Questions tagged [certbot]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
35 views

Keycloak is automatically changing certificate

I'm using Keycloak Quay 22.0.3 with docker-compose behind a Nginx reverse proxy but I have some troubles due an automatic replace of my certificate generated with certbot. My certificate generated ...
Alessio Raddi's user avatar
0 votes
0 answers
59 views

ValueError: Invalid version. The only valid version for X509Req is 0

I'm trying to renew the SSL but I got this error: SSL Error 1 SSL Error 2 I already tried sudo pip3 install pyOpenSSL and sudo pip3 install cryptography==40.0.1, uninstalled it, and installed it again,...
Jeff's user avatar
  • 1
1 vote
1 answer
1k views

Certbot failed to authenticate some domains (authenticator: nginx)

Im running nginx as reverse proxy and for some reason im unable to renew letencrypt certificate, i have tried to upgrade nginx and certbot to latest version. It has worked before and im not sure if ...
Pim's user avatar
  • 11
0 votes
1 answer
399 views

Certbot error - DNSSEC: DNSKEY Missing

I moved my domain to Route53 and am now getting problems with Certbot renewal. Certbot has been running great for 4 years, but is now failing to renew. When running sudo certbot renew --apache i get ...
Malako's user avatar
  • 101
-1 votes
2 answers
98 views

underscore in certbot's TXT record

Certbot is a free and open-source utility mainly used for managing SSL/TLS certificates from the Let’s Encrypt certificate authority. When using Certbot to obtain a certificate through the DNS-01 ...
Amin Bou Hamdan's user avatar
0 votes
1 answer
66 views

Redirect Error website on VPS Ubuntu "www version" redirecting to "apache default page"

Hi I am a web designer and have recently starting maintaining a VPS server I am using a Lamp VPS server running ubuntu 18 with multiple PHP websites have edited virtual host and htaccess multiple ...
SACHIN HD's user avatar
0 votes
1 answer
64 views

How to generate SSL certificate on windows machine for use with IIS?

I come from Linux background and have previously hosted websites on nginx. I use certbot to create and install SSL certificate. I'm trying my hands-on Windows IIS, I have deployed a website on IIS. ...
variable's user avatar
  • 177
0 votes
1 answer
106 views

LetsEncrypt/Certbot Domain Verification with Redirect

Is it possible to 301 redirect from abc.com to a different domain xyz.com during cert creation/validation with certbot and complete the domain verification via xyz domain? This question was asked in ...
archygriswald's user avatar
0 votes
2 answers
228 views

Is letsencrypt registration email address stored in certificate

I'm using letsencrypt in two ways: a docker stack using certbot, and another using traefik (which performs certificate management automatically, using lego). In both cases there's a setting for the ...
lonix's user avatar
  • 898
2 votes
1 answer
2k views

Invalid version when updating certificate with certbot

I have a server with a Let's encrypt certificate installed with certbot. I want to renew it with the following command sudo certbot renew --force-renewal but I get an error: Saving debug log to /var/...
Grigorii's user avatar
0 votes
1 answer
111 views

Traefik as reverse proxy with certbot / lego

When setting up a server I use a reverse proxy and acme tool for dns01 support (I use either nginx + certbot or nginx + lego). I want to start using traefik instead. I don't understand how traefik ...
lonix's user avatar
  • 898
0 votes
0 answers
43 views

Letsencrypt + HAProxy SSL Offloading

I am using HAProxy for SSL offloading and letsencrypt certificates. Previously, I was using the tls-sni-01-port flag - which is no longer supported. Does anyone have a recipe that has been working in ...
Aaron A's user avatar
  • 239
0 votes
0 answers
835 views

Auto renew LetsEncrypt cert with nginx under Docker

I'm having troubles setting up a auto renew for LetsEncrypt certificates. I run nginx under Docker container that serves Django application. Here is my docker-compose file: version: '3.8' services: ...
popcorn's user avatar
1 vote
0 answers
183 views

OOM killer beeing invoked by snapd systemd timer, CPU usage locks at 100% (snapd, mount, certbot)

Im having trouble debugging why my nodeJS webapp gets killed by the OOM killer in Debian 11. Im working on a small VPS (VMware ESX 7.0.3 build-21313628) by IONOS with single core 1GHz cpu, 512MB RAM, ...
nr1chiefrocka's user avatar
0 votes
0 answers
149 views

wget doesn't accept HTTPS certificate (from letsencrypt) on some computers but does on others

I have the following situation: On my www server (Apache2, Debian armhf) I have HTTPS certificate from letsencrypt.org by certbot. When accessing the server from a browser (Firefox, Chromium) ...
bicyclesonthemoon's user avatar
0 votes
0 answers
84 views

Certbot Google-DNS Failing from AWS EC2

I am trying to retrieve an SSL Cert using Certbot from an Unbuntu 22 instance on AWS and it keeps getting the following error: Simulating a certificate request for studiojb-demo.com and *.studiojb-...
GESmith's user avatar
0 votes
0 answers
77 views

How to handle declarative Nginx Configuration with Let's Encrypt?

I manage an nginx instance, that does http loadbalancing and TLS-Termination. So far I generated TLS certificates manually using certbot --nginx and selecting the Host I would like to lease a ...
sekthor's user avatar
  • 101
2 votes
0 answers
849 views

nginx not reloading certificate after renewal

We have the following setup: multiple linux server with Ubuntu 20.04 and 22.04. Hosted on this servers are website for our customers. We using certbot to generate or renewal certificates. As webserver ...
premar's user avatar
  • 21
1 vote
1 answer
47 views

virtual concatenation of two certificate files

mongod requires a certificateKeyFile that is a combination of a certificate and a private key. certbot manages quarterly renewals of tls certificates that cannot be valid for more than 3 months. the ...
grenade's user avatar
  • 322
0 votes
1 answer
39 views

Connection is not secure, only on mobile Certbot / LetsEncrypt

I have linked a service on my server through this reverse proxy var httpProxy = require('http-proxy'); var fs = require('fs'); httpProxy.createServer({ ...
N00b's user avatar
  • 1
0 votes
0 answers
50 views

Linux user access to file that is a soft link

I'm using Certbot to implement LetsEncrypt generated certificates on a Debian 11 server. Certbot was run/setup while logged in as root. This solution creates two files, fullchain.pem & privkey.pem,...
MindSpiker's user avatar
13 votes
1 answer
4k views

Why does my Let's Encrypt certificate contain references to Cloudflare?

I own a website that uses a Let's Encrypt certificate. It's not behind Cloudflare, it's hosted at OVH and I'm accepting direct traffic from it. Now, I set up an apache2 webserver and used certbot to ...
lolc's user avatar
  • 143
2 votes
1 answer
1k views

Automate renewal of let's encrypt ACME-DNS challenge with unbound

I changed from a certificate with multiple explicitly defined subdomains to a wildcard certificate. For this to work, the DNS-01 challenge needs to be solved. I have a very basic unbound DNS server ...
Amon Bune's user avatar
1 vote
1 answer
275 views

How to completely reset|purge certbot state for a set of domains?

Let's say I have domain.tld and www.domain.tld, and currently there are separate certificates for the main domain and the www subdomain. I want to migrate to a setup that uses a single certificate ...
Szczepan Hołyszewski's user avatar
0 votes
1 answer
215 views

ErrorDocument not working for any error. Ubuntu Apache

I'm having an issue with getting the ErrorDocument to work. I have tried most of the suggestions on most of the forms and posts. The only thing I know that I have that the others did not is the ...
La Phyzz's user avatar
0 votes
1 answer
132 views

Why I see all Vhost domain names in SSL certificate, what did I do wrong?

I have a VPS that hosts 2 websites, and I have 2 domains, domain1.com and domain2.com Server Nginx running on Ubuntu 20.04 I installed certbot and nginx according to their instructions and CA is ...
user174174's user avatar
0 votes
1 answer
45 views

Migrating API to new server - Should I generate a new SSL certificate and what are the implications for clients?

I am migrating my API to a new server and both old and new server are running on Ubuntu 20.04 and Nginx. My SSL certificate was generated by certbot. Should I generate a new certificate on the new ...
Sujith S Manjavana's user avatar
0 votes
1 answer
49 views

Provisioning AMI with certbot certificates that allow the AMI to be reused at a different address

I would like to be able to replicate a site built in an existing, working EC2 Linux 2 AMI image in a manner that does not require re-provisioning of https certificates when spinning up a saved AMI on ...
Ron Abramson's user avatar
0 votes
2 answers
2k views

Certbot challenge using 443 instead of 80?

Is it possible to do the challenge using another port? I read here that you can't replace port 80, but using an "alternative let's encrypt client" you can? (not clear at all) I have one ...
Guilherme Richter's user avatar
0 votes
0 answers
305 views

Letsencrypt - Existing domain certificate gets invalid when adding new domain

When I try to add ssl certificate for a -domain.com on the nginx server, It gets installed and works but the other existing old-domain.com show a certificate error This server could not prove that it ...
TheMonkeyKing's user avatar
0 votes
2 answers
871 views

APACHE CERTBOT ERROR

I'm configuring https on a local apache server using certbot but I get the error below: Which names would you like to activate HTTPS for? - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...
Sam's user avatar
  • 1
1 vote
1 answer
972 views

Configuring SSL with Nginx on Ubuntu Server

I have been following some tutorials online, and I have gotten my flask app up and running. I have added domain names, and they work correctly. However, now im trying to use Certbot to get a SSL ...
benji's user avatar
  • 13
1 vote
0 answers
3k views

How do I deal with "Some challenges have failed" in certbot?

I am trying to request a TLS certificate using Certbot (source: https://certbot.eff.org/instructions) with sudo certbot --nginx. It is supposed to be for a docker registry used as a pull through cache ...
naraghi's user avatar
  • 111
3 votes
2 answers
748 views

SSL_ERROR_RX_RECORD_TOO_LONG after installing Certbot on Apache2

I'm trying to set up a web server on a raspberry pi, it's running a debian based system. I installed and set up apache (following this guide), set up port forwaring on my router and created 3 html ...
Simone's user avatar
  • 31
0 votes
0 answers
53 views

Infinite Redirect after Certbot https configuration

Hey so I wanted to add https I started with a simple nginx config of worker_processes 1; events { worker_connections 1024; } http { server { listen 80; server_name www....
Stephen Okita's user avatar
0 votes
1 answer
38 views

Which key is used for signed exchange certificate?

I was trying to generate a Signed Exchange Certificate from Google CA followed by this documentation https://cloud.google.com/certificate-manager/docs/public-ca-tutorial But now facing this error : &...
MD. Zeaul Hoque Shuvo's user avatar
0 votes
2 answers
404 views

Install certbot ubuntu 21.10 unmet dependencies

I am trying to install certbot on ubuntu server 21.10 with the following tutorial: https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-ubuntu-20-04. But when I ...
Davidoffo's user avatar
-1 votes
1 answer
13k views

Certbot standalone fails with error: Some challenges have failed

The website runs on Web-hosting server beget.com I am using Ubuntu 20 If that information is useful. I am trying to get SSL-certificate with certbot by standalone on my domain dmitrysemenyuk.com As ...
rockzxm's user avatar
  • 101
0 votes
1 answer
1k views

Let's encrypt certificates fail to verify, throw errors in a Node.js web app

I've recently started getting issues with my Let's Encrypt certificates. On the web browser I don't get any issues for the certificate, but when I run an Java web app thru NGINX using the certificate ...
Munchkin's user avatar
  • 133
0 votes
1 answer
37 views

Nginx, three identical vhost configs, one works, the other two got too many redirects

I got three websites on my server. My mainpage gamenotify.net works well. My other two are getting to many redirects between www and non-www url. My vhost files are identical to my mainpage. I just ...
Waffelparty's user avatar
1 vote
2 answers
601 views

Is there a command line flag for "Attempt to reinstall this existing certificate" in certbot-nginx?

I have a script which daily runs the command certbot --nginx -d $DOMAIN for a number of domains to renew their certificate You have an existing certificate that has exactly the same domains or ...
user25282's user avatar
  • 125
0 votes
0 answers
268 views

Unable to configure ssl on mariadb using certbot generated certificates and private key

I'm using certbot to generate a certificate for mariadb server and client ,but it's not working. sudo certbot certonly -d mariadbserver -d mariadbuser This is the command that i've used to generate ...
Vijay's user avatar
  • 1
0 votes
0 answers
130 views

Why the letsencrypt certficate validity ended before the expiry date

I configured the letsencrypt certificate for my website which is hosted on centos 7 with httpd web server On 12-07-22 I renewed the SSL certificate manually by using /usr/bin/certbot renew. Then ...
jayaprakash R's user avatar
0 votes
1 answer
340 views

How can I run TLS on Apache2 Proxy behind port forwarding

I have a problem with apache2 proxy in TLS using port forwarding. I manage to make it work correctly in HTTP, but as soon as I try to make it work in HTTPS, Apache shows the message Service ...
H.LK's user avatar
  • 3
0 votes
1 answer
684 views

after applying ssl certificate, static files aren't served anymore

My config file is located in /etc/nginx/sites-enabled is called songreccs.conf and looks like this: server { server_name www.songreccs.com songreccs.com; location /static { ...
maltek's user avatar
  • 3
7 votes
1 answer
1k views

Explain Certbot's HTTPS redirect configuration

Can someone explain why Certbot is using the following redirect configuration server { if ($host = example.com) { return 301 https://$host$request_uri; } # managed by Certbot ...
Daniel's user avatar
  • 6,940
0 votes
1 answer
674 views

I get an Error "Load cannot follow more than 20 redirects" after installing ssl certificate

this is my config file: server { server_name songreccs.com; location /static { root /home/user/sonreccs/flaskrec/; } location / { ...
maltek's user avatar
  • 3
0 votes
1 answer
547 views

How to create auto redirect to 301 https + proxy_pass in NGINX for one location /

This is my nginx config: server { listen 80; server_name example.com; server_tokens off; location /.well-known/acme-challenge/ { root /var/www/certbot; } location / { proxy_pass ...
Aliaksandr Vysotskiy's user avatar
0 votes
1 answer
217 views

nginx with Certbot blocking local traffic to website from local IP?

I have setup nginx with Certbot on my home server running Debian to host a small website. I have a static external IP address and custom domain that points to the latter. Everything runs fine so far, ...
St4rb0y's user avatar
  • 59
0 votes
2 answers
151 views

Why does wildcard dns entry resolve to a singular hostname?

I'm trying to update my letsencrypt wildcard certificate with certbot, but I noticed it behaved strangly when I ran the command. It said it'd add a subdomain name and remove the wildcard as follows: ...
nyoatype's user avatar

1
2 3 4 5
7