Questions tagged [lets-encrypt]
Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.
379 questions
0
votes
1answer
22 views
How to handle nginx container creating Letsencrypt keys and then use them?
I have a docker image, which creates containers for my web app. The details of the web app don't matter at all. What matters is that each time, the container can use a different address ( server1., ...
0
votes
1answer
31 views
Install Let's Encript in a custom docker container
I'm trying to get https enabled on a web server (apache) already running in a custom docker instance for a specific web app. The container seems to be running Alpine Linux. Before a few weeks ago, I ...
2
votes
4answers
120 views
+50
Terminating SSL at Cloudflare level. Do I get performance gains?
I saw in a post that terminating SSL at Cloudflare level and HTTP only traffic from Cloudflare to origin gives a performance boost since SSL is negotiated only at the edge.
I run a website (mostly ...
1
vote
1answer
39 views
Why is my ssl certificate self signed?
I followed the following steps to install an ssl-certificate on a website; https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-centos-7. However, the website is ...
0
votes
2answers
32 views
Nginx certbot cronjob not working
I have installed certbot with the nginx module. Today I noticed that the cron that is installed automatically did not work. The cronjob in question is
/etc/cron.d/certbot
and the content was
0 */12 ...
0
votes
1answer
45 views
Let's Encrypt 404 error on Google Cloud - Compute Engine - VM Instance
I'm setting up my Ubuntu 16.04 VM on Google's Compute Engine. I have Apache installed & it's already hosting my domain on HTTP, and I'd like to enable HTTPS.
Steps taken so far:
change the IP ...
google-cloud-platform
0
votes
1answer
23 views
Would nginx allow me to access internal websites from the internet via subdomains without specifying the internal port?
For years I’ve just been forwarding ports from my router to the respective machine’s IP address and using something like http://example.com:9999. But since I’ve been using lots of IoT devices, I’m ...
0
votes
1answer
15 views
Stopping nginx to 30(2|1) redirect for /.well-known location
I'm setting up letsencrypt for two different domains: example.be and example.com
I've got Nginx configured to redirect all example.com/* requests to example.be/de/*
// Block 1
server {
listen 80;...
-1
votes
1answer
37 views
Let's Encrypt Expire Bot showing different date then command line
Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018.
but when I log in to the server, and check the ...
-1
votes
1answer
46 views
Certbot misbehaves by creating a certificate for a domain with “www”
This time when I used certbot it created a certificate for "www.$website" instead of $website. This is not what I need.
Here it is:
$ website="my_website123.com"
$ sudo certbot certonly --...
0
votes
1answer
45 views
Mozilla Firefox - SEC_ERROR_UNKNOWN_ISSUER - Let's encrypt certificate via Certbot - CentOS 7
I have installed Let's Encrypt's SSL certificate for my website using Certbot (CentOS 7).
Every major web browser successfully makes https connection with my web server, except Mozilla Firefox. This ...
2
votes
1answer
56 views
What exactly does Let's Encrypt certbot's `enhance` command?
Let's Encrypt certbot have subcommand enhance that has a description "Add security enhancements to your existing configuration".
The only additional information that I can find in certbot's CLI help ...
1
vote
0answers
20 views
certbot creates a certificate with “wwww” instead of a bare domain one - unlike before [duplicate]
I've been creating certificates this way for over a year:
export website="my_domain1111.com"
sudo certbot certonly --standalone -d $website -d www.$website --email hello@$website
and it's always ...
0
votes
1answer
63 views
letsencrypt certificate with windows / exchange server
I try to install and then renew Letsencrypt certificate with Exchange server for owa and activesync. Windows Server 2008 R2 with Exchange Server 2010. (Which will be upgraded to more recent version ...
1
vote
2answers
66 views
How to setup LetsEncrypt SSL for multiple websites hosted on CentOS 7?
I have a CentOS 7 Server with Apache. Currently there are multiple websites hosted on Virtual Server as "Top Level Server" and "Sub-Server" using VirtualMin, i.e., Multiple Virtual Servers in Apache ...
0
votes
0answers
64 views
Letsencrypt expired certificate renewal failure (NGinx)
I'm hosting a website on AWS. I created SSL certificates through letsencrypt for my domain xxxxx.com as well as www.xxxxx.com. (Throughout this post I'm putting 'xxxx's for potentially sensitive ...
1
vote
1answer
135 views
Nginx Reverse Proxy + Let's Encrypt
I have two VM's. One running LEMP and one running grafana.
I have configured nginx on LEMP to serve as a reverse proxy for various VMs in my lab including the VM with grafana.
It works great, but i ...
0
votes
0answers
137 views
Certbot-auto not renewing on cron job
I have the following set up via cron:
/usr/sbin/certbot-auto renew --force-renew --quiet --post-hook "/sbin/service httpd reload" >> /var/log/letsencrypt/letsencrypt.log 2>&1
I found ...
0
votes
2answers
50 views
Export client certificate from Let's Encrypt certificates
I'm running Debian and have certbot for creating Let's Encrypt certificate.
I act as client towards a TLS server, and needs to handover my client certificate for approval.
I've got the following ...
0
votes
0answers
44 views
How can I fix a 301 redirect loop using nginx on Amazon Lightsail after running Certbot?
I just deployed a Laravel app to a Lightsail server, and it was working fine until I ran certbot to enable SSL then I got a redirect loop.
here is my site's nginx config.
server {
listen 443 ssl ...
0
votes
1answer
23 views
Is it correct to see certificate from another domain in case of missing cert? [duplicate]
I have 3 sites defined in apache, site1, site2, site3
For 1 and 2 I requested ssl certs from Let's encrypt and work OK, but NOT for site 3.
Problem is that whenever I access https://site3 I always get ...
0
votes
3answers
62 views
Multi-domain certificate failing for one domain
I've been hosting some nginx servers with letsencrypt SSL certificates.
domain-a.org is on server 1 with it's own certificate.
sub.domain-a.org is on server 2 with it's own certificate
At first ...
0
votes
1answer
78 views
Redirect from example.com to www.example.com if a certificate for example.com is invalid
I have no valid SSL certificate for my "example.com".
I can't issue/renew a certificate for "example.com" at the moment.
However, I have a valid one for "www.example.com"
I want all the requests, ...
1
vote
1answer
100 views
ngnix: .well-known acme-challenge security warning
First, I am not sure if this is right place to put my question. But it relate to ngnix configuration done by certbot on my server. It add following line for domain in configuration
location ~ "^/....
0
votes
1answer
76 views
Certbot and letsencrypt: after renewing my certificate has 2 weeks more of validity instead of 3 months
My letsencrypt certificate will expire soon. I ran "certbot" to renew it for the next 3 months:
$ sudo certbot certonly --standalone -d $website --email admin@$website
Saving debug log to /var/...
0
votes
0answers
12 views
Mod-pagespeed ssl path
When cofiguring mod-pagespeed from google i can not get clear what path i should use for the ssl folder.
I can’t find a example for Let’s Encrypt.
The standard config is:
The locations of SSL ...
0
votes
1answer
261 views
Traefik + k8s + Let's Encrypt wildcard SSL + Cloudflare issue
I'm trying to set-up a reverse proxy with wildcard SSL using Traefik, with a DNS challenge against a Cloudflare zone.
I have this config in k8s:
kind: ConfigMap
apiVersion: v1
metadata:
name: ...
0
votes
0answers
25 views
Docker generating SSL certs error
I'm trying to generate certificates with the letsencrypt image and save them to a named volume but I'm having issues. It's only generating the certificate for the top level domain, not any subdomains....
0
votes
1answer
48 views
Reverse proxy to localhost:xxxx only work for http and not for https
I have the following configuration that works for http:
server {
listen 80;
listen [::]:80;
server_name subdomain.domain.tech;
location / {
proxy_set_header X-Forwarded-...
1
vote
1answer
173 views
Configure Apache with Lets Encrypt SSL Certificates leads to “SSL_ERROR_RX_RECORD_TOO_LONG”
I'm running Apache 2.4.25 on a Raspian (Raspberry Pi) server.
I wanted to set up SSL certificates for the server, so I ran the following commands to get certbot:
sudo apt-get update
sudo apt-get ...
1
vote
1answer
167 views
Using Let's Encrypt Wildcard Certificate on Multiple Servers
I have a series of subdomains that are a part of a root domain I manage. I have set up certbot on one of these domains: x.example.com and it is successfully using the certificate and renewing it ...
0
votes
1answer
94 views
Cname domain forwarding and letsencrypt ssl certificates
I have 5 domains viz.
main.com
sub1.com
sub2.com
sub3.com
sub4.com
I have pointed the CNAME records of
sub1.com to sub1.main.com
sub2.com to sub2.main.com
sub3.com to sub3.main.com
sub4.com to ...
0
votes
1answer
37 views
Amazon Linux + SSL + vhosts
I have a new test instance that I have setup with LAMP and SSL.
I have the following in my /etc/httpd/conf/httpd.conf file
<VirtualHost *:80>
ServerAdmin webadmin@ohanacruises.com
...
0
votes
0answers
82 views
Let's Encrypt error with Amazon Linux with virtualenv
I download certbot-auto and ran
./certbot-auto certonly --standalone -d domain.com -m tech@domain.com --agree-tos -n --debug
I get below error that it is looking for virtualenv==15.1.0 but ...
2
votes
1answer
63 views
Is it possible to change the expiry threshold for expiring certificates in Exchange? (Event 12018)
We've recently switched to using LetsEncrypt for our Exchange certificates, which have a maximum validity of 90 days.
Unfortunately this means I'm being pestered with tickets generated by our ...
0
votes
0answers
55 views
Automatically renewing let's encrypt for Access Anywhere using “certify the web”
I followed this tutorial in order to automatically renew a "Let's Encrypt" certificate using the free software "Certify the web" on a Windows Server 2016 Essentials.
The certificate is renewed ...
0
votes
0answers
197 views
Managed Security: DNS records could not be found. Certificate activation will retry automatically
I am trying to turn on 'managed security' for my google app engine project, as shown in the following screenshot.
The domain name is uat.mycompany.com. It is a subdomain and the CNAME is managed by ...
0
votes
1answer
52 views
Apache serves certificate from different domain
I have a server with an Apache (2.4.25) webserver for multiple domains and their subdomains.
Currently I configured every VirtualHost File with the same structure, generated a SSL certificate for ...
0
votes
1answer
22 views
Reconfigure certificates or edit certificate information
Necessary details first:
OS - Ubuntu 16.04 LTS
System: Digital Ocean droplet
I attempted to set up a self-signed certificate for SSL verification using Let's Encrypt. In either haste or ...
0
votes
1answer
101 views
Tomcat8 doesn't detect Letsencrypt renewed certificate (but Apache does)
I have an Ubuntu 17.10 Server with Apache 2.4.27 and Tomcat 8.5.21, both serving through HTTPS thanks to a Letsencrypt Certificate. It's been working fine for 3 months and automatic renewal (with ...
1
vote
1answer
64 views
How to recreate let's encrypt certificate with public key from the past?
So what we have is an invalid let's encrypt certificate, when we try to renew it, public key changes. Is there a way to preserve the old public key? Our clients have it implemented for SSL pinning ...
0
votes
1answer
123 views
nginx load balancer w/ https and lets encrypt cert renewal
I have a small Linux VPS instance set up with nginx to proxy requests as a load balancer to multiple application servers.
All traffic is coming into https://app.example.com proxied to those upstream ...
1
vote
1answer
94 views
Does nginx have something like apache's mod_macro?
I need to be able to manage thousands of domains in nginx, and each domain will have a lets-encrypt certification that I will manage.
I was reading how apache has a macro feature that lets you do ...
0
votes
1answer
251 views
SSL Certificate Issuing with No-IP DDNS & apache2 server & Let'sEncrypt Certbot: Conflicting info & Not working
The title is pretty explanatory regarding the tools I am using but I will try to elaborate further:
I have a No-IP DDNS that is publicly accessible
Port forwarding is configured for port 80
The ...
0
votes
0answers
23 views
Issuing multiple ssl certificates
I was having some issues routing www to a non www url in nginx and i ended up deleting the entire letsencrypt folder. Now I am getting a CAA iusse failure when trying to run certbot again. Is there ...
2
votes
1answer
63 views
Let’s Encrypt certbot cannot complete verification due to Nginx server config
For an application I need the following line in my location block:
rewrite ".*" /server.php break;
This causes certbot fail to verify the domain. To install the SSL cert I commented that line and ...
2
votes
1answer
43 views
DNS hostname no longer resolves if a sub-hostname has been defined
I have trouble understanding a specific effect in DNS name resolution for subdomain names that came to light when enabling lets encrypt.
The context of my question:
I have a domain (basjes.nl) and I ...
2
votes
1answer
155 views
How to auto-renew LetsEncrypt Certs with a Dockerized Instance of Apache?
We have some dockerized PHP applications with custom docker images so that the PHP mail() function actually works.
When we build the images, we are COPYing the certs into the image at build time. ...
1
vote
0answers
47 views
Have I installed 2 SSL letsencrypt certificate?
Since yesterday, I was trying to install letsencrypt certificate on one of my subdomain text.example.com. Since example.com already had it, first I tried to "extend" it by adding another subdomain ...
0
votes
1answer
196 views
lighttpd proxy all except .well-known for letsencrypt
I want to configure lighttpd to accept requests from letsencrypt service for cert renewal, but I have a problems with the configuration because it's using as proxy server, so my /.well-known is not ...
