Questions tagged [lets-encrypt]
Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.
0
votes
0answers
20 views
Nginx built with rtmp module worked until ssl was added to server will not restart config tests good
Setup nginx with the rtmp modules in order to do video restreaming and a video player using this guide. Had no issues nginx server worked great. Next step was to put SSL on the web page and that's ...
-2
votes
0answers
38 views
how to submit CSR from iLO to Let's Encrypt [on hold]
i have read some post and found an article here:
https://community.letsencrypt.org/t/how-to-automatic-certificate-install-on-an-hp-ilo4-management-processor/31038
and on this forum here:
Generating ...
0
votes
0answers
27 views
Nginx Redirect Loop in a Letsencrypt Docker with Multiple Sites
I am getting a "too many redirect error" when I try to go to my own websites. Those websites are hosted on my server with Nginx inside a Letsencrypt Docker(Docker Hub: https://hub.docker.com/r/...
0
votes
0answers
17 views
LetsEncrypt not detecting my domain [closed]
I have Apache installed running two virtual host files
000-default.conf & domain.conf
I'm running the following command to generate the certificate
sudo certbot --apache certonly
LetsEncrypt ...
0
votes
1answer
16 views
How to update email address to receive expiry notification from letsencrypt?
I am trying to update the old email address which was being used to recieve expiry notification from the amazing Letsencrypt. However, I did not find a way to do it amazingly :O.
What I did try ...
0
votes
1answer
35 views
Can't Start HTTPD After Update
I'm unable to start my previously working httpd(2.4.6) after updating my instance(CentOS 7).
I first checked the status via systemctl status httpd, which yielded:
● httpd.service - The Apache HTTP ...
0
votes
0answers
35 views
Reverse proxy shaarli in a subfolder with nginx
I have a docker-compose with many services I was able to reverse proxy behind an nginx instance, located in a linuxserver/letsencrypt docker container.
I added a shaarli container to the list, and ...
0
votes
2answers
40 views
Let's Encrypt setup for subdomain which is pointed to other host
I'm trying to setup a two server system, where one is doing webhosting and the another is delivering content (CDN) for the webhost server.
I currently own two servers and they both have Let's Encrypt ...
0
votes
1answer
65 views
Let's encrypt certificate permissions
I am using webmin + virtualmin to host and manage websites. There is Let's encrypt module to configure automatic SSL certificate renewal in some period of time. Certificates are placed in user's home ...
0
votes
0answers
129 views
send() failed (111: Connection refused) while resolving, resolver: 127.0.0.1:53
Because of SSL stalping errors I had to set
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
ssl_prefer_server_ciphers on;
ssl_stapling on;
...
0
votes
1answer
56 views
Generate LetsEncrypt SSL certificate for internal use using Certbot
I want to generate an SSL certificate using Certbot for a subdomain which points to a Docker Registry server which is not accessible from outside.
Since I cannot use LetsEncrypt DNS challenge the ...
0
votes
0answers
39 views
HTTPS fails when doing self consuming rest call to web proxy
I have a java web application which exposes an Rest API on the local network. The api is also exposed to the internet trough an NGINX proxy running on a separate server with an url like https://api....
0
votes
2answers
84 views
nginx as reverse proxy with several domains & hosts
This question has probably been asked several times, but with all results I can find and my little knowledge, I'm kind of lost. I'm using Fedora 29.
What I try to do with nginx :
Use one let's ...
0
votes
1answer
71 views
Let's Encrypt certificate to cover both wildcard subdomains and root-domain
I'm running a server under example.com domain and I have sub-domains like:
a.example.com
b.example.com
I'm creating certificate from Let's Encrypt with zerossl online tools and I have an issue. ...
0
votes
0answers
56 views
SSL issue with LetsEncrypt for some users
So, I run https://podnews.net through AWS, and use their SNI SSL certificates. This appears to work fine for everyone.
For the newsletter software, my click throughs go through https://sendy....
0
votes
0answers
39 views
certbot/letsencrypt cant connect to server, probably my dns
so i'm trying to set up certbot so i can have an https connection to my nextcloud, but i'm a bit of a noob when it comes to DNS.
/var/log/letsencrypt/log
2018-10-26 15:44:20,503:DEBUG:certbot.main:...
0
votes
1answer
36 views
Cannot set-up SSL termination after changing subdomain
I've been working for a while on a web application that has lived on two load-balanced DigitalOcean droplets (using a DigitalOcean loadbalancer, not my own load-balancing droplet) with SSL termination....
0
votes
1answer
41 views
NGINX SSL “ERR_TOO_MANY_REDIRECTS”
I have website build with django and nginx. After adding Let's Encrypt SSL certificat using Certbot I get the error : ERR_TOO_MANY_REDIRECTS.
Please find the below nginx configuration :
server {
...
0
votes
1answer
47 views
Poste.io - can't login by mail application - bad SSL certificate
I have a proble with poste.io and configuration with nginx-proxy. DOMAIN is valid domain :)
This is my docker-compose for poste.io:
version: '3'
volumes:
mailserver_posteio:
services:
...
0
votes
1answer
40 views
Nginx redirects all websites to another website
I've been facing some weird issue. I have 2 WordPress websites installed on my server. I will call them,
example1.com, example2.com
All 2 websites run on Nginx, PHP-7.2, MariaDB and Ubuntu 18.04.
...
1
vote
1answer
20 views
Overriding nginx deny rule for acme related block
I have following nginx server config:
server {
...
location / {
# First attempt to serve request as file, then
# as directory, then fall back to proxy.
...
1
vote
1answer
98 views
Using “Let's Encrypt” TLS with a Google Load Balancer? (Kubernetes/GKE)
I've been trying to test out Kubernetes on Google Cloud, but would need HTTPS/TLS (only) exposed on the deployed application. To start, I just followed this tutorial, which worked fine for plain HTTP ...
google-cloud-platform
0
votes
2answers
165 views
Non-WWW gets ERR_CERT_COMMON_NAME_INVALID on a wildcard certificate
I have a wildcard certificate from Let's Encrypt for a website (*.storyfortwo.com).
When I go to
http://storyfortwo.com or http://www.storyfortwo.com (no SSL) they are both redirected to https://www....
0
votes
1answer
46 views
Lets encrypt certificate renew: PluginError occured
I am trying to renew the letsencrypt SSL certificate in the apache by using the following command.
sudo certbot renew
But I am getting the following error
error was: PluginError('There has been ...
0
votes
1answer
142 views
nginx “ERR_TOO_MANY_REDIRECTS” after add ssl
After i add Let's Encrypt certificate to my website with CertBot
i get ERR_TOO_MANY_REDIRECTS when i try to visit the domain of my website.
some info :
-mywebsite build with django, nginx and ...
0
votes
1answer
64 views
Generate LetsEncrypt Certs to NFS share
Im trying to generate a letsencrypt wildcard cert to use on various websites (one FQDN, multiple subdomains). The plan is to save those certs on a NFS share I have to easily access them on various ...
0
votes
1answer
59 views
Incorrect Order, Extra Cert Lets Encrypt Apache 2.433
im having issues using a webhook and think it might be my SSL cert. When I use sslabs.com to test my server i get a warning about "Incorrect Order, Extra Certs"
these are the files in my letsencrypt/...
0
votes
0answers
46 views
Ubuntu 16.04 + Nodejs (for Adonisjs app) + Mysql + Apache (just for phpmyadmin)
Server: Digital Ocean Droplet (Ubuntu 16.04),
Application Deployed: Nodejs (based on the Adonis.js framework),
Database: MySQL,
Nginx: Reverse Proxy Server (To remove port 3333 from app URL),
...
0
votes
1answer
44 views
How can I automate letsencrypt certificates with apache and standalone authentication?
I have many letsencrypt certificates with apache authentification. They are very well updated automatically.
I have one certificate (xmpp), that has standalone authentification. This one always fails ...
0
votes
1answer
43 views
Nginx HTTPS redirect loop with multiple domains
I know that there are other questions with similar topics, but I can't find a solution anywhere that solves my specific problem. The difference here is multiple domains with different sites.
I have ...
0
votes
1answer
51 views
ssl (letsencrypt) for the following scheme: server (dynamic ip) -> ddns (no-ip) -> cloudflare -> hostname
My setup is as follows:
Dedicated server (Linux) with dynamic IP address
NO-IP domain name
domain name
When I want to access my system (server), I access my domain, which redirects me to my NO-IP ...
0
votes
1answer
45 views
Adding letsencrypt cert broke nginx config
I have Nginx, running on Ubuntu 16.04 with several virtual hosts set up.
After adding a LetsEncrypt cert, using certbot, I can no longer access my site with www.example.com Going to example.com works ...
0
votes
1answer
208 views
Why does Certbot fail to run post hook scripts?
This is my first attempt at renewing Let's Encrypt certificates via Certbot. After carefully reading the Certbot user guide I created two post hook scripts like this:
root@pelargir:~# ls -l /etc/...
0
votes
0answers
98 views
Nginx, with multiple forwarded domains and a letsencrypt certificate
I'm trying to set up Nginx as a forwarding proxy for all the dev servers sat behind my static IP.
Iv'e read this Question:
Lets Encrypt with an nginx reverse proxy
Already, and it get's me part of ...
0
votes
0answers
101 views
Letsencrypt/certbot on Debian Stretch: ImportError: cannot import name jose
After installing and using the certbot script offered by the Debian package (version 0.10.2), I got the request to supply a wildcard certificate. As that is not possible with the certbot version from ...
0
votes
1answer
461 views
SSL “unable to get local issuer certificate” : “full chain” vs “root”?
Summary
In summary I have some certificate related files and some certificate related instructions but I'm not sure which files are which !
Background
I've just installed a certificate from Lets ...
2
votes
1answer
985 views
Certbot connection refused whilst /.well-known/acme-challenge is accessible
I'm having issues to renew my certificate for my Nextcloud instance with letsencrypt on my ubuntu 16.04 server.
Here is my renewal conf:
# renew_before_expiry = 30 days
version = 0.22.2
...
0
votes
1answer
44 views
How to handle nginx container creating Letsencrypt keys and then use them?
I have a docker image, which creates containers for my web app. The details of the web app don't matter at all. What matters is that each time, the container can use a different address ( server1., ...
0
votes
1answer
40 views
Install Let's Encript in a custom docker container
I'm trying to get https enabled on a web server (apache) already running in a custom docker instance for a specific web app. The container seems to be running Alpine Linux. Before a few weeks ago, I ...
2
votes
4answers
187 views
Terminating SSL at Cloudflare level. Do I get performance gains?
I saw in a post that terminating SSL at Cloudflare level and HTTP only traffic from Cloudflare to origin gives a performance boost since SSL is negotiated only at the edge.
I run a website (mostly ...
2
votes
1answer
59 views
Why is my ssl certificate self signed?
I followed the following steps to install an ssl-certificate on a website; https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-centos-7. However, the website is ...
0
votes
2answers
315 views
Nginx certbot cronjob not working
I have installed certbot with the nginx module. Today I noticed that the cron that is installed automatically did not work. The cronjob in question is
/etc/cron.d/certbot
and the content was
0 */12 ...
0
votes
1answer
137 views
Let's Encrypt 404 error on Google Cloud - Compute Engine - VM Instance
I'm setting up my Ubuntu 16.04 VM on Google's Compute Engine. I have Apache installed & it's already hosting my domain on HTTP, and I'd like to enable HTTPS.
Steps taken so far:
change the IP ...
0
votes
1answer
46 views
Would nginx allow me to access internal websites from the internet via subdomains without specifying the internal port?
For years I’ve just been forwarding ports from my router to the respective machine’s IP address and using something like http://example.com:9999. But since I’ve been using lots of IoT devices, I’m ...
0
votes
1answer
105 views
Stopping nginx to 30(2|1) redirect for /.well-known location
I'm setting up letsencrypt for two different domains: example.be and example.com
I've got Nginx configured to redirect all example.com/* requests to example.be/de/*
// Block 1
server {
listen 80;...
-1
votes
1answer
51 views
Let's Encrypt Expire Bot showing different date then command line
Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018.
but when I log in to the server, and check the ...
-1
votes
1answer
51 views
Certbot misbehaves by creating a certificate for a domain with “www”
This time when I used certbot it created a certificate for "www.$website" instead of $website. This is not what I need.
Here it is:
$ website="my_website123.com"
$ sudo certbot certonly --...
1
vote
1answer
428 views
Mozilla Firefox - SEC_ERROR_UNKNOWN_ISSUER - Let's encrypt certificate via Certbot - CentOS 7
I have installed Let's Encrypt's SSL certificate for my website using Certbot (CentOS 7).
Every major web browser successfully makes https connection with my web server, except Mozilla Firefox. This ...
2
votes
1answer
239 views
What exactly does Let's Encrypt certbot's `enhance` command?
Let's Encrypt certbot have subcommand enhance that has a description "Add security enhancements to your existing configuration".
The only additional information that I can find in certbot's CLI help ...
1
vote
0answers
20 views
certbot creates a certificate with “wwww” instead of a bare domain one - unlike before [duplicate]
I've been creating certificates this way for over a year:
export website="my_domain1111.com"
sudo certbot certonly --standalone -d $website -d www.$website --email hello@$website
and it's always ...
