Questions tagged [lets-encrypt]
Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.
2
votes
1answer
18 views
Cyclos Docker SSL Impelementation for tomcat
I have configured tomcat inside docker container as follows
<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
maxThreads="150" SSLEnabled="true">
...
0
votes
1answer
18 views
Apache2: error in SSLv2/v3 read server hello A
Without any reason my Apache2 Webserver on Ubuntu stopped working. Every HTTPS site i want to open I get "SSL_ERROR_RX_RECORD_TOO_LONG". When I call on my server 'openssl s_client -connect www.kosa-...
0
votes
0answers
14 views
Change Certbot plugin
I have a web server running multiple sites on nginx. They are secured by certificates from Lets Encrypt. For some reason, long ago, I installed the certs for one site using standalone rather than the ...
0
votes
0answers
26 views
How can I repair damage after a Let's Encrypt update?
After some domains were not being installed from my Let's Encrypt cron job, I manually ran some domains.
This has had the effect that the effective DocumentRoot for https://cjshayward.com has been ...
0
votes
0answers
26 views
Default config 000-default-le-ssl overriding vhosts
Initially I had only 1 domain so I had it as a default site in 000-default-le-ssl.conf. I then added vhosts for each subdomain with no issues. Now I have added another domain and I do not want any ...
1
vote
0answers
24 views
Install Puppet 5.5.x on Ubuntu 2018
We have Ubuntu 2018 and would like to use puppet-letsencrypt.
However Ubuntu 2018 comes with Puppet 5.4, while puppet-letsencrypt requires Puppet version 5.5.8.
How am I supposed to upgrade to 5.5.x?...
1
vote
1answer
16 views
Trying to set up haproxy letsencrypt for ssl termination. gateway not answering dns
trying to set up ssl termination with letsencrypt, but some weirdness is happening with dns. I am routing tcp to the existing host to allow the website at adomain.com to manage its own certs until the ...
1
vote
0answers
28 views
LetsEncrypt TLS Cert invalid? “EVP_MD_size:message digest is null”
I am finding this in my logs for postfix, I'm using a LetsEncrypt certificate but I'm unable to find any useful information online about it. Does anybody know if this is a problem or something that ...
1
vote
1answer
114 views
Possible reverse proxy issue with Apache from HTTPS (external) to HTTP (internal)
I have a server running Ubuntu 18.04 with .NET Core 2.1, Kestrel and Apache2. I am using LetsEncrypt for SSL and the domain was set up with SSL. Prior to installing .NET Core and hosting the project ...
0
votes
1answer
69 views
create letsencrypt exception for apache reverse proxy along with ip restrictions
Under normal circumstances, setting up an apache reverse proxy with a letsencrypt exception for /.well-known is easily done with ProxyPass /.well-known !
It seems to become much more difficult (...
2
votes
1answer
79 views
How do I get Nginx to work with subdirectories? [Nginx, Let's Encrypt, basic auth]
What I want:
I want to install Mautic in a subfolder of my web root. I have a domain https://example.com and I want Mautic to be accessible from https://example.com/mautic.
What I have:
I have a ...
0
votes
2answers
54 views
Can a SSL certificate be used on a locally hosted website?
I tried to install Let's Encrypt on my local server.
But I could not because it threw errors that I need a fully qualified domain name (FQDN). I use server.arch.local as my hostname. Does it not ...
0
votes
0answers
44 views
SSL with Let's Encrypt, Apache and ProjectShield not working for WWW
I have a site behind ProjectShield, for www and bare domain.
Without https, it is working for www and bare domain.
Under https, is only working for the bare domain, not working for www, and that is ...
0
votes
0answers
53 views
Let's Encrypt SSL on Google Cloud
I am utterly failing to find a working guide for installing Let's Encrypt certificates on a single Google Cloud virtual machine.
I'm pretty clearly getting the picture that just doing the Apache ...
google-compute-engine
0
votes
1answer
118 views
HAProxy Multiple Services, Reverse Proxy, CERT NAME INVALID
I have a server with HAProxy setup. I am trying to connect my public ip to multiple servers that offer DIFFERENT services via external ports.
So Port 80 will direct to Server 1, Port 100 will ...
2
votes
0answers
27 views
Failed to renew SSL certificates using Certbot's “dry-run” command
I was using apache for my website and created the SSL for Apache. Then for some reason, I have to change my server from Apache to Node.js. To do that I just copied the SSL certificates path from ...
0
votes
1answer
92 views
letsencrypt failed authorization procedure
I'm receiving the following error when attempting to renew my ssl certificate
Failed authorization procedure. karaokeottawa.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks ...
1
vote
1answer
73 views
LetsEncrypt certificate for parked domains
Hopefully you can shed some light on what might be going on here:
I have migrated website cutit.sk from external VPS on my private server. I also have several domains, which are meant to redirect ...
1
vote
2answers
81 views
How do I get ssl_preread_alpn_protocols for acme-tls request working with nginx 1.14?
I'm trying to configure Nginx to support Let's Encrypt with TLS-ALPN-01 using dehydrated. In their documentation they have the following for telling Nginx load balancing to direct the request to a ...
0
votes
0answers
80 views
IPv6 is resolved from G suite relay address cause “Invalid credentials” when sending via postfix test
I came across a wired issue it is obviously Gmail relay service resolved as IPv4/v6 randomly, which causes the authentication not passed.
I used DigitalOcean Ubuntu 18.10 + Postfix + G Suite account +...
3
votes
1answer
57 views
Let's encrypt: renew vs new, or: why renew
Might be a stupid question but: where is the difference between renewing a Let's encrypt certificate and just getting a new one?
Related question and background for this question: do I need to keep ...
0
votes
0answers
86 views
Ubuntu Certbot SSL not working 18.04
I am trying to integrate SSL with my Laravel site http://enablerochester.com. I tried following the tutorial for setting up certbot on Ubuntu 18.04 here: https://www.digitalocean.com/community/...
0
votes
0answers
15 views
Can't obtain SSL-cert with lets encrypt
IMPORTANT NOTES:
- The following errors were reported by the server:
Domain: xx.yy.no
Type: connection
Detail: Fetching
http://xx.yy.no/.well-known/acme-challenge/...
2
votes
1answer
992 views
Requests can't be forwarded to peer network because the peer project disabled DNS peering
I am trying to get cert-manager works with my GKE. I had followed the official documents and had tried dns01 with no luck.
Currently I believe I found the missing manual it called customized DNS. In ...
0
votes
1answer
36 views
Https not working
I have a site running on Apache. My site is working properly for http requests, but not for https.
This site is behind ProjectShield and I followed this tutorial in order to activate my own SSL ...
1
vote
0answers
38 views
Securing LDAPS service of Azure Active Directory Domain Services with Let's Encrypt certificate fails
While I was trying to import certificates into AADDS to secure the LDAPS service. I read the instructions (CN=<domain name> etc.) on how to do this. Self-signed certificates were working fine ...
0
votes
0answers
123 views
Deploying letsencrypt certs automatically to VMware VCSA 6.7
I have an existing haproxy VM responsible for managing various letsencrypt certificates. I'd like to use these certificates in VCSA 6.7. Does anyone know of a "nice" way to deploy them to VCSA non-...
1
vote
2answers
126 views
Is it necessary to buy a domain in order to run the Let's Encrypt DNS Challenge on the intranet?
This question(s) might sound naive to many of you, but I'm more of a developer than a sysadmin, so it'd be extremely useful to have some advice before digging in.
Let's say I own the foobar.com ...
0
votes
1answer
51 views
Apply SSL certificate in a bigger context
In my default-ssl
<VirtualHost _default_:443>
ServerName example.co
DocumentRoot /var/www/html/example
SSLEngine On
SSLCertificateFile /etc/letsencrypt/live/example.co/cert.pem
...
1
vote
2answers
529 views
Strongswan with letsencrypt certificates (IKEv2-EAP)
I am configuring Strongswan server for VPN clients to access internal network (EAP-IKEv2). I set it up successfully using self-signed server certificates and it works for clients using Mac OS X, ...
-2
votes
1answer
83 views
How to use Letsencrypt to domain that has no root folder with Cloudflare?
I am trying to use Letsencrypt (HTTPS) on my website with Cloudflare (HTTP) but I confuse with this.
the domain doesn't have a root folder
accessing domain will be redirected to one of subdomains
...
0
votes
0answers
25 views
Ubuntu Apache https time out status. Though http works fine
Created ssl certificate using let's encrypt for apache. It is showing request timed out every time.
nc -zvw 1 studytact.ml 443
nc: connect to studytact.ml port 443 (tcp) timed out: Operation now in ...
1
vote
2answers
53 views
let's encrypt AWS redhat
I'm setup a server for testing in AWS EC2 and I can't secure the default domain.
I'm following this tutorial https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/SSL-on-an-instance.html
I've install:
...
0
votes
1answer
232 views
How to renew an expired let's encrypt certificate
I didn't notice my Let's Encrypt certificate had expired. I would like to renew it.
I typed the command below
certbot renew
But I got error below.
# certbot renew
Saving debug log to /var/log/...
0
votes
0answers
32 views
How to use OmniAuth with Rails+Nginx+DigitalOcean?
My Rails app used to use OmniAuth to login in through Facebook/Twitter/Google accounts (different omniauth gems).
Everything was working when my app was in some server which was preconfigured, but ...
1
vote
0answers
66 views
Configure GitLab Docker container with Plesk and LetsEncrypt
Hi I have an issue with my GitLab setup.
What I'm trying to achieve:
running GitLab inside a Docker container
access GitLab through a subdomain (gitlab.mydomain.com) at ports 80 and 443 for https
...
0
votes
0answers
21 views
Would it be feasible to detect domains and install Letsencrypt certificates via bash script?
I would like to create a scheduled shell script to do the following on a Centos server:
Read the Apache virtual hosts file
For every domain detected, check if there is a valid ssl cert in place
For ...
0
votes
0answers
77 views
How to set TXT TTL to 1
I am trying to verify my domain ownership to Let's Encrypt by adding a TXT record to mydomain.zone located in /var/named. Let's Encrypt wants me to add it with a TTL of 1 second. However, I find no ...
0
votes
0answers
61 views
Connection Closed after switching IPs with new SSL Certificate
I recently installed a couple SSL certificates on a few domains, and generally they work, but whenever I switch IP addresses I get an ERR_CONNECTION_CLOSED error. If I refresh a few times, it will ...
0
votes
1answer
26 views
Deleting Cerbot-issued certificate
I have a production server. I created an exact copy of that server for development.
example.com (Production Server)
dev.example.com (Development Server)
Because it is an exact replica, it also ...
0
votes
1answer
70 views
How to complete certificate chain last node
I am running my own RocketChat latest version on Docker. And on top of it I have Nginx as a reverse proxy running Certbot to do a https. It works perfectly fine with Firefox web browser on Android and ...
0
votes
0answers
11 views
iptables blocks port-forwarded requests to port 80
My iptables rules are:
-P INPUT DROP
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-A INPUT -s 192.168.2.0/24 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A ...
-1
votes
1answer
100 views
modern installation of Tomcat with SSL on port 443
In the computer course I'm writing I'm using Tomcat for the server. (Students learn how to set up CentOS and everything from scratch. Currently the course has them using Tomcat running on port 8080.) ...
0
votes
0answers
28 views
SSL is forwarding domain
I currently ran lets encrypt auto on my ssh.
When I ran it I had the option to forward all https requests. I went ahead and did so. I ran two domains at once and somehow subdomain 1.example.com is ...
2
votes
0answers
61 views
LetsEncrypt unable to authorize
I have setup my server on digital ocean, and followed along with
https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-16-04
When I tried to run the ...
0
votes
0answers
22 views
Internal Server Error after installing LetsEncrypt SSL certificate and uninstalling it again
Following the directions given here, I tried to install a LetsEncrypt certificate on my Ubuntu 14.04 apache virtual private server with SSH (root) like this:
apt-get install certbot python-certbot-...
0
votes
0answers
152 views
apachectl configtest “Function not implemented” and Let's Encrypt auto-renew fails
One of my CentOS 7 servers cannot run certbot-auto renew because of an error while running apachectl configtest. Here's its output:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...
0
votes
1answer
39 views
Are my NGINX server blocks set up improperly (HTTPS 301's and assets not being cached in browsers)?
I inherited a server and there are a couple of issues that I have diagnosed and that certain page speed performance tests are flagging.
1) In the server block certain requests are being redirected ...
0
votes
1answer
44 views
SSL Enabled Geonode Service
Recently I have installed geonode on apache tomcat8 in an Ubuntu 16.04 droplet on digitalocean . Everything worked without any issue. The service was up and running.
Then I tried to enable SSL for ...
0
votes
1answer
62 views
Nginx wildcard redirect everything to https non www but subdomains goes to a specific folder?
I just installed Let's Encrypt wildcard certificate and I want to use the non www as my standard regex for shorter server block. So I wish to do the following:
http non www ---> https non www
...
