbot for subdomains served via nginx?
I figure I must be missing something, because every time I try to load content by hitting the subdomain in my browser, it says "not secure", even though I went through the steps that followed after ...
2
votes
1answer
110 views
Certbot: Issuing a certfiicate for internal IP address with my own PKI?
I am running my own ACME CA server that allows issuing of certificates to IP addresses. I have installed the root certificate into all the devices in my LAN. Let's say that I am running the server at ...
1
vote
1answer
46 views
Let’s Encrypt Certbot: How to use HTTPS for the server validation
When using Let’s Encrypt Certbot, the Let’s Encrypt server makes a HTTP request to the temporary file on the web server to validate that the requested domain resolves to the server where certbot runs.
...
0
votes
1answer
97 views
How to solve Nginx WebSocket secure (wss) “error 426 Upgrade Required”?
I tried to configure a Websocket proxy on my Nginx server, but unfortunately, I don't get it working. I have read various post here but I cannot get the server work. I think it has something to do ...
-1
votes
1answer
29 views
Adding Cron in Linux to execute specific command after a month [closed]
Using CentOS 8 I want to add a cron which shall execute below command after every month
sudo certbot renew --non-interactive
Can someone please assist how actually I can do it using Linux shell.
0
votes
1answer
103 views
How should certificates for multiple separate sub-domain servers be issued/renewed with Let's Encrypt?
Upgrading my home infrastructure to learn as well as be more secure, I have not been able to find out how best to get certificate(s) issues and installed across my servers, which comprise:
Firewall (...
0
votes
1answer
193 views
Letsencrypt for all subdomains *.example.com [duplicate]
I'd like to obtain one certificate working for all my subdomains *.example.com.
This works:
certbot-auto certonly --webroot --webroot-path /home/www/example/ --domain example.com
...
0
votes
0answers
29 views
404 error for static files after running certbot
I am setting up a Django project in production mode. When I was serving files over HTTP, everything appeared normal, CSS, JS and everything. However, as soon as I ran certbot, the styling and scripts ...
0
votes
1answer
21 views
which certbot software can be removed after installing certificates automatically?
I installed certificates on my (nginx) web server (ubunu 18).
The process required a PPA and software I presumably don't need anymore.
What can be safely uninstalled, while keeping my certificates ...
0
votes
0answers
21 views
Certbot: How to replace an existing server with the same SSL certificate?
I'm sure this must be a common problem.
I have a server that is already running with a functioning certbot, that validates the certificates every 90 days.
I would like to replace the server with ...
0
votes
0answers
217 views
MisconfigurationError: nginx restart failed
I had to unplug my server in the middle of a TLS certification renewal and now I'm getting this error, I'm not sure what I can do to fix it... Any help would be appreciated.
Waiting for verification.....
0
votes
1answer
117 views
Nginx reverse proxy error - too many redirects
I have set up an Nginx reverse proxy but I am getting an error. I don't know why this is happening, something is wrong with my configuration file.
This page isn't working - redirected you too many ...
1
vote
2answers
62 views
Removing DNS A Records
I currently have 2 DNS A records for main domain pointing to the different IP addresses. This is creating problems when I try to use certbot to generate Let's Encrypt's SSL certificate for my domain, ...
0
votes
1answer
899 views
How can I retrieve my Let's Encrypt registration's current email address?
I understand that Let's Encrypt maintains an email address as a registration and recovery contact for every "account." This email address is used to notify the owner of the certificates of upcoming ...
0
votes
0answers
26 views
ngnix api ssl conf - api returning 404
I am having some issue with my nginx conf in combination with Certbot and a SSL API.
You can see my nginx config here:https://dpaste.org/E2nP#L10
I have an api located at /root/api/ This is ...
0
votes
1answer
32 views
After running certbot run -d mydomain.com, the domain remotely verifies but site does not come up; what next?
Wanting to "join the modern age" of enabling https on established Apache-server based virtual hosts (some 54 of them!) I finally got around to trying "Let's Encrypt" (by EFF.org), which, by the way, ...
0
votes
1answer
27 views
Certbot wildcard with apache but none of the listed DNS providers
On the official certbot documentation for apache (https://certbot.eff.org/lets-encrypt/ubuntubionic-apache.html), it says you should do
sudo apt-get install python3-certbot-dns-<PLUGIN>
...
0
votes
1answer
64 views
listen 443 ssl breaks nginx
I've installed nginx on a GCE vm to host a personal website. I set it up and it works great for http connections. However, enabling https after installing certificated from certbot has broken nginx.
...
2
votes
3answers
1k views
Certbot error no attribute TLSSNI01 / cert-revoke status code 400
I am trying to create and install a Let's Encrypt SSL certificate using certbot. It's for a subdomain named private.mydomain.de (on a different server than mydomain.de). Certbot aborts with the ...
0
votes
0answers
236 views
Unauthorized error while trying to add LetsEncrypt to a domain using Nginx with docker for Spring boot
I am trying to add HTTPS to my domain using LetsEcnrypt. My server setup so far is, I have Spring Boot running on Tomcat in a docker container on Port 8088 and I have Nginx server in front of the ...
0
votes
0answers
66 views
Qualys SSL Test reports a second certificate for the domain, can't find it
When I run my domain through the SSL Test by Qualys, its main issue is an apparent second SSL certificate that is installed for this domain. However, I've looked through every config I could think of ...
1
vote
1answer
50 views
certbot letsencrypt - does mail server need to be included in Domains to avoid TLS library error?
Host: Digital Ocean
OS: CentOS 7
Mail Server: Postfix (new install)
SSL: certbot and letsencrypt.
I'm trying to track down an error I'm having with postfix and I think possibly my SSL certificate.
...
0
votes
2answers
94 views
Migrating certbot/letsencrypt certificate to new server
I have a server out there that supports HTTPS using a certbot/letsencrypt certificate.
I am doing a general software upgrade so to minimize risks and downtime, I'm installing new releases on a new ...
0
votes
1answer
127 views
Unable to renew lets encrypt using certbot
I'm running centos 6, I recently tried installing python 3, might have messed something up related to python
if I do
python2 /usr/local/bin/certbot-auto renew
I get
file "/usr/local/bin/certbot-...
1
vote
1answer
141 views
I cannot get certbot to install on a particular AWS EC2 Linux instance
I'm trying to install certbot on the instance where we have a Bitnami Trac/SVN stack and a Tomcat server installed, and when I do
yum install -y certbot python2-certbot-apache
I keep getting
No ...
1
vote
2answers
583 views
Different certificates for Let's encrypt
I have an apache webserver that uses certbot for Let's Encrypt SSL certificate.
Is it possible to have many separated certificates for each virtualhost managed?
Currently certbot works with only one ...
0
votes
1answer
388 views
Certbot LetsEncrypt Sending Scary Email, Not Sure If Auto-Renewal Is Working
I am running a linux server for a nodejs express app at katefromhrbot.com, and I used the certbot guide for Nginx and Ubuntu 18.04 LTS to give it the secure https domain support. It is working now, ...
1
vote
1answer
208 views
Certbot LetsEncrypt SSL certificate - use multiple configurators for one SSL certificate
I want to create one SSL certificate for three domains that should be handled by the same nginx webserver.
example.com
cdn.example.com
example.external.com
The first is our main domain name, the ...
0
votes
1answer
1k views
How to stop ports.conf getting modified by certbot
How can I get certbot to stop modifying /etc/apache2/ports.conf, but still autorenew?
I have a ports.conf that looks like this
NameVirtualHost 127.0.0.1:8080
Listen 127.0.0.1:8080
<IfModule ...
0
votes
0answers
69 views
Ubuntu Server / Apache not listening to port 443
I'm having trouble reaching my site through https after executing the certbot script. That process finished without issues, the message was:
Congratulations, you have succesfully enabled https://...
0
votes
0answers
86 views
Certbot SSL on a local server through Nginx reverse proxy
Can't seem to find an answer to this anywhere so here I am.
I have a web server hosting sites and some reverse proxies to other VMs on my lan. One of these VMs is an email server running postfix/...
0
votes
1answer
191 views
How can I add a subdomain to my Certbot (letsencrypt) SSL?
/etc/letsencrypt/live/happydogg.com# ls
README cert.pem chain.pem fullchain.pem privkey.pem
I currently have my certificates in this folder. My Node.js server actually reads the files from this ...
0
votes
2answers
465 views
Certbot Renew Error on python-urllib3 not installing properly
When i try to renew my certificates i get following errors Any idea on this ?
[root@ centos]# certbot renew --dry-run
Traceback (most recent call last):
File "/bin/certbot", line 9, in <module&...
0
votes
3answers
577 views
certbot - What is the correct way to wait for TXT Record updated?
I want to use certbot to create a wildcard certification, and after I run certbot ... it gives me a hash, tells me to wait until I put it on the TXT Record of my domain.
But I don't have direct ...
0
votes
0answers
59 views
Nginx looks for letsencrypt files, but no config in sites-available has this configuration
I am trying to set up a reverse proxy for grafana.
In the process of doing so, I wrote multiple nginx configuration files (the one in /etc/nginx/sites-available/grafana.mysite.com)
One of these files ...
1
vote
1answer
49 views
give systemd service access to certificates in protected folder
I use certbot to generate certificate files. The certificate files are created in /etc/letsencrypt/live/.... The live folder is created by certbot and is only accessible to admins.
In the past, I ...
