Questions tagged [certbot]
The certbot tag has no usage guidance.
345
questions
0
votes
1
answer
81
views
Why does my domain redirect to https://255.255.255.255?
I'm new in this area (ubuntu, server, cloud, networking), so I might be doing some obvious mistakes.
I have installed NextCloud using Snap Package and it seems to run well on http, accessible at a ...
- 3
0
votes
0
answers
76
views
MongoDB issue with TLS
I am trying to set up TLS certificates for my standalone MongoDB instance on a cloud compute instance.
I got the certificates from certbot using the command sudo certbot certonly --standalone -d.
i ...
- 127
0
votes
1
answer
34
views
SSL certificate for second level subdomain and wildcard subdomain
I have the following problem: I want to secure my structure with SSL, but certbot tells me the domains I am adding to the cert are redundant.
I want to add the following (sub)domains to the cert:
a....
0
votes
1
answer
122
views
Load Balance two servers with a Flask app with CertBot certificate and a Domain Name
I have two servers, let's call them ServerA and ServerB.
I bought a domain on NameCheap let's call it example.com
Each server has docker containers (Flask Web Apps) running on it on different ports.
...
- 127
2
votes
1
answer
102
views
systemctl reload nginx very slow and this is causing problems with certbot renewal
I've been running an nginx webserver with approximately 60 websites, and I've noticed that running the following commands is very slow:
systemctl reload nginx takes around 20 seconds.
systemctl ...
0
votes
1
answer
184
views
Nginx Wildcards and Subdomains with Certbot
I want to achieve a scenario where I have 2 nodejs application running on localhost:3000 (dev) and localhost:5000 (staging). I also created 3 certificates and copied below.
With the config file I've ...
- 101
1
vote
1
answer
119
views
Invalid response from .well-known/acme-challenge/<token> : 404 + nginx
I have seen these questions (^,^,^,^), but unfortunately none of them could solve my problem.
I'm trying to use certbot to obtain an SSL certificate for one of my subdomains. However, the challenges ...
- 338
0
votes
0
answers
133
views
MariaDB Crashes on Startup with Let's Encrypt Certificates
It seems I'm encountering an issue while setting up secure connections for my clients to connect to my database server on Debian 12. Every time I attempt to start MariaDB, it crashes with a Private ...
1
vote
0
answers
29
views
Certbot SAN not working on migration to Google Cloud from AWS
I'm migrating an ubuntu/Wordpress/Apache2 server (22.04LTS) from AWS to Google Cloud. We host multiple domains from this server and use Certbot to manage certificates. On the AWS instance, I'd just ...
google-cloud-platform
0
votes
2
answers
74
views
Quasar (VueJs), nodeJs, Nginx certbox Too many requests
I have following nginx conf for my quasar(VueJs app) and nodejs (as API) app
As you can see my nodejs app is in /api location, the rest of config is for my Quasar (vuejs) app...
The problem I have is ...
- 127
0
votes
1
answer
509
views
How to get both ECC & RSA certificates from Let's Encrypt for Postfix?
Let's Encrypt has started issuing ECC certificates by default since Certbot 2.0. This is not a problem for modern web browsers, but Let's Encrypt certificates can be used for other purposes than HTTPS,...
- 49.8k
0
votes
0
answers
91
views
Unable to create SSL for Ubuntu VPS NextJS application
I am trying to get an SSL for my websites hosted on Ubuntu VPS. I am receiving the following error upon running sudo certbot --nginx -v
Certbot failed to authenticate some domains (authenticator: ...
0
votes
0
answers
39
views
Certbot enables root domain, instead only subdomains
I own a domain, lets say example.com.
I want a root domain example.com to be 404 or return a blank page (if 404 is not possible).
sub1.example.com - should redirect a traffic to a running docker ...
- 121
0
votes
0
answers
26
views
Virtual host configuration not working
I'm trying to move for the first time a website to a dedicated server running on debian.
I created a file called mywebsite.com.conf in /etc/apache2/sites-available
Here's the file :
<IfModule ...
-1
votes
3
answers
184
views
Seeking guidance on setting up a proxy server with DNS for specific sites
I setting up a proxy server for specific sites using a DNS server, and I am seeking guidance on handling HTTPS traffic. Here's a brief overview of my setup and the challenges I'm facing:
Objective:
...
2
votes
1
answer
525
views
Certbot stopped generating certificates
tl;dr : Certbot stopped generating certificates, shows a "Redirect loop detected" error, but there is no actual redirect loop.
The following issue appeared around 2023-11-30. I've focused on ...
- 371
0
votes
0
answers
177
views
Certbot cannot obtain certificate when firewall is on
I have a script that creates a new nginx configuration for some domain and within this script, I am requesting new certificate via certbot. I am running newest debian server with ufw enabled (...
- 111
0
votes
1
answer
199
views
Ubuntu 23.10 certbot: Unable to obtain certificate from root ISRG Root X2
Due to internal security policies I need an P384r1-only certificate chain. I use certbot 2.1.0 on Ubuntu 23.10. From my understanding
certbot certonly -v \\
-a apache -i None \\
--cert-name <...
- 231
0
votes
0
answers
85
views
Cerbot for both NGINX and Redis
I'm running ubuntu with both NGINX (443) and Redis (6379) ports exposed separately on the same machine,
I want them both to use TLS and for that I'm using Cerbot.
From time to time Cerbot ...
- 101
1
vote
1
answer
1k
views
The requested apache plugin does not appear to be installed
Im working with certbot but I cant install the apache plugin, ill share the commands that i used:
# certbot --apache
Saving debug log to /var/log/letsencrypt/letsencrypt.log
The requested apache ...
0
votes
1
answer
849
views
Renew conf/cert without stop/start nginx docker container
I did implement a docker container with nginx, and can successfully renew SSL certificates with certbot. They are separated containers generated with the codes below.
They have an external folder to ...
- 151
0
votes
0
answers
281
views
Keycloak is automatically changing certificate
I'm using Keycloak Quay 22.0.3 with docker-compose behind a Nginx reverse proxy but I have some troubles due an automatic replace of my certificate generated with certbot.
My certificate generated ...
- 101
0
votes
0
answers
563
views
ValueError: Invalid version. The only valid version for X509Req is 0
I'm trying to renew the SSL but I got this error:
SSL Error 1
SSL Error 2
I already tried sudo pip3 install pyOpenSSL and sudo pip3 install cryptography==40.0.1, uninstalled it, and installed it again,...
- 1
2
votes
1
answer
9k
views
Certbot failed to authenticate some domains (authenticator: nginx)
Im running nginx as reverse proxy and for some reason im unable to renew letencrypt certificate, i have tried to upgrade nginx and certbot to latest version. It has worked before and im not sure if ...
- 21
0
votes
2
answers
3k
views
Certbot error - DNSSEC: DNSKEY Missing
I moved my domain to Route53 and am now getting problems with Certbot renewal. Certbot has been running great for 4 years, but is now failing to renew.
When running sudo certbot renew --apache i get ...
- 101
-1
votes
2
answers
380
views
underscore in certbot's TXT record
Certbot is a free and open-source utility mainly used for managing SSL/TLS certificates from the Let’s Encrypt certificate authority. When using Certbot to obtain a certificate through the DNS-01 ...
0
votes
1
answer
112
views
Redirect Error website on VPS Ubuntu "www version" redirecting to "apache default page"
Hi I am a web designer and have recently starting maintaining a VPS server
I am using a Lamp VPS server running ubuntu 18 with multiple PHP websites
have edited virtual host and htaccess multiple ...
1
vote
1
answer
798
views
How to generate SSL certificate on windows machine for use with IIS?
I come from Linux background and have previously hosted websites on nginx. I use certbot to create and install SSL certificate.
I'm trying my hands-on Windows IIS, I have deployed a website on IIS. ...
- 239
0
votes
1
answer
502
views
LetsEncrypt/Certbot Domain Verification with Redirect
Is it possible to 301 redirect from abc.com to a different domain xyz.com during cert creation/validation with certbot and complete the domain verification via xyz domain?
This question was asked in ...
- 143
1
vote
2
answers
671
views
Is letsencrypt registration email address stored in certificate
I'm using letsencrypt in two ways: a docker stack using certbot, and another using traefik (which performs certificate management automatically, using lego). In both cases there's a setting for the ...
- 978
5
votes
2
answers
4k
views
Invalid version when updating certificate with certbot
I have a server with a Let's encrypt certificate installed with certbot. I want to renew it with the following command
sudo certbot renew --force-renewal
but I get an error:
Saving debug log to /var/...
- 51
0
votes
1
answer
186
views
Traefik as reverse proxy with certbot / lego
When setting up a server I use a reverse proxy and acme tool for dns01 support (I use either nginx + certbot or nginx + lego). I want to start using traefik instead.
I don't understand how traefik ...
- 978
0
votes
0
answers
69
views
Letsencrypt + HAProxy SSL Offloading
I am using HAProxy for SSL offloading and letsencrypt certificates. Previously, I was using the tls-sni-01-port flag - which is no longer supported.
Does anyone have a recipe that has been working in ...
- 249
0
votes
0
answers
2k
views
Auto renew LetsEncrypt cert with nginx under Docker
I'm having troubles setting up a auto renew for LetsEncrypt certificates.
I run nginx under Docker container that serves Django application.
Here is my docker-compose file:
version: '3.8'
services:
...
- 101
1
vote
0
answers
489
views
OOM killer beeing invoked by snapd systemd timer, CPU usage locks at 100% (snapd, mount, certbot)
Im having trouble debugging why my nodeJS webapp gets killed by the OOM killer in Debian 11. Im working on a small VPS (VMware ESX 7.0.3 build-21313628) by IONOS with single core 1GHz cpu, 512MB RAM, ...
0
votes
0
answers
259
views
wget doesn't accept HTTPS certificate (from letsencrypt) on some computers but does on others
I have the following situation:
On my www server (Apache2, Debian armhf) I have HTTPS certificate from letsencrypt.org by certbot.
When accessing the server from a browser (Firefox, Chromium) ...
0
votes
0
answers
96
views
Certbot Google-DNS Failing from AWS EC2
I am trying to retrieve an SSL Cert using Certbot from an Unbuntu 22 instance on AWS and it keeps getting the following error:
Simulating a certificate request for studiojb-demo.com and *.studiojb-...
- 1
3
votes
0
answers
3k
views
nginx not reloading certificate after renewal
We have the following setup: multiple linux server with Ubuntu 20.04 and 22.04. Hosted on this servers are website for our customers. We using certbot to generate or renewal certificates. As webserver ...
- 31
1
vote
1
answer
76
views
virtual concatenation of two certificate files
mongod requires a certificateKeyFile that is a combination of a certificate and a private key.
certbot manages quarterly renewals of tls certificates that cannot be valid for more than 3 months. the ...
- 322
0
votes
1
answer
81
views
Connection is not secure, only on mobile Certbot / LetsEncrypt
I have linked a service on my server through this reverse proxy
var httpProxy = require('http-proxy');
var fs = require('fs');
httpProxy.createServer({
...
- 1
14
votes
1
answer
4k
views
Why does my Let's Encrypt certificate contain references to Cloudflare?
I own a website that uses a Let's Encrypt certificate. It's not behind Cloudflare, it's hosted at OVH and I'm accepting direct traffic from it.
Now, I set up an apache2 webserver and used certbot to ...
- 153
2
votes
1
answer
3k
views
Automate renewal of let's encrypt ACME-DNS challenge with unbound
I changed from a certificate with multiple explicitly defined subdomains to a wildcard certificate. For this to work, the DNS-01 challenge needs to be solved. I have a very basic unbound DNS server ...
- 63
1
vote
1
answer
901
views
How to completely reset|purge certbot state for a set of domains?
Let's say I have domain.tld and www.domain.tld, and currently there are separate certificates for the main domain and the www subdomain.
I want to migrate to a setup that uses a single certificate ...
0
votes
1
answer
334
views
ErrorDocument not working for any error. Ubuntu Apache
I'm having an issue with getting the ErrorDocument to work. I have tried most of the suggestions on most of the forms and posts. The only thing I know that I have that the others did not is the ...
- 1
0
votes
1
answer
279
views
Why I see all Vhost domain names in SSL certificate, what did I do wrong?
I have a VPS that hosts 2 websites, and I have 2 domains, domain1.com and domain2.com
Server Nginx running on Ubuntu 20.04
I installed certbot and nginx according to their instructions and CA is ...
- 103
0
votes
1
answer
60
views
Migrating API to new server - Should I generate a new SSL certificate and what are the implications for clients?
I am migrating my API to a new server and both old and new server are running on Ubuntu 20.04 and Nginx. My SSL certificate was generated by certbot. Should I generate a new certificate on the new ...
0
votes
1
answer
56
views
Provisioning AMI with certbot certificates that allow the AMI to be reused at a different address
I would like to be able to replicate a site built in an existing, working EC2 Linux 2 AMI image in a manner that does not require re-provisioning of https certificates when spinning up a saved AMI on ...
0
votes
2
answers
4k
views
Certbot challenge using 443 instead of 80?
Is it possible to do the challenge using another port? I read here that you can't replace port 80, but using an "alternative let's encrypt client" you can? (not clear at all)
I have one ...
0
votes
2
answers
1k
views
APACHE CERTBOT ERROR
I'm configuring https on a local apache server using certbot but I get the error below:
Which names would you like to activate HTTPS for?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...
- 1
1
vote
1
answer
1k
views
Configuring SSL with Nginx on Ubuntu Server
I have been following some tutorials online, and I have gotten my flask app up and running. I have added domain names, and they work correctly. However, now im trying to use Certbot to get a SSL ...
- 13