Questions tagged [lets-encrypt]
Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.
0
votes
1answer
33 views
Nginx redirects all websites to another website
I've been facing some weird issue. I have 2 WordPress websites installed on my server. I will call them,
example1.com, example2.com
All 2 websites run on Nginx, PHP-7.2, MariaDB and Ubuntu 18.04.
...
0
votes
1answer
8 views
Overriding nginx deny rule for acme related block
I have following nginx server config:
server {
...
location / {
# First attempt to serve request as file, then
# as directory, then fall back to proxy.
...
1
vote
1answer
28 views
Using “Let's Encrypt” TLS with a Google Load Balancer? (Kubernetes/GKE)
I've been trying to test out Kubernetes on Google Cloud, but would need HTTPS/TLS (only) exposed on the deployed application. To start, I just followed this tutorial, which worked fine for plain HTTP ...
google-cloud-platform
0
votes
2answers
24 views
Non-WWW gets ERR_CERT_COMMON_NAME_INVALID on a wildcard certificate
I have a wildcard certificate from Let's Encrypt for a website (*.storyfortwo.com).
When I go to
http://storyfortwo.com or http://www.storyfortwo.com (no SSL) they are both redirected to https://www....
0
votes
1answer
39 views
Lets encrypt certificate renew: PluginError occured
I am trying to renew the letsencrypt SSL certificate in the apache by using the following command.
sudo certbot renew
But I am getting the following error
error was: PluginError('There has been ...
0
votes
1answer
103 views
nginx “ERR_TOO_MANY_REDIRECTS” after add ssl
After i add Let's Encrypt certificate to my website with CertBot
i get ERR_TOO_MANY_REDIRECTS when i try to visit the domain of my website.
some info :
-mywebsite build with django, nginx and ...
0
votes
1answer
40 views
Generate LetsEncrypt Certs to NFS share
Im trying to generate a letsencrypt wildcard cert to use on various websites (one FQDN, multiple subdomains). The plan is to save those certs on a NFS share I have to easily access them on various ...
0
votes
1answer
32 views
Incorrect Order, Extra Cert Lets Encrypt Apache 2.433
im having issues using a webhook and think it might be my SSL cert. When I use sslabs.com to test my server i get a warning about "Incorrect Order, Extra Certs"
these are the files in my letsencrypt/...
-1
votes
0answers
9 views
Video Streaming using SSL on Alibaba ECS
I have an ECS instance on Alibaba using LetsEncrypt for SSL configuration but i have an issue with PHP Video Streaming that is not working when SSL is used where Video Link gives 404 when the ...
0
votes
0answers
26 views
Ubuntu 16.04 + Nodejs (for Adonisjs app) + Mysql + Apache (just for phpmyadmin)
Server: Digital Ocean Droplet (Ubuntu 16.04),
Application Deployed: Nodejs (based on the Adonis.js framework),
Database: MySQL,
Nginx: Reverse Proxy Server (To remove port 3333 from app URL),
...
0
votes
1answer
40 views
How can I automate letsencrypt certificates with apache and standalone authentication?
I have many letsencrypt certificates with apache authentification. They are very well updated automatically.
I have one certificate (xmpp), that has standalone authentification. This one always fails ...
0
votes
1answer
34 views
Nginx HTTPS redirect loop with multiple domains
I know that there are other questions with similar topics, but I can't find a solution anywhere that solves my specific problem. The difference here is multiple domains with different sites.
I have ...
0
votes
1answer
38 views
ssl (letsencrypt) for the following scheme: server (dynamic ip) -> ddns (no-ip) -> cloudflare -> hostname
My setup is as follows:
Dedicated server (Linux) with dynamic IP address
NO-IP domain name
domain name
When I want to access my system (server), I access my domain, which redirects me to my NO-IP ...
0
votes
1answer
38 views
Adding letsencrypt cert broke nginx config
I have Nginx, running on Ubuntu 16.04 with several virtual hosts set up.
After adding a LetsEncrypt cert, using certbot, I can no longer access my site with www.example.com Going to example.com works ...
0
votes
1answer
70 views
Why does Certbot fail to run post hook scripts?
This is my first attempt at renewing Let's Encrypt certificates via Certbot. After carefully reading the Certbot user guide I created two post hook scripts like this:
root@pelargir:~# ls -l /etc/...
0
votes
0answers
45 views
Nginx, with multiple forwarded domains and a letsencrypt certificate
I'm trying to set up Nginx as a forwarding proxy for all the dev servers sat behind my static IP.
Iv'e read this Question:
Lets Encrypt with an nginx reverse proxy
Already, and it get's me part of ...
0
votes
0answers
61 views
Letsencrypt/certbot on Debian Stretch: ImportError: cannot import name jose
After installing and using the certbot script offered by the Debian package (version 0.10.2), I got the request to supply a wildcard certificate. As that is not possible with the certbot version from ...
0
votes
1answer
167 views
SSL “unable to get local issuer certificate” : “full chain” vs “root”?
Summary
In summary I have some certificate related files and some certificate related instructions but I'm not sure which files are which !
Background
I've just installed a certificate from Lets ...
2
votes
1answer
486 views
Certbot connection refused whilst /.well-known/acme-challenge is accessible
I'm having issues to renew my certificate for my Nextcloud instance with letsencrypt on my ubuntu 16.04 server.
Here is my renewal conf:
# renew_before_expiry = 30 days
version = 0.22.2
...
0
votes
1answer
41 views
How to handle nginx container creating Letsencrypt keys and then use them?
I have a docker image, which creates containers for my web app. The details of the web app don't matter at all. What matters is that each time, the container can use a different address ( server1., ...
0
votes
1answer
37 views
Install Let's Encript in a custom docker container
I'm trying to get https enabled on a web server (apache) already running in a custom docker instance for a specific web app. The container seems to be running Alpine Linux. Before a few weeks ago, I ...
2
votes
4answers
178 views
Terminating SSL at Cloudflare level. Do I get performance gains?
I saw in a post that terminating SSL at Cloudflare level and HTTP only traffic from Cloudflare to origin gives a performance boost since SSL is negotiated only at the edge.
I run a website (mostly ...
2
votes
1answer
54 views
Why is my ssl certificate self signed?
I followed the following steps to install an ssl-certificate on a website; https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-centos-7. However, the website is ...
0
votes
2answers
148 views
Nginx certbot cronjob not working
I have installed certbot with the nginx module. Today I noticed that the cron that is installed automatically did not work. The cronjob in question is
/etc/cron.d/certbot
and the content was
0 */12 ...
0
votes
1answer
96 views
Let's Encrypt 404 error on Google Cloud - Compute Engine - VM Instance
I'm setting up my Ubuntu 16.04 VM on Google's Compute Engine. I have Apache installed & it's already hosting my domain on HTTP, and I'd like to enable HTTPS.
Steps taken so far:
change the IP ...
0
votes
1answer
30 views
Would nginx allow me to access internal websites from the internet via subdomains without specifying the internal port?
For years I’ve just been forwarding ports from my router to the respective machine’s IP address and using something like http://example.com:9999. But since I’ve been using lots of IoT devices, I’m ...
0
votes
1answer
48 views
Stopping nginx to 30(2|1) redirect for /.well-known location
I'm setting up letsencrypt for two different domains: example.be and example.com
I've got Nginx configured to redirect all example.com/* requests to example.be/de/*
// Block 1
server {
listen 80;...
-1
votes
1answer
43 views
Let's Encrypt Expire Bot showing different date then command line
Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018.
but when I log in to the server, and check the ...
-1
votes
1answer
49 views
Certbot misbehaves by creating a certificate for a domain with “www”
This time when I used certbot it created a certificate for "www.$website" instead of $website. This is not what I need.
Here it is:
$ website="my_website123.com"
$ sudo certbot certonly --...
0
votes
1answer
221 views
Mozilla Firefox - SEC_ERROR_UNKNOWN_ISSUER - Let's encrypt certificate via Certbot - CentOS 7
I have installed Let's Encrypt's SSL certificate for my website using Certbot (CentOS 7).
Every major web browser successfully makes https connection with my web server, except Mozilla Firefox. This ...
2
votes
1answer
145 views
What exactly does Let's Encrypt certbot's `enhance` command?
Let's Encrypt certbot have subcommand enhance that has a description "Add security enhancements to your existing configuration".
The only additional information that I can find in certbot's CLI help ...
1
vote
0answers
20 views
certbot creates a certificate with “wwww” instead of a bare domain one - unlike before [duplicate]
I've been creating certificates this way for over a year:
export website="my_domain1111.com"
sudo certbot certonly --standalone -d $website -d www.$website --email hello@$website
and it's always ...
0
votes
1answer
153 views
letsencrypt certificate with windows / exchange server
I try to install and then renew Letsencrypt certificate with Exchange server for owa and activesync. Windows Server 2008 R2 with Exchange Server 2010. (Which will be upgraded to more recent version ...
1
vote
2answers
146 views
How to setup LetsEncrypt SSL for multiple websites hosted on CentOS 7?
I have a CentOS 7 Server with Apache. Currently there are multiple websites hosted on Virtual Server as "Top Level Server" and "Sub-Server" using VirtualMin, i.e., Multiple Virtual Servers in Apache ...
0
votes
0answers
162 views
Letsencrypt expired certificate renewal failure (NGinx)
I'm hosting a website on AWS. I created SSL certificates through letsencrypt for my domain xxxxx.com as well as www.xxxxx.com. (Throughout this post I'm putting 'xxxx's for potentially sensitive ...
1
vote
0answers
471 views
Nginx Reverse Proxy + Let's Encrypt
I have two VM's. One running LEMP and one running grafana.
I have configured nginx on LEMP to serve as a reverse proxy for various VMs in my lab including the VM with grafana.
It works great, but i ...
0
votes
0answers
487 views
Certbot-auto not renewing on cron job
I have the following set up via cron:
/usr/sbin/certbot-auto renew --force-renew --quiet --post-hook "/sbin/service httpd reload" >> /var/log/letsencrypt/letsencrypt.log 2>&1
I found ...
0
votes
2answers
344 views
Export client certificate from Let's Encrypt certificates
I'm running Debian and have certbot for creating Let's Encrypt certificate.
I act as client towards a TLS server, and needs to handover my client certificate for approval.
I've got the following ...
0
votes
0answers
58 views
How can I fix a 301 redirect loop using nginx on Amazon Lightsail after running Certbot?
I just deployed a Laravel app to a Lightsail server, and it was working fine until I ran certbot to enable SSL then I got a redirect loop.
here is my site's nginx config.
server {
listen 443 ssl ...
0
votes
1answer
25 views
Is it correct to see certificate from another domain in case of missing cert? [duplicate]
I have 3 sites defined in apache, site1, site2, site3
For 1 and 2 I requested ssl certs from Let's encrypt and work OK, but NOT for site 3.
Problem is that whenever I access https://site3 I always get ...
0
votes
3answers
66 views
Multi-domain certificate failing for one domain
I've been hosting some nginx servers with letsencrypt SSL certificates.
domain-a.org is on server 1 with it's own certificate.
sub.domain-a.org is on server 2 with it's own certificate
At first ...
0
votes
1answer
84 views
Redirect from example.com to www.example.com if a certificate for example.com is invalid
I have no valid SSL certificate for my "example.com".
I can't issue/renew a certificate for "example.com" at the moment.
However, I have a valid one for "www.example.com"
I want all the requests, ...
1
vote
1answer
147 views
ngnix: .well-known acme-challenge security warning
First, I am not sure if this is right place to put my question. But it relate to ngnix configuration done by certbot on my server. It add following line for domain in configuration
location ~ "^/....
0
votes
1answer
140 views
Certbot and letsencrypt: after renewing my certificate has 2 weeks more of validity instead of 3 months
My letsencrypt certificate will expire soon. I ran "certbot" to renew it for the next 3 months:
$ sudo certbot certonly --standalone -d $website --email admin@$website
Saving debug log to /var/...
0
votes
0answers
15 views
Mod-pagespeed ssl path
When cofiguring mod-pagespeed from google i can not get clear what path i should use for the ssl folder.
I can’t find a example for Let’s Encrypt.
The standard config is:
The locations of SSL ...
1
vote
1answer
590 views
Traefik + k8s + Let's Encrypt wildcard SSL + Cloudflare issue
I'm trying to set-up a reverse proxy with wildcard SSL using Traefik, with a DNS challenge against a Cloudflare zone.
I have this config in k8s:
kind: ConfigMap
apiVersion: v1
metadata:
name: ...
0
votes
0answers
25 views
Docker generating SSL certs error
I'm trying to generate certificates with the letsencrypt image and save them to a named volume but I'm having issues. It's only generating the certificate for the top level domain, not any subdomains....
0
votes
1answer
263 views
Reverse proxy to localhost:xxxx only work for http and not for https
I have the following configuration that works for http:
server {
listen 80;
listen [::]:80;
server_name subdomain.domain.tech;
location / {
proxy_set_header X-Forwarded-...
1
vote
1answer
333 views
Configure Apache with Lets Encrypt SSL Certificates leads to “SSL_ERROR_RX_RECORD_TOO_LONG”
I'm running Apache 2.4.25 on a Raspian (Raspberry Pi) server.
I wanted to set up SSL certificates for the server, so I ran the following commands to get certbot:
sudo apt-get update
sudo apt-get ...
2
votes
1answer
477 views
Using Let's Encrypt Wildcard Certificate on Multiple Servers
I have a series of subdomains that are a part of a root domain I manage. I have set up certbot on one of these domains: x.example.com and it is successfully using the certificate and renewing it ...
