Questions tagged [certbot]
The certbot tag has no usage guidance.
1
vote
1answer
57 views
LetsEncrypt certificate for parked domains
Hopefully you can shed some light on what might be going on here:
I have migrated website cutit.sk from external VPS on my private server. I also have several domains, which are meant to redirect ...
2
votes
1answer
37 views
Let's encrypt: renew vs new, or: why renew
Might be a stupid question but: where is the difference between renewing a Let's encrypt certificate and just getting a new one?
Related question and background for this question: do I need to keep ...
0
votes
0answers
32 views
Ubuntu Certbot SSL not working 18.04
I am trying to integrate SSL with my Laravel site http://enablerochester.com. I tried following the tutorial for setting up certbot on Ubuntu 18.04 here: https://www.digitalocean.com/community/...
0
votes
1answer
51 views
SSL Certbot in a domain with 301 redirect and nginx [closed]
I have one server at home working with a dynamic domain (mydomain.ddns.net) through my OpenWRT router. Now I want to host a web and I have bought a domain (www.mynewdomain.com) in GoDaddy and I have ...
0
votes
1answer
28 views
Https not working
I have a site running on Apache. My site is working properly for http requests, but not for https.
This site is behind ProjectShield and I followed this tutorial in order to activate my own SSL ...
1
vote
1answer
38 views
Forbidden after enabling SSL
I recently used LetsEncrypt's Certbot to enable SSL on my server. It's running Apache 2.4.18 with Django 1.11 on Ubuntu 16.04. As explained here, I duplicated my :80 VirtualHost definition for 443 in ...
1
vote
2answers
89 views
Is it necessary to buy a domain in order to run the Let's Encrypt DNS Challenge on the intranet?
This question(s) might sound naive to many of you, but I'm more of a developer than a sysadmin, so it'd be extremely useful to have some advice before digging in.
Let's say I own the foobar.com ...
0
votes
1answer
31 views
Can't turn SSL on a docker's nginx container
I'm new to docker and try to build an image based on Alpine to take care of my websites with HTTPS connexions.
Currently i'm at the step to make it work from the container so i'm not finished yet with ...
1
vote
2answers
37 views
let's encrypt AWS redhat
I'm setup a server for testing in AWS EC2 and I can't secure the default domain.
I'm following this tutorial https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/SSL-on-an-instance.html
I've install:
...
0
votes
0answers
18 views
Would it be feasible to detect domains and install Letsencrypt certificates via bash script?
I would like to create a scheduled shell script to do the following on a Centos server:
Read the Apache virtual hosts file
For every domain detected, check if there is a valid ssl cert in place
For ...
0
votes
1answer
31 views
unexpected end of file
I am trying to get revese proxy working. I followed below
https://github.com/nthnnl/odoo-nginx-reverse-proxy
I am getting ginx: [emerg] unexpected end of file, expecting ";" or "}" in /etc/nginx/...
0
votes
0answers
46 views
Connection Closed after switching IPs with new SSL Certificate
I recently installed a couple SSL certificates on a few domains, and generally they work, but whenever I switch IP addresses I get an ERR_CONNECTION_CLOSED error. If I refresh a few times, it will ...
0
votes
1answer
20 views
Deleting Cerbot-issued certificate
I have a production server. I created an exact copy of that server for development.
example.com (Production Server)
dev.example.com (Development Server)
Because it is an exact replica, it also ...
0
votes
1answer
31 views
Nginx load balancer and forcing HTTPS
I have an Nginx server being used as a load balancer. I have just installed an SSL certificate with Let's Encrypt and I am now looking into forcing HTTPs. The following is my config:
upstream backend ...
0
votes
1answer
159 views
Nginx as Reverse Proxy and LetsEncrypt
Although there's aplethora of articles on the web about this, I'm still having issues getting this to work.
I've set up nginx on ubunto 18.04 - everythings is patched to date.
I installed Certbot (...
2
votes
0answers
54 views
LetsEncrypt unable to authorize
I have setup my server on digital ocean, and followed along with
https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-16-04
When I tried to run the ...
1
vote
2answers
89 views
Your connection is not secure Certbot / LetsEncrypt [duplicate]
I have enabled SSL for my https://example.com and that works fine, but if somone try's to enter https://www.example.com I get the message: Your connection is not secure.
Is there a way to redirect ...
0
votes
0answers
40 views
ssl taking too much time on nginx server
I have a website in nginx, php-fpm, and use lets encrypt centbot for the ssl
Here is a check that checks response time for my website:
SEE THE SCREENSHOT
here is the full config of virtualhost for ...
0
votes
1answer
50 views
How to query DNS for special **NAMED** TXT records
I am using certbot to generate a ssl certificate for a third party web app. Because I cannot get into the source code or folder structure, I am using DNS validation. To further complicate things, my ...
4
votes
0answers
86 views
How to make Certbot ignore a particular domain in nginx?
I have ~30 domains running on my server, all of them with SSL certificates managed by the Certbot nginx plugin. All of them, except one... let's call it selfsigned.example.com.
This domain uses a ...
2
votes
1answer
146 views
Let's Encrypt wildcard certificates and Apache 2 not working
I am trying to set up a wildcard certificate using Let's Encrypt on an Ubuntu 18.04 server running apache2, for domain abc.def.com (not the real domain name) and all subdomains (*.abc.def.com)
I have ...
1
vote
1answer
76 views
Where does Certbot serve up HTTP-01 challenges from?
I am diagnosing a weird problem with some of my Ubuntu 14 LTS / Apache 2.4 machines with Certbot renewals. Yes, I know Ubuntu 14 LTS is EOL soon; these are some of the straggler machines on the ...
0
votes
1answer
48 views
How to free SSL certificates on Debian 6 squeeze with Apache
I'm looking for a way to use free SSL certificates in Apache running in Debian 6 squeeze.
I tried to use Lets-Encrypt
running
./certbot-auto --apache certonly --no-bootstrap
throws error
WARNING:...
0
votes
2answers
234 views
Nginx Sorry, the page you are looking for is currently unavailable. Please try again later
I have a nginx server (1.10) and I am trying to access a certain location block for letsecnrypt but having no luck. I have modsecurity and pagespeed both included in my compiled nginx.
OS is Ubuntu ...
0
votes
0answers
60 views
Certbot renew running but not renewing
I've installed certbot on an Ubuntu 16.04 host using the PPA.
I can see that the certbot timer is configured to run and that it's running:
jaraco@punisher:~$ sudo systemctl status certbot
● certbot....
0
votes
1answer
79 views
NGINX Calling page will download strange file + Certbot can't install certificate
Problem: Certbot returns a urn:ietf:params:acme:error:connection-error when trying to install a certificate for subdomain rainloop.example.com.
EDIT: As to be seen in the "EDIT" segment below there'...
0
votes
1answer
139 views
How to update email address to receive expiry notification from letsencrypt?
I am trying to update the old email address which was being used to recieve expiry notification from the amazing Letsencrypt. However, I did not find a way to do it amazingly :O.
What I did try ...
0
votes
1answer
297 views
Nginx redirect certbot www to non-www [duplicate]
I am trying to redirect HTTPS www request to non-www but I can't get it to work. What line of code would I have to change to achieve the redirection?
server {
root /var/www/mydomain.com/html;
...
0
votes
1answer
100 views
SSL Certificate, Redirect, No-www done right (apache)?
MY GOAL
I would like to make a website accessible only via SSL (encrypted) and with many domains redirecting to only one master domain (no duplicate content) and all www variants should be no-www.
...
0
votes
1answer
188 views
Generate LetsEncrypt SSL certificate for internal use using Certbot
I want to generate an SSL certificate using Certbot for a subdomain which points to a Docker Registry server which is not accessible from outside.
Since I cannot use LetsEncrypt DNS challenge the ...
0
votes
2answers
201 views
duplicates after configuring multiple domains and subdomains + using certbot - seeking best practice
After configuring multiple domains and some subdomains to operate under nginx I've managed to get multiple server blocks to work ok. Still left with the messy results as below.
This after setting up ...
0
votes
1answer
212 views
NGINX SSL “ERR_TOO_MANY_REDIRECTS”
I have website build with django and nginx. After adding Let's Encrypt SSL certificat using Certbot I get the error : ERR_TOO_MANY_REDIRECTS.
Please find the below nginx configuration :
server {
...
0
votes
1answer
347 views
nginx “ERR_TOO_MANY_REDIRECTS” after add ssl
After i add Let's Encrypt certificate to my website with CertBot
i get ERR_TOO_MANY_REDIRECTS when i try to visit the domain of my website.
some info :
-mywebsite build with django, nginx and ...
2
votes
1answer
107 views
Why are my TXT DNS records for certbot-auto not taken into account?
I tried to add a txt value to my DNS records to use certbot (certbot-auto as explained here ).
Here are my DNS records in text mode (with example numbers):
@ 10800 IN SOA ex1.example.net. ...
0
votes
0answers
119 views
apache2.4 RewriteBase keeps redirecting to login page
Apache2.4 universal redirection to login page( is the default setting in nextcloud image that im using), this is preventing letsencrypt/certbot from accessing the path /var/www/html/data/.well-known/...
0
votes
1answer
892 views
Why does Certbot fail to run post hook scripts?
This is my first attempt at renewing Let's Encrypt certificates via Certbot. After carefully reading the Certbot user guide I created two post hook scripts like this:
root@pelargir:~# ls -l /etc/...
0
votes
1answer
43 views
Install Let's Encript in a custom docker container
I'm trying to get https enabled on a web server (apache) already running in a custom docker instance for a specific web app. The container seems to be running Alpine Linux. Before a few weeks ago, I ...
0
votes
2answers
515 views
Nginx certbot cronjob not working
I have installed certbot with the nginx module. Today I noticed that the cron that is installed automatically did not work. The cronjob in question is
/etc/cron.d/certbot
and the content was
0 */12 ...
0
votes
1answer
58 views
Certbot misbehaves by creating a certificate for a domain with “www”
This time when I used certbot it created a certificate for "www.$website" instead of $website. This is not what I need.
Here it is:
$ website="my_website123.com"
$ sudo certbot certonly --...
2
votes
1answer
488 views
What exactly does Let's Encrypt certbot's `enhance` command?
Let's Encrypt certbot have subcommand enhance that has a description "Add security enhancements to your existing configuration".
The only additional information that I can find in certbot's CLI help ...
1
vote
0answers
21 views
certbot creates a certificate with “wwww” instead of a bare domain one - unlike before [duplicate]
I've been creating certificates this way for over a year:
export website="my_domain1111.com"
sudo certbot certonly --standalone -d $website -d www.$website --email hello@$website
and it's always ...
0
votes
0answers
289 views
Letsencrypt expired certificate renewal failure (NGinx)
I'm hosting a website on AWS. I created SSL certificates through letsencrypt for my domain xxxxx.com as well as www.xxxxx.com. (Throughout this post I'm putting 'xxxx's for potentially sensitive ...
1
vote
2answers
2k views
Export client certificate from Let's Encrypt certificates
I'm running Debian and have certbot for creating Let's Encrypt certificate.
I act as client towards a TLS server, and needs to handover my client certificate for approval.
I've got the following ...
0
votes
0answers
112 views
How can I fix a 301 redirect loop using nginx on Amazon Lightsail after running Certbot?
I just deployed a Laravel app to a Lightsail server, and it was working fine until I ran certbot to enable SSL then I got a redirect loop.
here is my site's nginx config.
server {
listen 443 ssl ...
1
vote
1answer
380 views
ngnix: .well-known acme-challenge security warning
First, I am not sure if this is right place to put my question. But it relate to ngnix configuration done by certbot on my server. It add following line for domain in configuration
location ~ "^/....
0
votes
1answer
386 views
Certbot and letsencrypt: after renewing my certificate has 2 weeks more of validity instead of 3 months
My letsencrypt certificate will expire soon. I ran "certbot" to renew it for the next 3 months:
$ sudo certbot certonly --standalone -d $website --email admin@$website
Saving debug log to /var/...
0
votes
0answers
26 views
Docker generating SSL certs error
I'm trying to generate certificates with the letsencrypt image and save them to a named volume but I'm having issues. It's only generating the certificate for the top level domain, not any subdomains....
1
vote
2answers
1k views
TLS v1.3 not active despite being enabled in NGINX config (certbot --nginx)
I recently set up a site with certbot --nginx -d <domain>. In /etc/letsencrypt/options-ssl-nginx.conf, I added TLSv1.3 to the ssl_protocols directive. However, when I visit the site (Chrome 68), ...
0
votes
0answers
24 views
How to Download and Share Certbot generated SSL?
I am using certbot generated SSL certificate on my server successfully. We have to integrate a third party service which sends callback to our server and they asked us for our SSL certificate they ...
0
votes
1answer
132 views
How can I bootstrap certbot on a hard-redirecting https domain?
I have a working Nginx config that:
Performs a hard-redirect (301) from http to https
Additionally, ignores subpaths on http (http://www.example.com/ANY/THING redirects to plain https://example.com)
...
