Questions tagged [lets-encrypt]
Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.
0
votes
0answers
17 views
How to set TXT TTL to 1
I am trying to verify my domain ownership to Let's Encrypt by adding a TXT record to mydomain.zone located in /var/named. Let's Encrypt wants me to add it with a TTL of 1 second. However, I find no ...
0
votes
0answers
35 views
Connection Closed after switching IPs with new SSL Certificate
I recently installed a couple SSL certificates on a few domains, and generally they work, but whenever I switch IP addresses I get an ERR_CONNECTION_CLOSED error. If I refresh a few times, it will ...
0
votes
1answer
17 views
Deleting Cerbot-issued certificate
I have a production server. I created an exact copy of that server for development.
example.com (Production Server)
dev.example.com (Development Server)
Because it is an exact replica, it also ...
0
votes
1answer
41 views
How to complete certificate chain last node
I am running my own RocketChat latest version on Docker. And on top of it I have Nginx as a reverse proxy running Certbot to do a https. It works perfectly fine with Firefox web browser on Android and ...
0
votes
0answers
9 views
iptables blocks port-forwarded requests to port 80
My iptables rules are:
-P INPUT DROP
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-A INPUT -s 192.168.2.0/24 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A ...
0
votes
0answers
8 views
modern installation of Tomcat with SSL on port 443
In the computer course I'm writing I'm using Tomcat for the server. (Students learn how to set up CentOS and everything from scratch. Currently the course has them using Tomcat running on port 8080.) ...
0
votes
0answers
13 views
SSL is forwarding domain
I currently ran lets encrypt auto on my ssh.
When I ran it I had the option to forward all https requests. I went ahead and did so. I ran two domains at once and somehow subdomain 1.example.com is ...
2
votes
0answers
49 views
LetsEncrypt unable to authorize
I have setup my server on digital ocean, and followed along with
https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-16-04
When I tried to run the ...
0
votes
0answers
15 views
Internal Server Error after installing LetsEncrypt SSL certificate and uninstalling it again
Following the directions given here, I tried to install a LetsEncrypt certificate on my Ubuntu 14.04 apache virtual private server with SSH (root) like this:
apt-get install certbot python-certbot-...
0
votes
0answers
27 views
apachectl configtest “Function not implemented” and Let's Encrypt auto-renew fails
One of my CentOS 7 servers cannot run certbot-auto renew because of an error while running apachectl configtest. Here's its output:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...
0
votes
1answer
30 views
Are my NGINX server blocks set up improperly (HTTPS 301's and assets not being cached in browsers)?
I inherited a server and there are a couple of issues that I have diagnosed and that certain page speed performance tests are flagging.
1) In the server block certain requests are being redirected ...
0
votes
1answer
25 views
SSL Enabled Geonode Service
Recently I have installed geonode on apache tomcat8 in an Ubuntu 16.04 droplet on digitalocean . Everything worked without any issue. The service was up and running.
Then I tried to enable SSL for ...
0
votes
1answer
23 views
Nginx wildcard redirect everything to https non www but subdomains goes to a specific folder?
I just installed Let's Encrypt wildcard certificate and I want to use the non www as my standard regex for shorter server block. So I wish to do the following:
http non www ---> https non www
...
0
votes
0answers
16 views
Ansible to loop over grouped items
I got a small task I'd like to implement in ansible:
There is a list of websites that are on the webserver, each associated with docroot, like this:
site1.com => docroot: /var/www/site1/
site2.com =>...
1
vote
0answers
43 views
Nginx, Docker-Compose and Let's encrypt connection refused, unless i disable ssl
I have a docker-compose project which require ssl, and i want to use let's encrypt certbot which I want to incorporate into the docker-compose file for auto renewing. I followed this tutorial from ...
-1
votes
1answer
16 views
Certify the Web: DNS challange keeps changing
I'm trying to make a * cert off my hosted services with the Community Edition of LetsEncrypt. I'm using the manual DNS update method. Every time I try, it changes the DNS _acme-challenge value on me. ...
0
votes
0answers
48 views
SSL certificates updating issue - domain.key .csr .crt and respective ssl.* files
I am responsible for running friends' website. It's using a free tool, call it T, which did a ton of configuration work for me. nginx config, for example, is managed by T. And same for SSL business, ...
0
votes
0answers
31 views
Configure apache for lets-encrypt and django
I am able to set up my domain for https without problems with the following example.com.conf file:
<VirtualHost *:80>
ServerName example.com
ServerAlias www.example.com
DocumentRoot ...
0
votes
0answers
28 views
Trying to configure letsencrypt auto renewal with HAProxy
I'm trying to get the letsencrypt auto renewal working with haproxy.
I've followed these instructions:
https://www.digitalocean.com/community/tutorials/how-to-secure-haproxy-with-let-s-encrypt-on-...
0
votes
0answers
19 views
nginx certificate name mismatch error with www redirect
I'm having issues with a site that has a Let's Encrypt cert for the naked domain example.com. There is a CNAME DNS entry that points www to the A record.
I want all www traffic to redirect to the ...
3
votes
0answers
75 views
How to make Certbot ignore a particular domain in nginx?
I have ~30 domains running on my server, all of them with SSL certificates managed by the Certbot nginx plugin. All of them, except one... let's call it selfsigned.example.com.
This domain uses a ...
2
votes
1answer
71 views
Let's Encrypt wildcard certificates and Apache 2 not working
I am trying to set up a wildcard certificate using Let's Encrypt on an Ubuntu 18.04 server running apache2, for domain abc.def.com (not the real domain name) and all subdomains (*.abc.def.com)
I have ...
0
votes
2answers
452 views
Find what domain is using the old Let's Encrypt ACME TLS-SNI-01 validation method before the EOL on February 13th, 2019
I just got this email. However, I host many wabsites (not all of them on the same server). I guess that one of the server is using an old version on the certbot client, but I'm not sure which. I ...
0
votes
1answer
59 views
Laravel Forge/LetsEncrypt SSL error “SSL_ERROR_NO_CYPHER_OVERLAP”
Some users have complained that they cannot access our site due to a "secure connection failure" i.e. SSL. The actual error code provided is SSL_ERROR_NO_CYPHER_OVERLAP.
Server is nginx with ubuntu ...
0
votes
0answers
15 views
How to let JupyterHub refresh the SSL certificate?
I have JupyterHub set up to use let's encrypt certificates.
The problem is that they have a very short lifespan, and unless I stop&start JupyterHub, it keeps the old ones in memory, so that people ...
0
votes
1answer
32 views
CloudFlare and let's encrypt free ssl certificate subdomain
I want to know if it's possible to mix and match free ssl certificate from cloudflare and let's encrypt for subdomains.
E.g.
a.example.com and b.example.com use free ssl from cloudflare (I'm aware ...
1
vote
1answer
60 views
Where does Certbot serve up HTTP-01 challenges from?
I am diagnosing a weird problem with some of my Ubuntu 14 LTS / Apache 2.4 machines with Certbot renewals. Yes, I know Ubuntu 14 LTS is EOL soon; these are some of the straggler machines on the ...
0
votes
1answer
38 views
All sub-domains are redirecting to HTTPS
I have a root domain (https://kernl.us) that is secured via a Let's Encrypt SSL certificate. This works fine, but when I try to go to a new sub-domain (http://status.kernl.us) Chrome redirects me to ...
0
votes
0answers
31 views
Error 503 Back-end fetch failed
I have some problem with the nginx varnish configuration.
When I connect https://example.com I get these messages:
Error 503 Backend fetch failed Backend fetch failed
I'm using hitch for ...
0
votes
0answers
20 views
browser times out over https on mobile network
When accessing oletymeshop.com from wifi, evrything works fine on http and https.
When accessing over mobile network (4g / lte) http works, but https times out and nothing ever shows in the httpd ...
0
votes
1answer
35 views
How to free SSL certificates on Debian 6 squeeze with Apache
I'm looking for a way to use free SSL certificates in Apache running in Debian 6 squeeze.
I tried to use Lets-Encrypt
running
./certbot-auto --apache certonly --no-bootstrap
throws error
WARNING:...
0
votes
2answers
143 views
Nginx Sorry, the page you are looking for is currently unavailable. Please try again later
I have a nginx server (1.10) and I am trying to access a certain location block for letsecnrypt but having no luck. I have modsecurity and pagespeed both included in my compiled nginx.
OS is Ubuntu ...
0
votes
1answer
88 views
How to check if letsencrypt ssl certificate is installed? [closed]
I installed Lets Encrypt plugin in my WHM and run for one of my site but it when I'm checking to sslshopper site to confirm that certificate is installed or not it shows :
Common name: example.io
...
0
votes
1answer
47 views
SELinux is preventing /usr/sbin/httpd from getattr access after switching to self signed cert
I recently created my own CA and issued my first root cert, then intermediate, then finally a server cert/key/chain for apache.
When i switch from the letsencrypt certs added with certbot to the ...
0
votes
1answer
64 views
Lets Encrypt - Server Error in '/letsencrypt' Application, A Task was Cancelled
I have the let's encrypt extension added on Azure through Kudu. This extension has been working fine until recently and now when I try to apply a SSL certificate to a website a get the following error:...
0
votes
0answers
76 views
How to add CAA records, in PowerAdmin(PowerDNS) for ssl certificates in letsencrypt?
I am trying to add ssl certificates for a secure connection https for the domain and subdomains, but the problem I get is the following:
DNS problem: SERVFAIL looking up CAA for DOMAIN
DNS problem: ...
0
votes
0answers
51 views
Nginx Redirect Loop in a Letsencrypt Docker with Multiple Sites
I am getting a "too many redirect error" when I try to go to my own websites. Those websites are hosted on my server with Nginx inside a Letsencrypt Docker(Docker Hub: https://hub.docker.com/r/...
0
votes
1answer
74 views
How to update email address to receive expiry notification from letsencrypt?
I am trying to update the old email address which was being used to recieve expiry notification from the amazing Letsencrypt. However, I did not find a way to do it amazingly :O.
What I did try ...
0
votes
1answer
90 views
Can't Start HTTPD After Update
I'm unable to start my previously working httpd(2.4.6) after updating my instance(CentOS 7).
I first checked the status via systemctl status httpd, which yielded:
● httpd.service - The Apache HTTP ...
0
votes
0answers
53 views
Reverse proxy shaarli in a subfolder with nginx
I have a docker-compose with many services I was able to reverse proxy behind an nginx instance, located in a linuxserver/letsencrypt docker container.
I added a shaarli container to the list, and ...
0
votes
2answers
57 views
Let's Encrypt setup for subdomain which is pointed to other host
I'm trying to setup a two server system, where one is doing webhosting and the another is delivering content (CDN) for the webhost server.
I currently own two servers and they both have Let's Encrypt ...
0
votes
1answer
89 views
Let's encrypt certificate permissions
I am using webmin + virtualmin to host and manage websites. There is Let's encrypt module to configure automatic SSL certificate renewal in some period of time. Certificates are placed in user's home ...
0
votes
0answers
473 views
send() failed (111: Connection refused) while resolving, resolver: 127.0.0.1:53
Because of SSL stalping errors I had to set
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
ssl_prefer_server_ciphers on;
ssl_stapling on;
...
0
votes
1answer
129 views
Generate LetsEncrypt SSL certificate for internal use using Certbot
I want to generate an SSL certificate using Certbot for a subdomain which points to a Docker Registry server which is not accessible from outside.
Since I cannot use LetsEncrypt DNS challenge the ...
1
vote
2answers
106 views
nginx as reverse proxy with several domains & hosts
This question has probably been asked several times, but with all results I can find and my little knowledge, I'm kind of lost. I'm using Fedora 29.
What I try to do with nginx :
Use one let's ...
0
votes
1answer
114 views
Let's Encrypt certificate to cover both wildcard subdomains and root-domain
I'm running a server under example.com domain and I have sub-domains like:
a.example.com
b.example.com
I'm creating certificate from Let's Encrypt with zerossl online tools and I have an issue. ...
1
vote
1answer
111 views
SSL issue with LetsEncrypt for some users
I run https://podnews.net through AWS, and use their SNI SSL certificates. This appears to work fine for everyone.
For the newsletter software, my click throughs go through https://sendy....
0
votes
1answer
55 views
Cannot set-up SSL termination after changing subdomain
I've been working for a while on a web application that has lived on two load-balanced DigitalOcean droplets (using a DigitalOcean loadbalancer, not my own load-balancing droplet) with SSL termination....
0
votes
1answer
121 views
NGINX SSL “ERR_TOO_MANY_REDIRECTS”
I have website build with django and nginx. After adding Let's Encrypt SSL certificat using Certbot I get the error : ERR_TOO_MANY_REDIRECTS.
Please find the below nginx configuration :
server {
...
0
votes
1answer
109 views
Poste.io - can't login by mail application - bad SSL certificate
I have a proble with poste.io and configuration with nginx-proxy. DOMAIN is valid domain :)
This is my docker-compose for poste.io:
version: '3'
volumes:
mailserver_posteio:
services:
...
