Questions tagged [lets-encrypt]
Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.
588
questions
0
votes
1answer
29 views
How to fix LetsEncrypt renewal failing with error “Unable to reach credentials server”?
I have successfully acquired a certificate using Win-Acme installed on Windows Server 2012. The software is setup to renew using the Route53 plugin to automatically verify ownership via DNS. Win-acme ...
0
votes
1answer
17 views
SSL: is it possible to use a certificate for a specific subdomain and a wilcard for all other sub domain?
I have a domain, say domain.com.
I have some random subdomains which all point to the same server. (eg: user-00.domain.com, user-01.domain.com, etc.)
I also have some fixed sub domain names, let's ...
0
votes
1answer
25 views
How to install SSL certificate for domain and subdomain
I want to install certificate on EC2 for domains and subdomains.
I'm running a website "www.example.in" on single EC2 instance which is in public subnet with public IP and also pointing some ...
0
votes
1answer
29 views
Can we use CA signed certificate like let's encrypt in softether vpn server?
I am trying to attach let's encrypt certificate to my softether vpn server, But didn't found a way for it. Can we use CA signed certificate like let's encrypt in vpn server ? If yes, then please ...
-1
votes
0answers
37 views
How to get lets encrypt ssl for custom domain? [closed]
I am working on a web app where user's can create a profile and map custom domain to their profile.
If user's link is: webapp.com/user,
user can map: userdomain.com to that profile.
So far I have ...
0
votes
1answer
39 views
Old LetsEncrypt SSL certificate still being served by EC2 instance
I'm working on renewing the SSL certificate for my websites. They are all running on the same EC2 instance with the same Apache server. Two of my domains recently expired so I also tried to remove ...
6
votes
2answers
937 views
Wildcard SSL with LetsEncrypt gives error
I want to create wildcard SSL for my website via LetsEncrypt. I followed the instruction and after running Certbot, it gives me a DNS challenge and says:
Please deploy a DNS TXT record under the name
...
0
votes
1answer
17 views
How to lets-encrypt several virtual servers on apache
I host several instances of the same ruby on rails application via passenger on an Apache server. In the past these applications have been made available via separate Domains. But
now I received a ...
1
vote
1answer
38 views
ejabberd STARTTLS setup on port 5222
I just installed and setup the docker ejabberd/ecs image on an ubuntu 20.04 aws instance.
I have ports, domain name and users setup and working.
On the host (ubuntu) I generated Let's Encrypt ...
1
vote
3answers
159 views
Unable to use LetsEncrypt - CertBot - When HTTP to HTTPS redirect is setup
I am trying to configure CertBot and it only works when I serve my site over http. Usually I have an https redirect and I don't want to have to change the site config each time I need to use certbot. ...
0
votes
0answers
125 views
Exposing port http and https to the docker container but still can't communicate
Edit #3:
fix by disabling FirewallD. It turns out because of my lack of understanding about CentOS. I did not have this problem before because Alibaba Cloud decide it is best to just disable ...
-1
votes
1answer
18 views
Problems with TXT record in combination with other Records
I have currently the following DNS setup.
Domain: domain.tld
Example IPv4: 1.2.3.4
Example IPv6: fe80::1
Host Type Destination
* A 1.2.3.4
* AAAA fe80::1
This setup works perfectly as expected. If ...
0
votes
0answers
14 views
How to add SSL certificates for multiple VPS (Shared Hosting Servers) with the same primary domain?
I am planning 3 VPS shared hosting servers.
Of particular focus in this question...they are also acting as mail servers.
host1.mydomain.com
host2.mydomain.com
host3.mydomain.com
(where "mydomain" ...
0
votes
1answer
61 views
Let's Encrypt with Bitnami, with some odd port numbers
I recently (and I think it was on either ServerFault, StackOverflow, or some other StackExchange forum) found out that Bitnami stacks provide a tool for using Let's Encrypt, one that apparently uses ...
0
votes
0answers
17 views
letsencrypt non ssl domain showing , ssl domain home page
I have 6 domains in my vps server.In that 4 domains has letsencrypt ssl and two domains doesn't have ssl since client dont want.
for example ssl domain
https://john.com
for example non ssl domain
...
1
vote
1answer
40 views
Let’s Encrypt Certbot: How to use HTTPS for the server validation
When using Let’s Encrypt Certbot, the Let’s Encrypt server makes a HTTP request to the temporary file on the web server to validate that the requested domain resolves to the server where certbot runs.
...
0
votes
0answers
25 views
Configure Let's Encrypt renewal on Amazon Lightsail nginx (bitnami)
I need to schedule automatic renewal of my website's TLS certificates. I use Let's Encrypt in Amazon Lightsail Bitnami nginx environment. I configured it using the instructions on Amazon Lightsail's ...
0
votes
1answer
207 views
Http-01 Challenge failed and Connection refused
I just bought a new server, and want to follow this for www.pretty-formula.com.
Here is the record I added to pretty-formula.com:
In the server, ufw status returned Status: inactive.
After putting ...
1
vote
1answer
128 views
Nginx 301 redirect with nginx-proxy and nginx-proxy-companion
I'm using something like this docker-compose.yml file.
version: '3'
services:
httpd:
image: httpd:alpine
environment:
- VIRTUAL_HOST=example.com,www.example.com
- ...
0
votes
1answer
30 views
How do I setup lets encrypt for an Azure Linux Service Web App
There are plenty of guides on how to set up Lets Encrypt for Azure Windows Web App Services, but I can't find any at all for Linux based services.
Here are two example of such tutorials (that ...
4
votes
1answer
390 views
Is the subdomain _acme-challenge protected?
I was looking into the DNS-01 challenge of Let's Encrypt; and I had a question about the sub domain process [1].
Let's say, the website example.com gives away free subdomains; what stops me to ...
0
votes
1answer
98 views
How should certificates for multiple separate sub-domain servers be issued/renewed with Let's Encrypt?
Upgrading my home infrastructure to learn as well as be more secure, I have not been able to find out how best to get certificate(s) issues and installed across my servers, which comprise:
Firewall (...
0
votes
0answers
9 views
Cloudflare stops website working as it is enabled
My website is usign Cloudflare to manage its DNS records. I've installed SSL using LetsEncrypt on my website and everything works well when Cloudflare is disabled. As I enable Cloudflare, my website ...
5
votes
2answers
917 views
Let's Encrypt Certificate for Internal Site
I am hoping to clear up some confusion I have regarding the use of Let's Encrypt for an internal site/application. I have not been able to find this information elsewhere.
I want to use Let's Encrypt ...
0
votes
1answer
97 views
Letsencrypt for all subdomains *.example.com [duplicate]
I'd like to obtain one certificate working for all my subdomains *.example.com.
This works:
certbot-auto certonly --webroot --webroot-path /home/www/example/ --domain example.com
...
0
votes
0answers
22 views
SSL certificate valid in Chrome but not in Firefox
I have installed an ssl certificate with letsencrypt (actually, my provider has an automated workflow for this which I used).
As the title says: in Chrome (Chromium in Linux) it says that it is safe. ...
1
vote
1answer
33 views
Nginx match path on any domain name
I want to configure nginx so that a specific path on every domain name routes to a certain location. The use case is I want to be able to point lets encrypt at this location to drop the verification ...
0
votes
1answer
70 views
LetsEncrypt certificate for nested wildcard subdomain [duplicate]
I've generated Lets Encrypt wildcard certificate for my domain *.domain.com.
I thought this certificate is valid for any nested subdomain *.*.domain.com, like it.*.domain.com or fr.*.domain.com. But ...
0
votes
1answer
35 views
How soon can a let's encrypt certificate be successfully renewed?
Figured a simple Google search will have the answer on top but apparently I can't find it.
I understand one can try let's encrypt renewal every day without penalty but what is the soonest a ...
0
votes
1answer
71 views
LetsEncrypt ACMEv2 updates with CertifyTheWeb
I have a number of Windows 2016 servers configured with CertifyTheWeb's LetsEncrypt application. This secures a number of IIS certs.
I've received a notification that the ACMEv1 protocol is due to be ...
0
votes
1answer
56 views
nginx http (from android app) does not work. Https is working fine, and http was/is working fine in apache
Update: Sorry, my bad. For android 8+ we should have clartextTraffic=true in androidManifest.xml for http to work. This was done/present in my app but after enabling https and domain setup, I deleted ...
0
votes
0answers
16 views
Certbot: How to replace an existing server with the same SSL certificate?
I'm sure this must be a common problem.
I have a server that is already running with a functioning certbot, that validates the certificates every 90 days.
I would like to replace the server with ...
0
votes
0answers
169 views
MisconfigurationError: nginx restart failed
I had to unplug my server in the middle of a TLS certification renewal and now I'm getting this error, I'm not sure what I can do to fix it... Any help would be appreciated.
Waiting for verification.....
0
votes
0answers
35 views
GitLab always uses staging certificates from LetsEncrypt
I'm running my GitLab on AWS, deployed in a Docker container (currently using gitlab/gitlab-ce:12.8.1-ce.0). I enabled Let's Encrypt as follows in the docker-compose.yml:
environment:
...
-1
votes
1answer
292 views
Postfix 3.4.9 SSL issues — no shared cipher from servers using TLSv1
Edit 1: I've narrowed it down to TLSv1 that both servers listed below (no others have failed yet) are attempting to use. I'll be contacting their webmasters requesting they stop using an insecure ...
0
votes
1answer
868 views
How can I retrieve my Let's Encrypt registration's current email address?
I understand that Let's Encrypt maintains an email address as a registration and recovery contact for every "account." This email address is used to notify the owner of the certificates of upcoming ...
0
votes
0answers
82 views
“Page isn’t redirecting properly” issue after I updated Let's Encrypt SSL using certbot renew --force-renewal
I have a strange "The page isn’t redirecting properly" issue after I updated Let's Encrypt SSL with certbot renew --force-renewal due to the LE bug.
The site redirects from http to https, but then ...
0
votes
1answer
269 views
How to install letsencrypt wildcard certificates?
I am using certbot/letsencrypt from the EPEL repository with apache on CentOS 7 without any issues on "normal" domain names. The certbot tool recognizes server name aliases from the virtualhost config ...
0
votes
1answer
44 views
Apache HTTP to HTTPS Redirect working for alias but not server name
I have created an SSL certificate using Let's Encrypt.
The certificate has been installed and is referenced in the Apache config file.
The Apache config provides a ServerName (e.g., example.com) and a ...
0
votes
1answer
37 views
What is the proper procedure to replace an existing paid certificate with lets encrypt
I have a paid certificate that's about to expire soon.
I would like to use lets encrypt cert in replacement of this one.
What is the appropriate procedure to do this?
Info:
- CentOS 6.3
- Apache 2....
1
vote
1answer
42 views
Is it possible to have many domains on the same server with as many certificates?
In my nginx configuration website.conf I would like to have something like this:
server {
listen 443;
server_name firstdomain.com seconddomain.com;
...
ssl_certificate /etc/...
0
votes
0answers
208 views
How to dynamically set SSLCertificateFile for user's custom domains
I have a site where users can point their own custom domain to their unique directory on my site through A Records.
For example, example.com points to mysite.com/something and anothersite.org points ...
0
votes
1answer
561 views
Kubernetes not regenerating SSL Certificate
I have tried and tried many different things, and I'm unable to land into a solution. The certificate was issued once using letsencrypt, but was never refreshed. Could you people give me a hint on ...
0
votes
1answer
23 views
Certbot wildcard with apache but none of the listed DNS providers
On the official certbot documentation for apache (https://certbot.eff.org/lets-encrypt/ubuntubionic-apache.html), it says you should do
sudo apt-get install python3-certbot-dns-<PLUGIN>
...
0
votes
1answer
165 views
Which Let’s Encrypt clients support ACME v2 in the official Debian Buster repos?
The ACME protocol version 1 is deprecated and will stop working with Let’s Encrypt in multiple steps from 2019 to 2021. See https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430
I’ve ...
0
votes
2answers
109 views
Dovecot Unable to access letsencrypt certificates on LEMP server
I am attempting to setup postfix and dovecot on a LEMP server. I am using letsencrypt certificates. I suspect I am having a permissions problem because I cannot access the /etc/letsencrypt/live folder ...
0
votes
0answers
31 views
Apache 2.4 sending expired ssl cert despite new cert being installed and configured
So today, completely out of the blue, one of the vhosts on my webserver started throwing SSL Cert out-of-date errors when I browsed to it. This is Very Odd™ as I have automatic renewals every two ...
0
votes
0answers
170 views
Failed redirect for at.com Unable to set enhancement redirect for at.com SSL apache centos 7
i tried to using let's encrypt SSL and install it using certbot certbot --apache -d at.com -d www.at.com -d destmap.at.com -d to.at.com. but it can't. i got this error
Failed redirect for at.com
...
0
votes
0answers
75 views
Running into an issue trying to use certbot to create an SSL cert for my server
While I have done this before, I do not recall running into this issue, so I don't understand what step I am missing.
I am trying to create an SSL cert for my server using certbot however, where I ...
2
votes
3answers
1k views
Certbot error no attribute TLSSNI01 / cert-revoke status code 400
I am trying to create and install a Let's Encrypt SSL certificate using certbot. It's for a subdomain named private.mydomain.de (on a different server than mydomain.de). Certbot aborts with the ...
