Questions tagged [lets-encrypt]
Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.
851
questions
-1
votes
0
answers
20
views
Swarm, DNS Round Robin and Letsencrypt
I use jc21/nginx-proxy-manager in a swarm as a reverse proxy to point my applications to AWS Route 53.
I use 2 swarm nodes to have redundancy in jc21/nginx-proxy-manager and an EFS mapped on all hosts ...
0
votes
0
answers
57
views
Nginx reverse Proxy randomly throws error for "Already listening to port 80 & 443"
I have set up nginx as a reverse proxy for my app with LetsEncrypt as SSL. All goes smoothly, but sometimes all of a sudden nginx goes down with an error message:
Already bind with port 80/443
and a ...
1
vote
1
answer
56
views
How to debug certmanager's complaint about receiving the wrong HTTP response
I've got a small k3s cluster in my home hosting a few websites and local applications. For the most part, I've been able to wrangle it to host a variety of services, but the LetsEncrypt functionality ...
- 695
0
votes
1
answer
61
views
Issues enabling HTTPS on Nginx with Let's Encrypt for a Strapi API and React app
I'm trying to enable HTTPS on my Nginx server for two applications: a Strapi API and a React client application.
React running from /home/rocky/231009twins/front/dist on port 50001 with pm2. Served on ...
- 121
1
vote
1
answer
101
views
Least risky server migration
I'm a iOS/Android developer and I'm not too expert with servers so I don't know how to make a server migration in the least risky way.
This is my current scenario (this has been working for a long ...
- 111
0
votes
1
answer
85
views
let's encrypt certificate permission issue with postgres
I'm using certbot, on Ubuntu 22, to generare ssl certificate. All works fine but all certificate is generated in the following folder
/etc/letsencrypt/live/domain/cert.pem
The problem is that user and ...
- 103
1
vote
2
answers
392
views
Renew FreeIPA certs when existing cert already expired
I have FreeIPA on Rocky 8. I installed custom certs from LetsEncrypt using the command
ipa-cacert-manage -p DM_PASSWORD -n NICKNAME -t C,, install ca.crt
ipa-certupdate
ipa-server-certinstall -w -d /...
- 623
1
vote
1
answer
835
views
Certbot failing on nginx reverse proxy: 404
I am trying to setup a Mastodon instance on Ubuntu 22.04. I have setup Nginx as a reverse proxy and now I am trying to generate an SSL certificate with Let's Encrypt. When I run certbot --nginx -d ...
0
votes
1
answer
49
views
CRON bash script certbot renew hangs
I have this script in /home/user/renew.sh
( cd /home/user/website/ && docker compose run --rm certbot renew --dry-run && docker compose kill -s SIGHUP webserver )
sudo crontab -e
*/5 *...
- 57
0
votes
0
answers
235
views
Mailu email server: Let’s Encrypt does not request new certificate automatically
Using Mailu docker image, I built an email server on Debian 12.
Whenever the certificate expires, I use docker compose down and docker compose up command so certificate will be renewed.
What I ...
- 101
0
votes
1
answer
454
views
How to find the root cause of "TLS library ..., wrong version number" for Postfix?
While trying to perform telnet on port 587 when I enter "AUTH LOGIN" the connection is closed ("Connection closed by foreign host.") and I have the following logs in my postfix ...
- 103
0
votes
2
answers
238
views
LetsEncrypt SSL with HAProxy Renew Not Working
I am trying to give SSL on HAProxy using certbot with LetsEncrypt. I am creating SSL with command:
sudo certbot certonly --standalone -d test.example.com \
--non-interactive --agree-tos --email ...
- 1
2
votes
1
answer
435
views
Postfix not updating Let's Encrypt certificate
Whenever I update the SSL cert on the server (Alma Linux) I restart Postfix. I usually do this a few days or a week before the certificate runs out. However mail connections always fail on the day the ...
- 226
0
votes
0
answers
211
views
How to use multiple ports on the same server for a single domain using nginx and SSL
I am using Godaddy as my domain registrar and created a <subdomain_name> which is linked to my servers IP address on Digital Ocean. I am also using Let's encrypt to get SSL certificates and ...
- 101
0
votes
0
answers
31
views
Debian firewall allowing connections on port 3000 [duplicate]
I have a Debian server running Rocket Chat. The web interface is on port 3000 and works.
I am trying to configure LetsEncrypt and checking the firewall it appears only port 22 is permitted.
How can I ...
- 153
0
votes
0
answers
269
views
MongoDB issue with TLS
I am trying to set up TLS certificates for my standalone MongoDB instance on a cloud compute instance.
I got the certificates from certbot using the command sudo certbot certonly --standalone -d.
i ...
- 137
0
votes
0
answers
178
views
How to get a Let’s Encrypt wildcard certificate via cert-manager in Azure without changing DNS?
How to get a Let’s Encrypt wildcard certificate for (an already working subdomain in) Azure?
I get https://cert-manager.io/docs/tutorials/getting-started-aks-letsencrypt/ running
But it uses only the ...
- 594
0
votes
0
answers
24
views
Letsencrypt autorenewal not working
I ran certbot renew on my domains, but the expiration hasn't updated. How can I tell what I did wrong?
Exact steps:
$ sudo certbot renew --force-renewal
Saving debug log to /var/log/letsencrypt/...
- 101
0
votes
2
answers
616
views
How do I properly issue Let's Encrypt certificate for my mail server?
How do I properly issue Let's Encrypt certificate for my Postfix mail server?
Right now I have a self-signed certificate and I get these messages it cannot be trusted.
I did certbot --nginx certonly -...
- 163
1
vote
1
answer
92
views
IP redirect Lets encrypt
Here is Lets encrypt documentation regarding http validation:
"Our implementation of the HTTP-01 challenge follows redirects, up to 10 redirects deep. It only accepts redirects to “http:” or “...
- 31
0
votes
0
answers
225
views
MariaDB Crashes on Startup with Let's Encrypt Certificates
It seems I'm encountering an issue while setting up secure connections for my clients to connect to my database server on Debian 12. Every time I attempt to start MariaDB, it crashes with a Private ...
0
votes
1
answer
674
views
Mikrotik: Creating Letsencrypt cert fails on RouterOS v7
From RouterOS's webfig CLI I attempted to create a LetsEncrypt cert:
certificate/enable-ssl-certificate dns-name=my.domain.com
But it returned the error:
progress: [error] http challenge validation ...
- 415
0
votes
2
answers
344
views
Postfix TLS with Letsencrypt configuration
I am running Postfix inside a docker container. Certificate are generated with certbot.
With the following configuration:
smtpd_tls_cert_file=/var/keys/fullchain.pem
smtpd_tls_key_file=/var/keys/...
- 3
0
votes
0
answers
258
views
StrongSwan IPSec VPN - IKEv2 - LetsEncrypt Certificate Issue (building CRED_PRIVATE_KEY - RSA failed, tried 10 builders)
I followed the link below for setup IKEv2 VPN Using Strongswan and Let's encrypt on CentOS 7.
How to Setup IKEv2 VPN Using Strongswan and Let's encrypt on CentOS 7
But info on that link has been ...
- 15
1
vote
1
answer
2k
views
How to get both ECC & RSA certificates from Let's Encrypt for Postfix?
Let's Encrypt has started issuing ECC certificates by default since Certbot 2.0. This is not a problem for modern web browsers, but Let's Encrypt certificates can be used for other purposes than HTTPS,...
- 51k
0
votes
1
answer
356
views
How to modify the command line used to renew a certificate using WACS
I have been using Let's Encrypt certificates for some of my domains/servers for a while, using the win-acme client for Windows for the generation and renewal.
My problem is: every renewal I have to ...
- 173
0
votes
0
answers
49
views
How to add trusted SSL certificate to LinuxForHealth FHIR Server
I'm currently facing an issue with my LinuxForHealth FHIR Server setup and SSL certificates. I have the FHIR server running as a Docker container on my server, using a self-signed certificate and ...
0
votes
2
answers
123
views
In Postfix, Should SSL FQDN Matches with myhostname or mydomain field in /etc/postfix/main.cf?
Quoted from the documentation:
myhostname
The internet hostname of this mail system. The default is to use the fully-qualified domain name (FQDN) from gethostname(), or to use the non-FQDN result ...
- 203
0
votes
0
answers
54
views
Certbot enables root domain, instead only subdomains
I own a domain, lets say example.com.
I want a root domain example.com to be 404 or return a blank page (if 404 is not possible).
sub1.example.com - should redirect a traffic to a running docker ...
- 121
2
votes
1
answer
846
views
Certbot stopped generating certificates
tl;dr : Certbot stopped generating certificates, shows a "Redirect loop detected" error, but there is no actual redirect loop.
The following issue appeared around 2023-11-30. I've focused on ...
- 371
0
votes
1
answer
487
views
Use let's encrypt certificates with the prometheus node exporter
I'm trying to configure a prometheus node exporter with HTTPS using the website certificates generated by let's encrypt.
There is certificates with permissions default let's encrypt permission
But I ...
- 103
-1
votes
1
answer
168
views
How can I authenticate the ownership of the server without opening port 80 in letsencrypt using nginx? [duplicate]
I am on nginx web server.
certbot --nginx -d domain_name
I'd do just this when port 80 used to be open. But a client doesn't know how to open port 80. So, I need alternatives.
- 122
0
votes
1
answer
406
views
How to Submit a CSR for a Let's Encrypt Certificate Using Posh-ACME in PowerShell?
I'm working on issuing a Let's Encrypt SSL certificate for my domain using Posh-ACME in PowerShell, specifically for a wildcard domain (*.mydomain.com). I have already generated a CSR, since it's ...
- 1
-1
votes
1
answer
385
views
Letsencrypt is generating self signed certificate, not wanted
I'm struggling with generating certificates for my nginx proxy on Docker.
I've designed the docker-compose in the following way:
version: "3"
services:
postgres-db:
image: postgres:15....
- 99
0
votes
0
answers
187
views
Ubuntu/Nginx server seems to be supplying non-existant SSL certificate
I had four websites configured on an Ubuntu 22.04 server using NginX.
There was a technical problem with the database connection that required me to move the four websites to a new server.
I moved ...
- 87
0
votes
1
answer
353
views
Dovecot certificate is empty
I configured a Mail server with postfix, dovecot and mysql from the documentation.
When I add a mail address in Outlook, it refused.
I tried everything what I can find, but nothing helps.
Can somebody ...
- 1
0
votes
1
answer
300
views
Ubuntu 23.10 certbot: Unable to obtain certificate from root ISRG Root X2
Due to internal security policies I need an P384r1-only certificate chain. I use certbot 2.1.0 on Ubuntu 23.10. From my understanding
certbot certonly -v \\
-a apache -i None \\
--cert-name <...
- 301
0
votes
0
answers
214
views
Create letsencryot ssl for both IPV4 and IPV6 + reverse proxy
i have a vps with ipv6 ::ffff:8b3b:e2ee and 139.59.226.237, i plan to add ssl to my ipv6 and using nginx with reverse proxy to other ip https://139.59.226.237.
If i dont include [::]:80 and [::]:443, ...
0
votes
0
answers
21
views
Duplicating an EC2 instance for creating a development platform for Wordpress site
I have an EC2 instance running Ubuntu hosting a Wordpress site on Apache. I've used LetsEncrypt's CertBot to create an SSL certificate and everything's working fine. I also have direct IP to domain ...
0
votes
1
answer
184
views
Win ACME DNS validation for Google DNS is not working
I am trying to request a LetsEncrypt certificate using DNS validation. My DNS provider is Google DNS. No matter what I do, I keep receiving the following error:
[EROR] File C:\LetsEncrypt\{GCP-...
- 239
0
votes
1
answer
1k
views
DST Root CA X3 (Self-signed) - has expired in certificate chain used by Let's Encrypt (Apache/Windows)
Is it safe to remove a self-signed root certificate from the chain; and what, if any, are the consequences of doing that?
And how would I go about doing this on a Windows setup? The instructions under ...
- 294
-3
votes
2
answers
125
views
Creating/Configuring a DNS server with runtime configuration [closed]
I have a big Windows video/audio application that may be controlled remotely over a web server. For that, I can listen to a local port in a, say, 192.168.1.10 system to port 8000, forward the port via ...
3
votes
1
answer
12k
views
Certbot failed to authenticate some domains (authenticator: nginx)
Im running nginx as reverse proxy and for some reason im unable to renew letencrypt certificate, i have tried to upgrade nginx and certbot to latest version. It has worked before and im not sure if ...
- 31
-1
votes
2
answers
561
views
underscore in certbot's TXT record
Certbot is a free and open-source utility mainly used for managing SSL/TLS certificates from the Let’s Encrypt certificate authority. When using Certbot to obtain a certificate through the DNS-01 ...
0
votes
1
answer
641
views
Nginx emergency: cannot load certificate "/etc/letsencrypt/live/mail.example.com/fullchain.pem". How to fix this Nginx error?
I am running a LEMP email/web server with Ubuntu 20.04. My Nginx user is www-data. I also have roundcube installed in /var/www/roundcube. In my Nginx logs, I am getting the following error:
2023/07/01 ...
- 103
0
votes
0
answers
67
views
Trouble loading wildcard SSL that uses the hostname
I have a wildcard SSL cert from Let's Encrypt, the installation has worked and when accessing a sub-domain the cert loads properly. However the virtual site (Apache) that has no subdomain produces an ...
- 226
1
vote
1
answer
1k
views
How to generate SSL certificate on windows machine for use with IIS?
I come from Linux background and have previously hosted websites on nginx. I use certbot to create and install SSL certificate.
I'm trying my hands-on Windows IIS, I have deployed a website on IIS. ...
- 259
0
votes
1
answer
731
views
LetsEncrypt/Certbot Domain Verification with Redirect
Is it possible to 301 redirect from abc.com to a different domain xyz.com during cert creation/validation with certbot and complete the domain verification via xyz domain?
This question was asked in ...
- 173
2
votes
2
answers
1k
views
Is letsencrypt registration email address stored in certificate
I'm using letsencrypt in two ways: a docker stack using certbot, and another using traefik (which performs certificate management automatically, using lego). In both cases there's a setting for the ...
- 1,019
5
votes
2
answers
5k
views
Invalid version when updating certificate with certbot
I have a server with a Let's encrypt certificate installed with certbot. I want to renew it with the following command
sudo certbot renew --force-renewal
but I get an error:
Saving debug log to /var/...
- 51