Questions tagged [lets-encrypt]
Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.
823
questions
0
votes
1
answer
41
views
URL with subdomain and certificate does not work [closed]
Please I need help. I' am looking since weeks for a solution to my Problem. I have installed let encrypt certificate using cloud panel in my Nginx web server. Using https in The main domain of my my ...
0
votes
0
answers
10
views
Duplicating an EC2 instance for creating a development platform for Wordpress site
I have an EC2 instance running Ubuntu hosting a Wordpress site on Apache. I've used LetsEncrypt's CertBot to create an SSL certificate and everything's working fine. I also have direct IP to domain ...
0
votes
1
answer
46
views
Win ACME DNS validation for Google DNS is not working
I am trying to request a LetsEncrypt certificate using DNS validation. My DNS provider is Google DNS. No matter what I do, I keep receiving the following error:
[EROR] File C:\LetsEncrypt\{GCP-...
- 219
0
votes
1
answer
111
views
DST Root CA X3 (Self-signed) - has expired in certificate chain used by Let's Encrypt (Apache/Windows)
Is it safe to remove a self-signed root certificate from the chain; and what, if any, are the consequences of doing that?
And how would I go about doing this on a Windows setup? The instructions under ...
- 264
-3
votes
2
answers
86
views
Creating/Configuring a DNS server with runtime configuration [closed]
I have a big Windows video/audio application that may be controlled remotely over a web server. For that, I can listen to a local port in a, say, 192.168.1.10 system to port 8000, forward the port via ...
1
vote
1
answer
1k
views
Certbot failed to authenticate some domains (authenticator: nginx)
Im running nginx as reverse proxy and for some reason im unable to renew letencrypt certificate, i have tried to upgrade nginx and certbot to latest version. It has worked before and im not sure if ...
- 11
-1
votes
2
answers
98
views
underscore in certbot's TXT record
Certbot is a free and open-source utility mainly used for managing SSL/TLS certificates from the Let’s Encrypt certificate authority. When using Certbot to obtain a certificate through the DNS-01 ...
0
votes
0
answers
94
views
How to manage certificate renewal using win-acme if the folder doesn't exist anymore?
win-acme auto renews SSL certificate by invoking task scheduler task which executes C:\Users\admin\Downloads\win-acme.v2.2.5.1541.x64.pluggable\wacs.exe
Someone deleted that folder from the downloads ...
- 177
0
votes
1
answer
142
views
Nginx emergency: cannot load certificate "/etc/letsencrypt/live/mail.example.com/fullchain.pem". How to fix this Nginx error?
I am running a LEMP email/web server with Ubuntu 20.04. My Nginx user is www-data. I also have roundcube installed in /var/www/roundcube. In my Nginx logs, I am getting the following error:
2023/07/01 ...
- 69
0
votes
0
answers
45
views
Trouble loading wildcard SSL that uses the hostname
I have a wildcard SSL cert from Let's Encrypt, the installation has worked and when accessing a sub-domain the cert loads properly. However the virtual site (Apache) that has no subdomain produces an ...
- 247
0
votes
1
answer
64
views
How to generate SSL certificate on windows machine for use with IIS?
I come from Linux background and have previously hosted websites on nginx. I use certbot to create and install SSL certificate.
I'm trying my hands-on Windows IIS, I have deployed a website on IIS. ...
- 177
0
votes
1
answer
106
views
LetsEncrypt/Certbot Domain Verification with Redirect
Is it possible to 301 redirect from abc.com to a different domain xyz.com during cert creation/validation with certbot and complete the domain verification via xyz domain?
This question was asked in ...
- 143
0
votes
2
answers
226
views
Is letsencrypt registration email address stored in certificate
I'm using letsencrypt in two ways: a docker stack using certbot, and another using traefik (which performs certificate management automatically, using lego). In both cases there's a setting for the ...
- 898
2
votes
1
answer
2k
views
Invalid version when updating certificate with certbot
I have a server with a Let's encrypt certificate installed with certbot. I want to renew it with the following command
sudo certbot renew --force-renewal
but I get an error:
Saving debug log to /var/...
- 21
0
votes
0
answers
251
views
Best way to trigger host to restart a docker container from inside another docker container?
I have a docker container that manages all of the SSL certificates for my services with Letsencrypt. When the certificate for a certain service is renewed, a post-hook script copies the certificate ...
- 9
1
vote
2
answers
213
views
NixOS - Let's Encrypt certificate is not recognized by Traefik (works in Nginx)
I am trying to run a demo Node.js app on a subdomain using Traefik reverse proxy. I am generating the wildcard Let's Encrypt certificate with the security.acme option. When I import the certificate in ...
- 111
0
votes
1
answer
111
views
Traefik as reverse proxy with certbot / lego
When setting up a server I use a reverse proxy and acme tool for dns01 support (I use either nginx + certbot or nginx + lego). I want to start using traefik instead.
I don't understand how traefik ...
- 898
0
votes
0
answers
198
views
"wildcard" ssl certificate for all domains pointing to nginx server
I have a nginx server with the following (simplified) server block:
server {
listen 80;
server_name _;
location / {
root /var/www/html;
index index.html;
}
}
Every ...
- 111
0
votes
1
answer
46
views
Post Fedora Server upgrade to FC38, Apache httpd server no longer honors Lets Encrypt keys
The environment has twins of virtually everything, including two web server / firewall / gateway systems, and they were getting long-in-the-tooth version wise, so I decided to upgrade from Fedora ...
- 1,226
0
votes
1
answer
307
views
LDAP replication to server with Let's Encrypt certificate fails, "unable to get issuer certificate"
I am currently trying to set up LDAP replication between to instances of 389 Directory Server (both running on Fedora 37), which I'll call $SUPPLIER and $CONSUMER in the following (serving at the ...
- 51
0
votes
0
answers
43
views
Letsencrypt + HAProxy SSL Offloading
I am using HAProxy for SSL offloading and letsencrypt certificates. Previously, I was using the tls-sni-01-port flag - which is no longer supported.
Does anyone have a recipe that has been working in ...
- 239
0
votes
0
answers
835
views
Auto renew LetsEncrypt cert with nginx under Docker
I'm having troubles setting up a auto renew for LetsEncrypt certificates.
I run nginx under Docker container that serves Django application.
Here is my docker-compose file:
version: '3.8'
services:
...
- 1
3
votes
1
answer
574
views
Let's Encrypt certificate on SQL Server 2019 - "The target principal name is incorrect"
Summary
I'm having trouble getting a certificate issued by Let's Encrypt R3 to work on SQL Server 2019. When using the certificate for SSL but not trusting the server certificate explicitly (In SSMS, ...
- 31
0
votes
0
answers
149
views
wget doesn't accept HTTPS certificate (from letsencrypt) on some computers but does on others
I have the following situation:
On my www server (Apache2, Debian armhf) I have HTTPS certificate from letsencrypt.org by certbot.
When accessing the server from a browser (Firefox, Chromium) ...
0
votes
1
answer
326
views
certifcate not valid, but certbot says it is
https://licoriceicecream.com/ : expires Monday, 1 May 2023 at 14:43:01
but sudo certbot renew
Processing /etc/letsencrypt/renewal/licoriceicecream.com.conf
- - - - - - - - - - - - - - - - - - - - - - ...
- 460
0
votes
1
answer
325
views
Generate SSL certificate with let's encrypt (dns-01 challenge)
I'm trying to generate an SSL certificate with Ansible for *.rasp.example.com and rasp.example.com.
I already have a "working" solution (No errors when deploying), but when I try to compare ...
- 31
0
votes
0
answers
271
views
Traefik on Synology: LetsEncrypt says it has DNS issues but the certificate file looks valid
My curent Network:
Router - 192.168.1.1 (static)
Windows PC - 192.168.1.10 (static)
Synology NAS - 192.168.1.11 (static)
DockerPihole - 192.168.1.12 (macvlan-static)
DockerUnbound ...
- 101
-1
votes
1
answer
306
views
SSL cert fails when subdomain is an A Record of another host
Please excuse any wrong terminology here. If it feels I'm using the wrong term, I possibly am.
Previous scenario:
I have a domain and subdomains DOMAINA, * .DOMAINA on my domain
provider, pointing to ...
- 153
1
vote
1
answer
92
views
acme.sh script to include the webmail subdomain on a shared (Namecheap) server
For a long time I have used acme.sh to create 90-day SSL certs for my example.com domain. Never had a problem.
However, I now wish to start using the webmail interface (webmail.example.com - included ...
- 348
0
votes
1
answer
5k
views
Unable to renew Let's Encrypt SSL certificate in Nginx Proxy Manager
I've set up a few sites in Docker, on Linode.
I started by following these instructions:
Connect Your Docker Containers to Domain Names For Easy Access using Portainer on Linode
The steps I followed ...
- 193
0
votes
0
answers
61
views
Could not find the alias s1as in the key store
I get the following error
remote failure: NCLS-SECURITY-05200 : org.jvnet.hk2.config.TransactionFailure: java.lang.RuntimeException: java.lang.IllegalArgumentException: Could not find the alias s1as ...
0
votes
1
answer
39
views
Connection is not secure, only on mobile Certbot / LetsEncrypt
I have linked a service on my server through this reverse proxy
var httpProxy = require('http-proxy');
var fs = require('fs');
httpProxy.createServer({
...
- 1
0
votes
0
answers
50
views
Linux user access to file that is a soft link
I'm using Certbot to implement LetsEncrypt generated certificates on a Debian 11 server. Certbot was run/setup while logged in as root. This solution creates two files, fullchain.pem & privkey.pem,...
- 155
0
votes
0
answers
324
views
cert-manager failing to generate certificate in kubernetes, how to fix that?
In the aks cluster, the helm chart I installed:
Chart got from link
And the ingress chart I used
helm repo add jetstack https://charts.jetstack.io
helm repo update
helm upgrade --install \
cert-...
- 155
13
votes
1
answer
4k
views
Why does my Let's Encrypt certificate contain references to Cloudflare?
I own a website that uses a Let's Encrypt certificate. It's not behind Cloudflare, it's hosted at OVH and I'm accepting direct traffic from it.
Now, I set up an apache2 webserver and used certbot to ...
- 143
0
votes
2
answers
96
views
nginx as a web proxy with ssl
I have installed proxmox and am running a simple ubuntu server where I have installed nginx. How and where do I setup ssl? I only want to use nginx to forward location to another web server. Can I set ...
- 215
0
votes
1
answer
87
views
Getting not secure warning for www domain
I installed lets encrypt using certbot when I go to the www.domain.com I get this site is not secure error
Found the following certs:
Certificate Name: example.com
Domains: example.com
...
- 1,329
2
votes
1
answer
1k
views
Automate renewal of let's encrypt ACME-DNS challenge with unbound
I changed from a certificate with multiple explicitly defined subdomains to a wildcard certificate. For this to work, the DNS-01 challenge needs to be solved. I have a very basic unbound DNS server ...
- 63
2
votes
2
answers
2k
views
How can I make SSL Lets Encrypt certificate auto renew on Ubuntu
How can I make the certificate for vgo site to auto new every time so I don't have to renew it manual or it will auto renew itself?
ssl_certificate /etc/letsencrypt/live/www.site.com/fullchain.pem; # ...
0
votes
2
answers
424
views
Issue valid HTTPS certificates for intranet subdomains with letsencrypt
I'm trying to provide secure services on my home intranet. Up to now I've used self-signed certificates with a made-up domain example.foo, with a subdomain for my separate systems (e.g. srv1.example....
0
votes
0
answers
711
views
K8s : nginx-ingress: SSL_do_handshake() failed (SSL: error:191CF08C:SSL routines:tls_parse_ctos_key_share:bad key share)
As we found out that the nginx ingress as well as the cert-manager were outdated and not compatible with the Kubernetes version of 1.22 anymore.
I upgrade the two components: nginx-ingress from 0.26.1 ...
- 59
1
vote
0
answers
160
views
Fedora Server 37 CA certificate store most equivalent to LocalMachine\root
Fedora Server 37 CA certificate store most equivalent to LocalMachine\root in a Windows environment?
Background notes: I have plenty of experience in the Windows area for certificate management, but ...
- 308
0
votes
1
answer
132
views
Why I see all Vhost domain names in SSL certificate, what did I do wrong?
I have a VPS that hosts 2 websites, and I have 2 domains, domain1.com and domain2.com
Server Nginx running on Ubuntu 20.04
I installed certbot and nginx according to their instructions and CA is ...
- 103
1
vote
1
answer
349
views
Cross-signed (Let's Encrypt) SSL chain validation
Note: I spent like 30 minutes writing/formulating this question, and it turned out into a rubber ducking session. Realised what I was doing wrong, but posting this anyway as it might by useful for ...
- 211
0
votes
0
answers
119
views
Hosting application on Windows Server running IIS and want to redirect website to application using a port
I am running Uptime Kuma on our server and it's using a port 1234 for instance. I can access the application by going to https://myserver.com:1234 but the certificate is invalid. I'd like to access ...
- 226
1
vote
1
answer
353
views
SSL alternative names mismatch
Santander want to use our website, however when trying to access it they receive the following error:
'Network Error: Your request contacted a host which presented a certificate signed by an untrusted ...
- 11
0
votes
0
answers
33
views
HAProxy balance API
I have use many hour to search and learn the HAProxy config but i can't make the desired result in any way.
I'll explain my scenario.
I have three different server:
api1.test.eu 10.20.30.130:8764
api2....
- 1
0
votes
1
answer
254
views
Changing the issuer (from HTTP01 to DNS01 ACME verification) of a certificate in cert-manager
I have a certificate managed by cert-manager, on a Kubernetes cluster. It used to be renewed/validated via a HTTP01 ACME challenge but, because of security constraints (a firewall), that's not ...
0
votes
1
answer
398
views
Docker containers not accessible from internet (using jwilder's nginx+letsencrypt solution)
I have been using the jwilder's nginx + letsencrypt solution to access my containers online.
Last week my server crashed and after a restart, I couldn't access any of my containers from the internet. ...
- 101
2
votes
3
answers
991
views
How to troubleshoot ERR_SSL_VERSION_OR_CIPHER_MISMATCH on server with nginx reverse proxy and let's encrypt?
I have a server (Debian 9.13) with several websites running in Docker containers with nginx (1.13.12) as a reverse proxy.
The websites are under two domain names : alchimie-web.com and ...
- 41