Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Filter by
Sorted by
Tagged with
0 votes
1 answer
41 views

URL with subdomain and certificate does not work [closed]

Please I need help. I' am looking since weeks for a solution to my Problem. I have installed let encrypt certificate using cloud panel in my Nginx web server. Using https in The main domain of my my ...
Lemarseillais's user avatar
0 votes
0 answers
10 views

Duplicating an EC2 instance for creating a development platform for Wordpress site

I have an EC2 instance running Ubuntu hosting a Wordpress site on Apache. I've used LetsEncrypt's CertBot to create an SSL certificate and everything's working fine. I also have direct IP to domain ...
The Feadow's user avatar
0 votes
1 answer
46 views

Win ACME DNS validation for Google DNS is not working

I am trying to request a LetsEncrypt certificate using DNS validation. My DNS provider is Google DNS. No matter what I do, I keep receiving the following error: [EROR] File C:\LetsEncrypt\{GCP-...
user1913559's user avatar
0 votes
1 answer
111 views

DST Root CA X3 (Self-signed) - has expired in certificate chain used by Let's Encrypt (Apache/Windows)

Is it safe to remove a self-signed root certificate from the chain; and what, if any, are the consequences of doing that? And how would I go about doing this on a Windows setup? The instructions under ...
MeSo2's user avatar
  • 264
-3 votes
2 answers
86 views

Creating/Configuring a DNS server with runtime configuration [closed]

I have a big Windows video/audio application that may be controlled remotely over a web server. For that, I can listen to a local port in a, say, 192.168.1.10 system to port 8000, forward the port via ...
Michael Chourdakis's user avatar
1 vote
1 answer
1k views

Certbot failed to authenticate some domains (authenticator: nginx)

Im running nginx as reverse proxy and for some reason im unable to renew letencrypt certificate, i have tried to upgrade nginx and certbot to latest version. It has worked before and im not sure if ...
Pim's user avatar
  • 11
-1 votes
2 answers
98 views

underscore in certbot's TXT record

Certbot is a free and open-source utility mainly used for managing SSL/TLS certificates from the Let’s Encrypt certificate authority. When using Certbot to obtain a certificate through the DNS-01 ...
Amin Bou Hamdan's user avatar
0 votes
0 answers
94 views

How to manage certificate renewal using win-acme if the folder doesn't exist anymore?

win-acme auto renews SSL certificate by invoking task scheduler task which executes C:\Users\admin\Downloads\win-acme.v2.2.5.1541.x64.pluggable\wacs.exe Someone deleted that folder from the downloads ...
variable's user avatar
  • 177
0 votes
1 answer
142 views

Nginx emergency: cannot load certificate "/etc/letsencrypt/live/mail.example.com/fullchain.pem". How to fix this Nginx error?

I am running a LEMP email/web server with Ubuntu 20.04. My Nginx user is www-data. I also have roundcube installed in /var/www/roundcube. In my Nginx logs, I am getting the following error: 2023/07/01 ...
DanRan's user avatar
  • 69
0 votes
0 answers
45 views

Trouble loading wildcard SSL that uses the hostname

I have a wildcard SSL cert from Let's Encrypt, the installation has worked and when accessing a sub-domain the cert loads properly. However the virtual site (Apache) that has no subdomain produces an ...
Kline's user avatar
  • 247
0 votes
1 answer
64 views

How to generate SSL certificate on windows machine for use with IIS?

I come from Linux background and have previously hosted websites on nginx. I use certbot to create and install SSL certificate. I'm trying my hands-on Windows IIS, I have deployed a website on IIS. ...
variable's user avatar
  • 177
0 votes
1 answer
106 views

LetsEncrypt/Certbot Domain Verification with Redirect

Is it possible to 301 redirect from abc.com to a different domain xyz.com during cert creation/validation with certbot and complete the domain verification via xyz domain? This question was asked in ...
archygriswald's user avatar
0 votes
2 answers
226 views

Is letsencrypt registration email address stored in certificate

I'm using letsencrypt in two ways: a docker stack using certbot, and another using traefik (which performs certificate management automatically, using lego). In both cases there's a setting for the ...
lonix's user avatar
  • 898
2 votes
1 answer
2k views

Invalid version when updating certificate with certbot

I have a server with a Let's encrypt certificate installed with certbot. I want to renew it with the following command sudo certbot renew --force-renewal but I get an error: Saving debug log to /var/...
Grigorii's user avatar
0 votes
0 answers
251 views

Best way to trigger host to restart a docker container from inside another docker container?

I have a docker container that manages all of the SSL certificates for my services with Letsencrypt. When the certificate for a certain service is renewed, a post-hook script copies the certificate ...
lriley's user avatar
  • 9
1 vote
2 answers
213 views

NixOS - Let's Encrypt certificate is not recognized by Traefik (works in Nginx)

I am trying to run a demo Node.js app on a subdomain using Traefik reverse proxy. I am generating the wildcard Let's Encrypt certificate with the security.acme option. When I import the certificate in ...
protob's user avatar
  • 111
0 votes
1 answer
111 views

Traefik as reverse proxy with certbot / lego

When setting up a server I use a reverse proxy and acme tool for dns01 support (I use either nginx + certbot or nginx + lego). I want to start using traefik instead. I don't understand how traefik ...
lonix's user avatar
  • 898
0 votes
0 answers
198 views

"wildcard" ssl certificate for all domains pointing to nginx server

I have a nginx server with the following (simplified) server block: server { listen 80; server_name _; location / { root /var/www/html; index index.html; } } Every ...
Sam Leurs's user avatar
  • 111
0 votes
1 answer
46 views

Post Fedora Server upgrade to FC38, Apache httpd server no longer honors Lets Encrypt keys

The environment has twins of virtually everything, including two web server / firewall / gateway systems, and they were getting long-in-the-tooth version wise, so I decided to upgrade from Fedora ...
Richard T's user avatar
  • 1,226
0 votes
1 answer
307 views

LDAP replication to server with Let's Encrypt certificate fails, "unable to get issuer certificate"

I am currently trying to set up LDAP replication between to instances of 389 Directory Server (both running on Fedora 37), which I'll call $SUPPLIER and $CONSUMER in the following (serving at the ...
TuringTux's user avatar
0 votes
0 answers
43 views

Letsencrypt + HAProxy SSL Offloading

I am using HAProxy for SSL offloading and letsencrypt certificates. Previously, I was using the tls-sni-01-port flag - which is no longer supported. Does anyone have a recipe that has been working in ...
Aaron A's user avatar
  • 239
0 votes
0 answers
835 views

Auto renew LetsEncrypt cert with nginx under Docker

I'm having troubles setting up a auto renew for LetsEncrypt certificates. I run nginx under Docker container that serves Django application. Here is my docker-compose file: version: '3.8' services: ...
popcorn's user avatar
3 votes
1 answer
574 views

Let's Encrypt certificate on SQL Server 2019 - "The target principal name is incorrect"

Summary I'm having trouble getting a certificate issued by Let's Encrypt R3 to work on SQL Server 2019. When using the certificate for SSL but not trusting the server certificate explicitly (In SSMS, ...
fusillibips's user avatar
0 votes
0 answers
149 views

wget doesn't accept HTTPS certificate (from letsencrypt) on some computers but does on others

I have the following situation: On my www server (Apache2, Debian armhf) I have HTTPS certificate from letsencrypt.org by certbot. When accessing the server from a browser (Firefox, Chromium) ...
bicyclesonthemoon's user avatar
0 votes
1 answer
326 views

certifcate not valid, but certbot says it is

https://licoriceicecream.com/ : expires Monday, 1 May 2023 at 14:43:01 but sudo certbot renew Processing /etc/letsencrypt/renewal/licoriceicecream.com.conf - - - - - - - - - - - - - - - - - - - - - - ...
NimChimpsky's user avatar
0 votes
1 answer
325 views

Generate SSL certificate with let's encrypt (dns-01 challenge)

I'm trying to generate an SSL certificate with Ansible for *.rasp.example.com and rasp.example.com. I already have a "working" solution (No errors when deploying), but when I try to compare ...
tholeb's user avatar
  • 31
0 votes
0 answers
271 views

Traefik on Synology: LetsEncrypt says it has DNS issues but the certificate file looks valid

My curent Network: Router - 192.168.1.1 (static) Windows PC - 192.168.1.10 (static) Synology NAS - 192.168.1.11 (static) DockerPihole - 192.168.1.12 (macvlan-static) DockerUnbound ...
LorneCash's user avatar
  • 101
-1 votes
1 answer
306 views

SSL cert fails when subdomain is an A Record of another host

Please excuse any wrong terminology here. If it feels I'm using the wrong term, I possibly am. Previous scenario: I have a domain and subdomains DOMAINA, * .DOMAINA on my domain provider, pointing to ...
biscuitstack's user avatar
1 vote
1 answer
92 views

acme.sh script to include the webmail subdomain on a shared (Namecheap) server

For a long time I have used acme.sh to create 90-day SSL certs for my example.com domain. Never had a problem. However, I now wish to start using the webmail interface (webmail.example.com - included ...
cssyphus's user avatar
  • 348
0 votes
1 answer
5k views

Unable to renew Let's Encrypt SSL certificate in Nginx Proxy Manager

I've set up a few sites in Docker, on Linode. I started by following these instructions: Connect Your Docker Containers to Domain Names For Easy Access using Portainer on Linode The steps I followed ...
jdege's user avatar
  • 193
0 votes
0 answers
61 views

Could not find the alias s1as in the key store

I get the following error remote failure: NCLS-SECURITY-05200 : org.jvnet.hk2.config.TransactionFailure: java.lang.RuntimeException: java.lang.IllegalArgumentException: Could not find the alias s1as ...
Clifton Zama's user avatar
0 votes
1 answer
39 views

Connection is not secure, only on mobile Certbot / LetsEncrypt

I have linked a service on my server through this reverse proxy var httpProxy = require('http-proxy'); var fs = require('fs'); httpProxy.createServer({ ...
N00b's user avatar
  • 1
0 votes
0 answers
50 views

Linux user access to file that is a soft link

I'm using Certbot to implement LetsEncrypt generated certificates on a Debian 11 server. Certbot was run/setup while logged in as root. This solution creates two files, fullchain.pem & privkey.pem,...
MindSpiker's user avatar
0 votes
0 answers
324 views

cert-manager failing to generate certificate in kubernetes, how to fix that?

In the aks cluster, the helm chart I installed: Chart got from link And the ingress chart I used helm repo add jetstack https://charts.jetstack.io helm repo update helm upgrade --install \ cert-...
user2331760's user avatar
13 votes
1 answer
4k views

Why does my Let's Encrypt certificate contain references to Cloudflare?

I own a website that uses a Let's Encrypt certificate. It's not behind Cloudflare, it's hosted at OVH and I'm accepting direct traffic from it. Now, I set up an apache2 webserver and used certbot to ...
lolc's user avatar
  • 143
0 votes
2 answers
96 views

nginx as a web proxy with ssl

I have installed proxmox and am running a simple ubuntu server where I have installed nginx. How and where do I setup ssl? I only want to use nginx to forward location to another web server. Can I set ...
Asken's user avatar
  • 215
0 votes
1 answer
87 views

Getting not secure warning for www domain

I installed lets encrypt using certbot when I go to the www.domain.com I get this site is not secure error Found the following certs: Certificate Name: example.com Domains: example.com ...
Utku Dalmaz's user avatar
  • 1,329
2 votes
1 answer
1k views

Automate renewal of let's encrypt ACME-DNS challenge with unbound

I changed from a certificate with multiple explicitly defined subdomains to a wildcard certificate. For this to work, the DNS-01 challenge needs to be solved. I have a very basic unbound DNS server ...
Amon Bune's user avatar
2 votes
2 answers
2k views

How can I make SSL Lets Encrypt certificate auto renew on Ubuntu

How can I make the certificate for vgo site to auto new every time so I don't have to renew it manual or it will auto renew itself? ssl_certificate /etc/letsencrypt/live/www.site.com/fullchain.pem; # ...
Crypto Coupons's user avatar
0 votes
2 answers
424 views

Issue valid HTTPS certificates for intranet subdomains with letsencrypt

I'm trying to provide secure services on my home intranet. Up to now I've used self-signed certificates with a made-up domain example.foo, with a subdomain for my separate systems (e.g. srv1.example....
emma.makes's user avatar
0 votes
0 answers
711 views

K8s : nginx-ingress: SSL_do_handshake() failed (SSL: error:191CF08C:SSL routines:tls_parse_ctos_key_share:bad key share)

As we found out that the nginx ingress as well as the cert-manager were outdated and not compatible with the Kubernetes version of 1.22 anymore. I upgrade the two components: nginx-ingress from 0.26.1 ...
sam23's user avatar
  • 59
1 vote
0 answers
160 views

Fedora Server 37 CA certificate store most equivalent to LocalMachine\root

Fedora Server 37 CA certificate store most equivalent to LocalMachine\root in a Windows environment? Background notes: I have plenty of experience in the Windows area for certificate management, but ...
jcolebrand's user avatar
0 votes
1 answer
132 views

Why I see all Vhost domain names in SSL certificate, what did I do wrong?

I have a VPS that hosts 2 websites, and I have 2 domains, domain1.com and domain2.com Server Nginx running on Ubuntu 20.04 I installed certbot and nginx according to their instructions and CA is ...
user174174's user avatar
1 vote
1 answer
349 views

Cross-signed (Let's Encrypt) SSL chain validation

Note: I spent like 30 minutes writing/formulating this question, and it turned out into a rubber ducking session. Realised what I was doing wrong, but posting this anyway as it might by useful for ...
Tom Cannaerts's user avatar
0 votes
0 answers
119 views

Hosting application on Windows Server running IIS and want to redirect website to application using a port

I am running Uptime Kuma on our server and it's using a port 1234 for instance. I can access the application by going to https://myserver.com:1234 but the certificate is invalid. I'd like to access ...
ErocM's user avatar
  • 226
1 vote
1 answer
353 views

SSL alternative names mismatch

Santander want to use our website, however when trying to access it they receive the following error: 'Network Error: Your request contacted a host which presented a certificate signed by an untrusted ...
Andy's user avatar
  • 11
0 votes
0 answers
33 views

HAProxy balance API

I have use many hour to search and learn the HAProxy config but i can't make the desired result in any way. I'll explain my scenario. I have three different server: api1.test.eu 10.20.30.130:8764 api2....
g-pane's user avatar
  • 1
0 votes
1 answer
254 views

Changing the issuer (from HTTP01 to DNS01 ACME verification) of a certificate in cert-manager

I have a certificate managed by cert-manager, on a Kubernetes cluster. It used to be renewed/validated via a HTTP01 ACME challenge but, because of security constraints (a firewall), that's not ...
Silvian Cretu's user avatar
0 votes
1 answer
398 views

Docker containers not accessible from internet (using jwilder's nginx+letsencrypt solution)

I have been using the jwilder's nginx + letsencrypt solution to access my containers online. Last week my server crashed and after a restart, I couldn't access any of my containers from the internet. ...
Gaurav Suman's user avatar
2 votes
3 answers
991 views

How to troubleshoot ERR_SSL_VERSION_OR_CIPHER_MISMATCH on server with nginx reverse proxy and let's encrypt?

I have a server (Debian 9.13) with several websites running in Docker containers with nginx (1.13.12) as a reverse proxy. The websites are under two domain names : alchimie-web.com and ...
Manumie's user avatar
  • 41

1
2 3 4 5
17