Questions tagged [certbot]
The certbot tag has no usage guidance.
328
questions
0
votes
0
answers
35
views
Keycloak is automatically changing certificate
I'm using Keycloak Quay 22.0.3 with docker-compose behind a Nginx reverse proxy but I have some troubles due an automatic replace of my certificate generated with certbot.
My certificate generated ...
- 101
0
votes
0
answers
59
views
ValueError: Invalid version. The only valid version for X509Req is 0
I'm trying to renew the SSL but I got this error:
SSL Error 1
SSL Error 2
I already tried sudo pip3 install pyOpenSSL and sudo pip3 install cryptography==40.0.1, uninstalled it, and installed it again,...
- 1
1
vote
1
answer
1k
views
Certbot failed to authenticate some domains (authenticator: nginx)
Im running nginx as reverse proxy and for some reason im unable to renew letencrypt certificate, i have tried to upgrade nginx and certbot to latest version. It has worked before and im not sure if ...
- 11
0
votes
1
answer
399
views
Certbot error - DNSSEC: DNSKEY Missing
I moved my domain to Route53 and am now getting problems with Certbot renewal. Certbot has been running great for 4 years, but is now failing to renew.
When running sudo certbot renew --apache i get ...
- 101
-1
votes
2
answers
98
views
underscore in certbot's TXT record
Certbot is a free and open-source utility mainly used for managing SSL/TLS certificates from the Let’s Encrypt certificate authority. When using Certbot to obtain a certificate through the DNS-01 ...
0
votes
1
answer
66
views
Redirect Error website on VPS Ubuntu "www version" redirecting to "apache default page"
Hi I am a web designer and have recently starting maintaining a VPS server
I am using a Lamp VPS server running ubuntu 18 with multiple PHP websites
have edited virtual host and htaccess multiple ...
0
votes
1
answer
64
views
How to generate SSL certificate on windows machine for use with IIS?
I come from Linux background and have previously hosted websites on nginx. I use certbot to create and install SSL certificate.
I'm trying my hands-on Windows IIS, I have deployed a website on IIS. ...
- 177
0
votes
1
answer
106
views
LetsEncrypt/Certbot Domain Verification with Redirect
Is it possible to 301 redirect from abc.com to a different domain xyz.com during cert creation/validation with certbot and complete the domain verification via xyz domain?
This question was asked in ...
- 143
0
votes
2
answers
228
views
Is letsencrypt registration email address stored in certificate
I'm using letsencrypt in two ways: a docker stack using certbot, and another using traefik (which performs certificate management automatically, using lego). In both cases there's a setting for the ...
- 898
2
votes
1
answer
2k
views
Invalid version when updating certificate with certbot
I have a server with a Let's encrypt certificate installed with certbot. I want to renew it with the following command
sudo certbot renew --force-renewal
but I get an error:
Saving debug log to /var/...
- 21
0
votes
1
answer
111
views
Traefik as reverse proxy with certbot / lego
When setting up a server I use a reverse proxy and acme tool for dns01 support (I use either nginx + certbot or nginx + lego). I want to start using traefik instead.
I don't understand how traefik ...
- 898
0
votes
0
answers
43
views
Letsencrypt + HAProxy SSL Offloading
I am using HAProxy for SSL offloading and letsencrypt certificates. Previously, I was using the tls-sni-01-port flag - which is no longer supported.
Does anyone have a recipe that has been working in ...
- 239
0
votes
0
answers
835
views
Auto renew LetsEncrypt cert with nginx under Docker
I'm having troubles setting up a auto renew for LetsEncrypt certificates.
I run nginx under Docker container that serves Django application.
Here is my docker-compose file:
version: '3.8'
services:
...
- 1
1
vote
0
answers
183
views
OOM killer beeing invoked by snapd systemd timer, CPU usage locks at 100% (snapd, mount, certbot)
Im having trouble debugging why my nodeJS webapp gets killed by the OOM killer in Debian 11. Im working on a small VPS (VMware ESX 7.0.3 build-21313628) by IONOS with single core 1GHz cpu, 512MB RAM, ...
0
votes
0
answers
149
views
wget doesn't accept HTTPS certificate (from letsencrypt) on some computers but does on others
I have the following situation:
On my www server (Apache2, Debian armhf) I have HTTPS certificate from letsencrypt.org by certbot.
When accessing the server from a browser (Firefox, Chromium) ...
0
votes
0
answers
84
views
Certbot Google-DNS Failing from AWS EC2
I am trying to retrieve an SSL Cert using Certbot from an Unbuntu 22 instance on AWS and it keeps getting the following error:
Simulating a certificate request for studiojb-demo.com and *.studiojb-...
- 1
0
votes
0
answers
77
views
How to handle declarative Nginx Configuration with Let's Encrypt?
I manage an nginx instance, that does http loadbalancing and TLS-Termination.
So far I generated TLS certificates manually using certbot --nginx and selecting the Host I would like to lease a ...
- 101
2
votes
0
answers
849
views
nginx not reloading certificate after renewal
We have the following setup: multiple linux server with Ubuntu 20.04 and 22.04. Hosted on this servers are website for our customers. We using certbot to generate or renewal certificates. As webserver ...
- 21
1
vote
1
answer
47
views
virtual concatenation of two certificate files
mongod requires a certificateKeyFile that is a combination of a certificate and a private key.
certbot manages quarterly renewals of tls certificates that cannot be valid for more than 3 months. the ...
- 322
0
votes
1
answer
39
views
Connection is not secure, only on mobile Certbot / LetsEncrypt
I have linked a service on my server through this reverse proxy
var httpProxy = require('http-proxy');
var fs = require('fs');
httpProxy.createServer({
...
- 1
0
votes
0
answers
50
views
Linux user access to file that is a soft link
I'm using Certbot to implement LetsEncrypt generated certificates on a Debian 11 server. Certbot was run/setup while logged in as root. This solution creates two files, fullchain.pem & privkey.pem,...
- 155
13
votes
1
answer
4k
views
Why does my Let's Encrypt certificate contain references to Cloudflare?
I own a website that uses a Let's Encrypt certificate. It's not behind Cloudflare, it's hosted at OVH and I'm accepting direct traffic from it.
Now, I set up an apache2 webserver and used certbot to ...
- 143
2
votes
1
answer
1k
views
Automate renewal of let's encrypt ACME-DNS challenge with unbound
I changed from a certificate with multiple explicitly defined subdomains to a wildcard certificate. For this to work, the DNS-01 challenge needs to be solved. I have a very basic unbound DNS server ...
- 63
1
vote
1
answer
275
views
How to completely reset|purge certbot state for a set of domains?
Let's say I have domain.tld and www.domain.tld, and currently there are separate certificates for the main domain and the www subdomain.
I want to migrate to a setup that uses a single certificate ...
0
votes
1
answer
215
views
ErrorDocument not working for any error. Ubuntu Apache
I'm having an issue with getting the ErrorDocument to work. I have tried most of the suggestions on most of the forms and posts. The only thing I know that I have that the others did not is the ...
- 1
0
votes
1
answer
132
views
Why I see all Vhost domain names in SSL certificate, what did I do wrong?
I have a VPS that hosts 2 websites, and I have 2 domains, domain1.com and domain2.com
Server Nginx running on Ubuntu 20.04
I installed certbot and nginx according to their instructions and CA is ...
- 103
0
votes
1
answer
45
views
Migrating API to new server - Should I generate a new SSL certificate and what are the implications for clients?
I am migrating my API to a new server and both old and new server are running on Ubuntu 20.04 and Nginx. My SSL certificate was generated by certbot. Should I generate a new certificate on the new ...
0
votes
1
answer
49
views
Provisioning AMI with certbot certificates that allow the AMI to be reused at a different address
I would like to be able to replicate a site built in an existing, working EC2 Linux 2 AMI image in a manner that does not require re-provisioning of https certificates when spinning up a saved AMI on ...
0
votes
2
answers
2k
views
Certbot challenge using 443 instead of 80?
Is it possible to do the challenge using another port? I read here that you can't replace port 80, but using an "alternative let's encrypt client" you can? (not clear at all)
I have one ...
0
votes
0
answers
305
views
Letsencrypt - Existing domain certificate gets invalid when adding new domain
When I try to add ssl certificate for a -domain.com on the nginx server, It gets installed and works but the other existing old-domain.com show a certificate error
This server could not prove that it ...
- 113
0
votes
2
answers
871
views
APACHE CERTBOT ERROR
I'm configuring https on a local apache server using certbot but I get the error below:
Which names would you like to activate HTTPS for?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...
- 1
1
vote
1
answer
972
views
Configuring SSL with Nginx on Ubuntu Server
I have been following some tutorials online, and I have gotten my flask app up and running. I have added domain names, and they work correctly. However, now im trying to use Certbot to get a SSL ...
- 13
1
vote
0
answers
3k
views
How do I deal with "Some challenges have failed" in certbot?
I am trying to request a TLS certificate using Certbot (source: https://certbot.eff.org/instructions) with sudo certbot --nginx. It is supposed to be for a docker registry used as a pull through cache ...
- 111
3
votes
2
answers
748
views
SSL_ERROR_RX_RECORD_TOO_LONG after installing Certbot on Apache2
I'm trying to set up a web server on a raspberry pi, it's running a debian based system.
I installed and set up apache (following this guide), set up port forwaring on my router and created 3 html ...
- 31
0
votes
0
answers
53
views
Infinite Redirect after Certbot https configuration
Hey so I wanted to add https
I started with a simple nginx config of
worker_processes 1;
events {
worker_connections 1024;
}
http {
server {
listen 80;
server_name www....
0
votes
1
answer
38
views
Which key is used for signed exchange certificate?
I was trying to generate a Signed Exchange Certificate from Google CA followed by this documentation https://cloud.google.com/certificate-manager/docs/public-ca-tutorial
But now facing this error :
&...
google-cloud-platform
0
votes
2
answers
404
views
Install certbot ubuntu 21.10 unmet dependencies
I am trying to install certbot on ubuntu server 21.10 with the following tutorial: https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-ubuntu-20-04.
But when I ...
-1
votes
1
answer
13k
views
Certbot standalone fails with error: Some challenges have failed
The website runs on Web-hosting server beget.com
I am using Ubuntu 20 If that information is useful.
I am trying to get SSL-certificate with certbot by standalone on my domain dmitrysemenyuk.com
As ...
- 101
0
votes
1
answer
1k
views
Let's encrypt certificates fail to verify, throw errors in a Node.js web app
I've recently started getting issues with my Let's Encrypt certificates.
On the web browser I don't get any issues for the certificate, but when I run an Java web app thru NGINX using the certificate ...
- 133
0
votes
1
answer
37
views
Nginx, three identical vhost configs, one works, the other two got too many redirects
I got three websites on my server. My mainpage gamenotify.net works well. My other two are getting to many redirects between www and non-www url. My vhost files are identical to my mainpage. I just ...
1
vote
2
answers
601
views
Is there a command line flag for "Attempt to reinstall this existing certificate" in certbot-nginx?
I have a script which daily runs the command
certbot --nginx -d $DOMAIN
for a number of domains to renew their certificate
You have an existing certificate that has exactly the same domains or ...
- 125
0
votes
0
answers
268
views
Unable to configure ssl on mariadb using certbot generated certificates and private key
I'm using certbot to generate a certificate for mariadb server and client ,but it's not working.
sudo certbot certonly -d mariadbserver -d mariadbuser
This is the command that i've used to generate ...
- 1
0
votes
0
answers
130
views
Why the letsencrypt certficate validity ended before the expiry date
I configured the letsencrypt certificate for my website which is hosted on centos 7 with httpd web server
On 12-07-22 I renewed the SSL certificate manually by using /usr/bin/certbot renew. Then ...
0
votes
1
answer
340
views
How can I run TLS on Apache2 Proxy behind port forwarding
I have a problem with apache2 proxy in TLS using port forwarding. I manage to make it work correctly in HTTP, but as soon as I try to make it work in HTTPS, Apache shows the message
Service ...
- 3
0
votes
1
answer
684
views
after applying ssl certificate, static files aren't served anymore
My config file is located in /etc/nginx/sites-enabled is called songreccs.conf and looks like this:
server {
server_name www.songreccs.com songreccs.com;
location /static {
...
- 3
7
votes
1
answer
1k
views
Explain Certbot's HTTPS redirect configuration
Can someone explain why Certbot is using the following redirect configuration
server {
if ($host = example.com) {
return 301 https://$host$request_uri;
} # managed by Certbot
...
- 6,940
0
votes
1
answer
674
views
I get an Error "Load cannot follow more than 20 redirects" after installing ssl certificate
this is my config file:
server {
server_name songreccs.com;
location /static {
root /home/user/sonreccs/flaskrec/;
}
location / {
...
- 3
0
votes
1
answer
547
views
How to create auto redirect to 301 https + proxy_pass in NGINX for one location /
This is my nginx config:
server {
listen 80;
server_name example.com;
server_tokens off;
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
location / {
proxy_pass ...
0
votes
1
answer
217
views
nginx with Certbot blocking local traffic to website from local IP?
I have setup nginx with Certbot on my home server running Debian to host a small website. I have a static external IP address and custom domain that points to the latter.
Everything runs fine so far, ...
- 59
0
votes
2
answers
151
views
Why does wildcard dns entry resolve to a singular hostname?
I'm trying to update my letsencrypt wildcard certificate with certbot, but I noticed it behaved strangly when I ran the command. It said it'd add a subdomain name and remove the wildcard as follows:
...
- 65