Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Filter by
Sorted by
Tagged with
1
vote
2answers
47 views

Is it possible to generate a LetsEncrypt certificate for a private subdomain if the domain is public?

I have a server running on a private subdomain, server.internal.example.com example.com is public but internal.example.com is not. I've used CertBot to generate a certificate for *.example.com but if ...
0
votes
0answers
13 views

Cannot enable SSL with Let's Encrypt certs

I'm running a site example.com using Apache2.4 on Ubuntu 20.04. I've used certbot (1.14.0) to install Let's Encrypt certs successfully. However, I cannot enable SSL for my site. Accessing http://www....
0
votes
1answer
51 views

Debian 10, OpenLDAP, LetsEncrypt, Error 80 trying to add

...I have never had so much trouble enabling secure communications. I believe this to be a valid CA cert chain for Let's Encrypt The contents of /etc/ssl/le/ca-chain.pem -----BEGIN CERTIFICATE----- ...
0
votes
1answer
16 views

SSL Certificate with subdomain on different server

Hi i have specific problem which i haven't faced before because i never had to run different certificate for the same domain and subdomain but other company is requesting to run their own certificate ...
-1
votes
1answer
29 views

Warning on redirecting https://www.example.net to https://example.com

Using Nginx and Let's Encrypt, I have a domain example.com which is secured by Let's Encrypt. I have another domain name example.net which is redirected as bellow : server { listen 80; listen ...
0
votes
1answer
31 views

Is there a way to configure nginx reverse proxy through Restful API

I can configure Nginx Reverse proxy with nginx server blocks by creating and editing configuration files. But its there a way to automate this process and configure reverse proxy entries and Lets ...
1
vote
1answer
33 views

Is .well-known/acme-challenge ever needed after the initial domain fingerprintng?

I understand the initial challenge-response pattern when using Let's Encrypt, but I noticed that when testing renewals, no GET requests were hitting .well-known/acme-challenge. Once the domain/account ...
-1
votes
0answers
27 views

How to make a fault tolerant setup for Flask app with multiple SSL domains?

I have a Flask app that serves for multiple domains. App recognises which template to serve via request host part. So currently this Flask app is deployed on a single VPS running Ubuntu Server with ...
2
votes
1answer
95 views

Nginx + Lets Encrypt + Https redirect

I've spent the last few hours trying to understand what is happening with the nginx location documentation and questions by other people on serverfault (like this one). From everything I gathered, my ...
1
vote
0answers
21 views

Custom domain SSL on elastic beanstalk

Our Multi tenant SaaS application is hosted on elastic beanstalk(EBS). EBS load balancer uses a certificate issued by ACM(Amazon certificate manager) for SSL. We've customers who want to use their own ...
-1
votes
2answers
37 views

IIS: Can connect to website via http but not https

I can connect to my site via http but not via https. In FireFox I get: Secure Connection Failed. An error occurred during a connection to www.example.com. PR_CONNECT_RESET_ERROR In Chrome I getL ...
-1
votes
0answers
19 views

Parse Server slow response time with SSL/TLS Certificate integrated

I've created a Flutter App using the Parse Server Platform as the backend. And currently here's my setup: Nginx web server configured. Cloudflare integrated. SSL Certificate issued (Let's Encrypt - ...
0
votes
0answers
28 views

Wildcard SSL or Automatically Install New Ones?

I'm very new to SSLs and trying to figure out if something is possible to do. I have a VPS with Ubuntu 20.04 and have multiple domains pointing to the /var/www/html directory. Some are pointed using ...
1
vote
0answers
21 views

Configuring CouchDB with Lets Encrypt SSL certificate

I basically have exactly the same issue as configure CouchDB with Lets Encrypt SSL certificate, so have followed this answer. But it's still not working. I've started with the Bitnami CouchDB VM on ...
-5
votes
1answer
192 views

How do I renew my cert? ACMEv1 Brownout in Progress [closed]

I dont know what this means, their website doesn't offer any guides, and googling it doesn't provide any help. My whole website is now inaccessible and I can't fix it. Cert is due for renewal, auto-...
0
votes
0answers
24 views

LetsEncrypt Certificate is updated, but still showing old date on the website (restarted Apache)

Running Apache on EC2 ubuntu server, using letsencrypt certificate, which I see if I run sudo certbot certificates. I manually renewed it and confirmed the dates on the server, but the certificate on ...
0
votes
2answers
26 views

Possible conflict with multiple SSL certificates?

We currently have a SSL certificate for mycompany.com in GoDaddy and they are asking me to get one for our QA department for the URL qa.mycompany.com. I have installed certificates just fine with Let'...
0
votes
0answers
21 views

Gmail connection error pop3 on dovecot postfix server

I configured a Dovecot Postfix mailserver on Ubuntu with letsencrypt certificates. It runs fine on mail clients like MacOS mail both in imap and pop3. No errors. However after adding two accounts to ...
1
vote
1answer
72 views

Nginx with letsencrypt - duplicate value “TLSv1.2”

SSL test capped my result to B because of enabled TLS 1.0 and 1.1. I know I should add such line to my config: ssl_protocols TLSv1.2 TLSv1.3; This is my minimized config: server { root /var/www/...
0
votes
1answer
60 views

DDNS Certificates, Multiple Domains, Let's Encrypt, Certbot, Nginx, Ubuntu

I am a little confused and am looking for some guidance. I am running the latest Nginx on a home machine running Unbuntu 20.04 version 2. I have pfsense as my router/firewall running on a different ...
1
vote
1answer
66 views

New Let'sencrypt certificate ERR_CERT_DATE_INVALID

Ubuntu 20.04 Nginx I obtained a certificate with certbot like sudo certbot --nginx -d pvapp-2021.umwelt-campus.de. And included the paths to the certificate to my two nginx config files (one for the ...
1
vote
1answer
69 views

Thunderbird 'wrong site' error for SSL certificate in port 465

I started to use Thunderbird. While sending emails, it gives an error saying that Sending of the message failed. Unable to communicate securely with peer: requested domain name does not match the ...
1
vote
2answers
49 views

Renew Let's encrypt certificate automatically without stopping nginx hosted on docker

I am using nginx as proxy and SSL termination for the site hosted on docker. App & nginx both are on docker. I have installed Let's encrypt SSL using Certbot directly on Ubuntu server. And now ...
2
votes
1answer
75 views

On CentOS Certbot / Lets Encrypt uses snap to keep SSL certificates up to date. Is there another method that will keep certificates up to date?

Environment: Centos 8, Certbot, Lets Encrypt On CentOS distributions certbot / Lets Encrypt uses snap to keep SSL certificates up to date. Below are the instructions. certbot instructions: Nginx on ...
2
votes
1answer
51 views

certbot on site tunneled to internal network HTTP site

I have a cloud server running Ubuntu 20.04, a configured domain to the cloud server, and a server in my local network serving an HTTP website. I have successfully tunneled my local network server HTTP ...
-1
votes
1answer
37 views

NGINX SSL Certificate based on URI [duplicate]

I have multiple domain names, currently all of them are on a single SSL certificate through Lets Encrypt. However I would like to break them off and get individual certificates for each domain. The ...
0
votes
0answers
33 views

Traefik - Cannot get Let's Encrypt certificate - context deadline exceeded

I got "context deadline exceeded" error while getting Lets Encrypt certificate while installing Traefik, so I cannot get the cert. Port 80 is open and not blocked by iptables or VPS provider....
0
votes
0answers
10 views

Is it possible to run a script on failed certbot renewal?

I'm trying to set up a warning when certbot renewal fails, and I would like to know which certificates have any issues. Is it possible? --deploy-hook won't run when renewal failed, and --pre-hook in ...
0
votes
0answers
72 views

Argo Tunnel certificate causing strange “not signed” issue

Before Argo Tunnels I had the following setup for a particular service running on my local network: DNS entry added to point to my home IP address (test.domain.xyz » 1.2.3.4) Port 443 opened in my ...
0
votes
0answers
58 views

Must a separate virtual host be made for mail subdomains?

I was following this guide which directed me here to get SSL certificates with Let's Encrypt. I successfully added one for my example.com main domain. I realized that my mail.example.com subdomain ...
0
votes
1answer
29 views

Can't find 301 redirect source

I'm running two websites from a Raspberry Pi. Until recently it all worked very well. Then I moved house and now nothing works. I don't think the moving of the house is the issue for various reasons. ...
0
votes
0answers
66 views

EAP Tunnels & WPA3 Certificate Requirement Changes with “Do not validate” and Windows NPS

There are changes afoot to certificate validation requirements from the Wi-Fi Alliance WPA3 standard (e.g. Do Not Validate is no longer an option). These are already being pushed out by Google for ...
2
votes
1answer
600 views

Traefik SSL for a service that runs on non-standard port

Disclaimer: My Docker and my Traefik knowledge is weak. I have several times tried following the Traefik docs and I usually just get confused, possibly because I want to tackle more than the simplest ...
0
votes
1answer
31 views

How to avoid redirect if url match a string in Apache

I have a web server that redirects any HTML 404 error to another domain: ErrorDocument 404 https://error domain My goal if to avoid redirection when Let’s Encrypt tries to renew the certificates. All ...
1
vote
0answers
53 views

GMail not receiving email sent via PostFix

I have a VPN configured with Plesk. (I have installed a SSL/TLS certificate, through Plesk, using Lets Encrypt. Everything seems good as far as I can tell, but I mention it as it also protects emails.)...
1
vote
1answer
185 views

Unable to Create Valid Subdomain on Google Domains

Hello all and thank you for your time. I have a domain that is managed my Google Domains. I Added a subdomain as per Googles Documentation Screengrab - Google Domain I have given it nearly 48 hours ...
2
votes
1answer
154 views

Why OCSP stapling on NGINX for “buypass” DV certs fails without explicit root declaration?

tl;dr For buypass DV certs fetched by certbot I need to explicitly tell NGINX to trust buypass root cert to enable OCSP stapling. This is not the case for Let's Encrypt certificates and I cannot ...
-1
votes
1answer
46 views

Can I create Let’s Encrypt certificate for my domain from macOS? [closed]

I have a domain parking that returns a security error for HTTPS and is not possible to create a Let’s Encrypt certificate on the server, but it is possible to upload a certificate. Would it be ...
0
votes
0answers
61 views

Running multiple instances of Traefik with LetsEncrypt enabled and load balancing between them

As you may know, unfortunately the new version of Traefik does not support HA for lets encrypt certificate management, so I'm looking for some way to achieve this. One way that I'm thinking about, is ...
0
votes
0answers
155 views

Win-Acme / Let's encrypt DNS txt validation?

How do I do the DNS txt record validation? There are simply no tutorial or any info whatsoever about it. I need to bypass regular validation mechanism cause it uses Amazon which is banned here. How do ...
0
votes
1answer
241 views

Cerbot with DNS Plugins running on multiple Nginx for to renew the same certificate

Am trying to deploy using Ansible (Ansible is not really relevant to the question but is just to give the whole picture) the Certbot configuration in order to obtain wildcard certificates to a cluster ...
1
vote
1answer
49 views

How to make Certbot respect Debian standards for certificate deployment?

Certbot seems to manage X.509 certificates and private keys in its own directory structure in /etc/letsencrypt. On Debian-based systems (including Ubuntu, Linux Mint and others) X.509 certificates are ...
0
votes
0answers
39 views

Getting Lets encrypt certificates for subdomains

I have several servers under domain myorg.example.com. For example git.myorg.example.com. I am planning to start using certificates provided by Lets Encrypt for these servers. Most of these servers ...
0
votes
1answer
247 views

Lets Encrypt Auto Renew Quiet Mode Error

I have installed let's encrypt with Nginx configuration with DNS validation mode, As instructed on the documentation to auto-renew, I added the below entry: 15 3 * * * /usr/bin/certbot renew --quiet ...
1
vote
1answer
429 views

TLS 1.0 is obsolete. Enable TLS 1.2 or later. nginx

I have the following nginx configuration under /etc/nginx/sites-enabled/example_com for domain example.com: server { server_name example.com; location / { proxy_set_header X-...
0
votes
0answers
130 views

no ssl configured for the server in OpenResty server

We switched from nginx to openresty just so we could use the lua-resty-auto-ssl plugin to generate SSL certs on the fly for user-owned domains they can plug into our system. Our main site was still ...
0
votes
0answers
261 views

How to host two websites on one AWS lightsail instance

I'm quite new to this whole website thing and I'm looking for some guidance on how to configure bitnami apache so I can have two websites on the same server. I have a domain (which i'll call example....
0
votes
3answers
344 views

OpenLDAP server: chaining of SSL certificates (let's encrypt) does not work as expected

Okay, this is gonna be a long one, I fear. Please bear with me. setting I have an OpenLDAP 2.4.50 server running on Alpine 3.12.1. It's serving LDAPS only with a let's encrypt staging certificate (at ...
1
vote
1answer
110 views

SSL not working Apache, mod already enabled ports already open

I have an issue in production server debian 10 in google cloud platform. SSL not working Apache but these conditions are already fulfilled: mod ssl already enabled firewall GCP already opened. ...
0
votes
0answers
66 views

ERR_TUNNEL_CONNECTION_FAILED for my website after installing new SSL certificate

My website groceryshoptest.com was hosted in Digital Ocean droplets with a Nginx server. I've used free SSL from Lets encrypts certbot, I've just put few commands which added some configuration in etc/...

1
2 3 4 5
14