Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Filter by
Sorted by
Tagged with
0
votes
1answer
29 views

How to fix LetsEncrypt renewal failing with error “Unable to reach credentials server”?

I have successfully acquired a certificate using Win-Acme installed on Windows Server 2012. The software is setup to renew using the Route53 plugin to automatically verify ownership via DNS. Win-acme ...
0
votes
1answer
17 views

SSL: is it possible to use a certificate for a specific subdomain and a wilcard for all other sub domain?

I have a domain, say domain.com. I have some random subdomains which all point to the same server. (eg: user-00.domain.com, user-01.domain.com, etc.) I also have some fixed sub domain names, let's ...
0
votes
1answer
25 views

How to install SSL certificate for domain and subdomain

I want to install certificate on EC2 for domains and subdomains. I'm running a website "www.example.in" on single EC2 instance which is in public subnet with public IP and also pointing some ...
0
votes
1answer
29 views

Can we use CA signed certificate like let's encrypt in softether vpn server?

I am trying to attach let's encrypt certificate to my softether vpn server, But didn't found a way for it. Can we use CA signed certificate like let's encrypt in vpn server ? If yes, then please ...
-1
votes
0answers
37 views

How to get lets encrypt ssl for custom domain? [closed]

I am working on a web app where user's can create a profile and map custom domain to their profile. If user's link is: webapp.com/user, user can map: userdomain.com to that profile. So far I have ...
0
votes
1answer
39 views

Old LetsEncrypt SSL certificate still being served by EC2 instance

I'm working on renewing the SSL certificate for my websites. They are all running on the same EC2 instance with the same Apache server. Two of my domains recently expired so I also tried to remove ...
6
votes
2answers
937 views

Wildcard SSL with LetsEncrypt gives error

I want to create wildcard SSL for my website via LetsEncrypt. I followed the instruction and after running Certbot, it gives me a DNS challenge and says: Please deploy a DNS TXT record under the name ...
0
votes
1answer
17 views

How to lets-encrypt several virtual servers on apache

I host several instances of the same ruby on rails application via passenger on an Apache server. In the past these applications have been made available via separate Domains. But now I received a ...
1
vote
1answer
38 views

ejabberd STARTTLS setup on port 5222

I just installed and setup the docker ejabberd/ecs image on an ubuntu 20.04 aws instance. I have ports, domain name and users setup and working. On the host (ubuntu) I generated Let's Encrypt ...
1
vote
3answers
159 views

Unable to use LetsEncrypt - CertBot - When HTTP to HTTPS redirect is setup

I am trying to configure CertBot and it only works when I serve my site over http. Usually I have an https redirect and I don't want to have to change the site config each time I need to use certbot. ...
0
votes
0answers
125 views

Exposing port http and https to the docker container but still can't communicate

Edit #3: fix by disabling FirewallD. It turns out because of my lack of understanding about CentOS. I did not have this problem before because Alibaba Cloud decide it is best to just disable ...
-1
votes
1answer
18 views

Problems with TXT record in combination with other Records

I have currently the following DNS setup. Domain: domain.tld Example IPv4: 1.2.3.4 Example IPv6: fe80::1 Host Type Destination * A 1.2.3.4 * AAAA fe80::1 This setup works perfectly as expected. If ...
0
votes
0answers
14 views

How to add SSL certificates for multiple VPS (Shared Hosting Servers) with the same primary domain?

I am planning 3 VPS shared hosting servers. Of particular focus in this question...they are also acting as mail servers. host1.mydomain.com host2.mydomain.com host3.mydomain.com (where "mydomain" ...
0
votes
1answer
61 views

Let's Encrypt with Bitnami, with some odd port numbers

I recently (and I think it was on either ServerFault, StackOverflow, or some other StackExchange forum) found out that Bitnami stacks provide a tool for using Let's Encrypt, one that apparently uses ...
0
votes
0answers
17 views

letsencrypt non ssl domain showing , ssl domain home page

I have 6 domains in my vps server.In that 4 domains has letsencrypt ssl and two domains doesn't have ssl since client dont want. for example ssl domain https://john.com for example non ssl domain ...
1
vote
1answer
40 views

Let’s Encrypt Certbot: How to use HTTPS for the server validation

When using Let’s Encrypt Certbot, the Let’s Encrypt server makes a HTTP request to the temporary file on the web server to validate that the requested domain resolves to the server where certbot runs. ...
0
votes
0answers
25 views

Configure Let's Encrypt renewal on Amazon Lightsail nginx (bitnami)

I need to schedule automatic renewal of my website's TLS certificates. I use Let's Encrypt in Amazon Lightsail Bitnami nginx environment. I configured it using the instructions on Amazon Lightsail's ...
0
votes
1answer
207 views

Http-01 Challenge failed and Connection refused

I just bought a new server, and want to follow this for www.pretty-formula.com. Here is the record I added to pretty-formula.com: In the server, ufw status returned Status: inactive. After putting ...
1
vote
1answer
128 views

Nginx 301 redirect with nginx-proxy and nginx-proxy-companion

I'm using something like this docker-compose.yml file. version: '3' services: httpd: image: httpd:alpine environment: - VIRTUAL_HOST=example.com,www.example.com - ...
0
votes
1answer
30 views

How do I setup lets encrypt for an Azure Linux Service Web App

There are plenty of guides on how to set up Lets Encrypt for Azure Windows Web App Services, but I can't find any at all for Linux based services. Here are two example of such tutorials (that ...
4
votes
1answer
390 views

Is the subdomain _acme-challenge protected?

I was looking into the DNS-01 challenge of Let's Encrypt; and I had a question about the sub domain process [1]. Let's say, the website example.com gives away free subdomains; what stops me to ...
0
votes
1answer
98 views

How should certificates for multiple separate sub-domain servers be issued/renewed with Let's Encrypt?

Upgrading my home infrastructure to learn as well as be more secure, I have not been able to find out how best to get certificate(s) issues and installed across my servers, which comprise: Firewall (...
0
votes
0answers
9 views

Cloudflare stops website working as it is enabled

My website is usign Cloudflare to manage its DNS records. I've installed SSL using LetsEncrypt on my website and everything works well when Cloudflare is disabled. As I enable Cloudflare, my website ...
5
votes
2answers
917 views

Let's Encrypt Certificate for Internal Site

I am hoping to clear up some confusion I have regarding the use of Let's Encrypt for an internal site/application. I have not been able to find this information elsewhere. I want to use Let's Encrypt ...
0
votes
1answer
97 views

Letsencrypt for all subdomains *.example.com [duplicate]

I'd like to obtain one certificate working for all my subdomains *.example.com. This works: certbot-auto certonly --webroot --webroot-path /home/www/example/ --domain example.com ...
0
votes
0answers
22 views

SSL certificate valid in Chrome but not in Firefox

I have installed an ssl certificate with letsencrypt (actually, my provider has an automated workflow for this which I used). As the title says: in Chrome (Chromium in Linux) it says that it is safe. ...
1
vote
1answer
33 views

Nginx match path on any domain name

I want to configure nginx so that a specific path on every domain name routes to a certain location. The use case is I want to be able to point lets encrypt at this location to drop the verification ...
0
votes
1answer
70 views

LetsEncrypt certificate for nested wildcard subdomain [duplicate]

I've generated Lets Encrypt wildcard certificate for my domain *.domain.com. I thought this certificate is valid for any nested subdomain *.*.domain.com, like it.*.domain.com or fr.*.domain.com. But ...
0
votes
1answer
35 views

How soon can a let's encrypt certificate be successfully renewed?

Figured a simple Google search will have the answer on top but apparently I can't find it. I understand one can try let's encrypt renewal every day without penalty but what is the soonest a ...
0
votes
1answer
71 views

LetsEncrypt ACMEv2 updates with CertifyTheWeb

I have a number of Windows 2016 servers configured with CertifyTheWeb's LetsEncrypt application. This secures a number of IIS certs. I've received a notification that the ACMEv1 protocol is due to be ...
0
votes
1answer
56 views

nginx http (from android app) does not work. Https is working fine, and http was/is working fine in apache

Update: Sorry, my bad. For android 8+ we should have clartextTraffic=true in androidManifest.xml for http to work. This was done/present in my app but after enabling https and domain setup, I deleted ...
0
votes
0answers
16 views

Certbot: How to replace an existing server with the same SSL certificate?

I'm sure this must be a common problem. I have a server that is already running with a functioning certbot, that validates the certificates every 90 days. I would like to replace the server with ...
0
votes
0answers
169 views

MisconfigurationError: nginx restart failed

I had to unplug my server in the middle of a TLS certification renewal and now I'm getting this error, I'm not sure what I can do to fix it... Any help would be appreciated. Waiting for verification.....
0
votes
0answers
35 views

GitLab always uses staging certificates from LetsEncrypt

I'm running my GitLab on AWS, deployed in a Docker container (currently using gitlab/gitlab-ce:12.8.1-ce.0). I enabled Let's Encrypt as follows in the docker-compose.yml: environment: ...
-1
votes
1answer
292 views

Postfix 3.4.9 SSL issues — no shared cipher from servers using TLSv1

Edit 1: I've narrowed it down to TLSv1 that both servers listed below (no others have failed yet) are attempting to use. I'll be contacting their webmasters requesting they stop using an insecure ...
0
votes
1answer
868 views

How can I retrieve my Let's Encrypt registration's current email address?

I understand that Let's Encrypt maintains an email address as a registration and recovery contact for every "account." This email address is used to notify the owner of the certificates of upcoming ...
0
votes
0answers
82 views

“Page isn’t redirecting properly” issue after I updated Let's Encrypt SSL using certbot renew --force-renewal

I have a strange "The page isn’t redirecting properly" issue after I updated Let's Encrypt SSL with certbot renew --force-renewal due to the LE bug. The site redirects from http to https, but then ...
0
votes
1answer
269 views

How to install letsencrypt wildcard certificates?

I am using certbot/letsencrypt from the EPEL repository with apache on CentOS 7 without any issues on "normal" domain names. The certbot tool recognizes server name aliases from the virtualhost config ...
0
votes
1answer
44 views

Apache HTTP to HTTPS Redirect working for alias but not server name

I have created an SSL certificate using Let's Encrypt. The certificate has been installed and is referenced in the Apache config file. The Apache config provides a ServerName (e.g., example.com) and a ...
0
votes
1answer
37 views

What is the proper procedure to replace an existing paid certificate with lets encrypt

I have a paid certificate that's about to expire soon. I would like to use lets encrypt cert in replacement of this one. What is the appropriate procedure to do this? Info: - CentOS 6.3 - Apache 2....
1
vote
1answer
42 views

Is it possible to have many domains on the same server with as many certificates?

In my nginx configuration website.conf I would like to have something like this: server { listen 443; server_name firstdomain.com seconddomain.com; ... ssl_certificate /etc/...
0
votes
0answers
208 views

How to dynamically set SSLCertificateFile for user's custom domains

I have a site where users can point their own custom domain to their unique directory on my site through A Records. For example, example.com points to mysite.com/something and anothersite.org points ...
0
votes
1answer
561 views

Kubernetes not regenerating SSL Certificate

I have tried and tried many different things, and I'm unable to land into a solution. The certificate was issued once using letsencrypt, but was never refreshed. Could you people give me a hint on ...
0
votes
1answer
23 views

Certbot wildcard with apache but none of the listed DNS providers

On the official certbot documentation for apache (https://certbot.eff.org/lets-encrypt/ubuntubionic-apache.html), it says you should do sudo apt-get install python3-certbot-dns-<PLUGIN> ...
0
votes
1answer
165 views

Which Let’s Encrypt clients support ACME v2 in the official Debian Buster repos?

The ACME protocol version 1 is deprecated and will stop working with Let’s Encrypt in multiple steps from 2019 to 2021. See https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430 I’ve ...
0
votes
2answers
109 views

Dovecot Unable to access letsencrypt certificates on LEMP server

I am attempting to setup postfix and dovecot on a LEMP server. I am using letsencrypt certificates. I suspect I am having a permissions problem because I cannot access the /etc/letsencrypt/live folder ...
0
votes
0answers
31 views

Apache 2.4 sending expired ssl cert despite new cert being installed and configured

So today, completely out of the blue, one of the vhosts on my webserver started throwing SSL Cert out-of-date errors when I browsed to it. This is Very Odd™ as I have automatic renewals every two ...
0
votes
0answers
170 views

Failed redirect for at.com Unable to set enhancement redirect for at.com SSL apache centos 7

i tried to using let's encrypt SSL and install it using certbot certbot --apache -d at.com -d www.at.com -d destmap.at.com -d to.at.com. but it can't. i got this error Failed redirect for at.com ...
0
votes
0answers
75 views

Running into an issue trying to use certbot to create an SSL cert for my server

While I have done this before, I do not recall running into this issue, so I don't understand what step I am missing. I am trying to create an SSL cert for my server using certbot however, where I ...
2
votes
3answers
1k views

Certbot error no attribute TLSSNI01 / cert-revoke status code 400

I am trying to create and install a Let's Encrypt SSL certificate using certbot. It's for a subdomain named private.mydomain.de (on a different server than mydomain.de). Certbot aborts with the ...

1
2 3 4 5
12