Questions tagged [lets-encrypt]
Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.
842
questions
3
votes
2
answers
10k
views
When using Let's Encrypt certbot, how do I restart/reload a network service only once and only if the cerificate was actually renewed?
The certbot command provides two hooks that run after automated renewals, from the docs:
--post-hook POST_HOOK
Command to be run in a shell after attempting to
...
- 429
0
votes
0
answers
29
views
Debian firewall allowing connections on port 3000 [duplicate]
I have a Debian server running Rocket Chat. The web interface is on port 3000 and works.
I am trying to configure LetsEncrypt and checking the firewall it appears only port 22 is permitted.
How can I ...
- 153
3
votes
2
answers
1k
views
Is it possible to change the expiry threshold for expiring certificates in Exchange? (Event 12018)
We've recently switched to using LetsEncrypt for our Exchange certificates, which have a maximum validity of 90 days.
Unfortunately this means I'm being pestered with tickets generated by our ...
- 101
0
votes
1
answer
2k
views
How to install letsencrypt wildcard certificates?
I am using certbot/letsencrypt from the EPEL repository with apache on CentOS 7 without any issues on "normal" domain names. The certbot tool recognizes server name aliases from the virtualhost config ...
- 101
0
votes
0
answers
74
views
MongoDB issue with TLS
I am trying to set up TLS certificates for my standalone MongoDB instance on a cloud compute instance.
I got the certificates from certbot using the command sudo certbot certonly --standalone -d.
i ...
- 2,003
0
votes
0
answers
88
views
Enable HTTPS with letsencrypt on Amazon Linux 2 with Apache
Server: AWS Linux 2 (EC2 Instance)
I'm attempting to renew a SSL certificate (with Let's Encrypt) for a webpage/application Trend Micro Deep Security. Unfortunately, I didn't setup the server so I'm ...
- 1
2
votes
1
answer
9k
views
Certbot failed to authenticate some domains (authenticator: nginx)
Im running nginx as reverse proxy and for some reason im unable to renew letencrypt certificate, i have tried to upgrade nginx and certbot to latest version. It has worked before and im not sure if ...
CommunityBot
- 1
-1
votes
0
answers
26
views
Problems configuring TLS with letsencypt and exim4
I am using letsencrypt and have set the configuration in exim4 to look in my letsencrypt directory but I still get an error
454 TLS currently unavailable
my exim4.conf:
https://dpaste.com/CJXQZDTH9
...
- 123
0
votes
1
answer
4k
views
Nginx not listening on new ports with systemctl reload nginx after adding config with a new port
Not sure how to quickly summary this issue, so I will put my scenario in bulletpoints:
Normal basic nginx install
I only use https(443), so I removed all http(80) config
When you start nginx (or ...
CommunityBot
- 1
0
votes
0
answers
37
views
How to get a Let’s Encrypt wildcard certificate via cert-manager in Azure without changing DNS?
How to get a Let’s Encrypt wildcard certificate for (an already working subdomain in) Azure?
I get https://cert-manager.io/docs/tutorials/getting-started-aks-letsencrypt/ running
But it uses only the ...
- 564
0
votes
0
answers
17
views
Letsencrypt autorenewal not working
I ran certbot renew on my domains, but the expiration hasn't updated. How can I tell what I did wrong?
Exact steps:
$ sudo certbot renew --force-renewal
Saving debug log to /var/log/letsencrypt/...
- 101
0
votes
2
answers
170
views
How do I properly issue Let's Encrypt certificate for my mail server?
How do I properly issue Let's Encrypt certificate for my Postfix mail server?
Right now I have a self-signed certificate and I get these messages it cannot be trusted.
I did certbot --nginx certonly -...
- 49.8k
0
votes
1
answer
507
views
How to get both ECC & RSA certificates from Let's Encrypt for Postfix?
Let's Encrypt has started issuing ECC certificates by default since Certbot 2.0. This is not a problem for modern web browsers, but Let's Encrypt certificates can be used for other purposes than HTTPS,...
- 49.8k
5
votes
2
answers
4k
views
Invalid version when updating certificate with certbot
I have a server with a Let's encrypt certificate installed with certbot. I want to renew it with the following command
sudo certbot renew --force-renewal
but I get an error:
Saving debug log to /var/...
- 51
0
votes
1
answer
52
views
IP redirect Lets encrypt
Here is Lets encrypt documentation regarding http validation:
"Our implementation of the HTTP-01 challenge follows redirects, up to 10 redirects deep. It only accepts redirects to “http:” or “...
- 12.6k
0
votes
1
answer
204
views
How to modify the command line used to renew a certificate using WACS
I have been using Let's Encrypt certificates for some of my domains/servers for a while, using the win-acme client for Windows for the generation and renewal.
My problem is: every renewal I have to ...
- 163
7
votes
1
answer
26k
views
Letsencrypt for all subdomains *.example.com [duplicate]
I'd like to obtain one certificate working for all my subdomains *.example.com.
This works:
certbot-auto certonly --webroot --webroot-path /home/www/example/ --domain example.com
...
CommunityBot
- 1
163
votes
12
answers
333k
views
Best practices for setting a cron job for Let's Encrypt (Certbot) renewal?
Is this correct way to set cron for renewal of Let's Encrypt cert in Apache2 ?
I use Ubuntu 16.04.
@monthly letsencrypt renew && service apache2 reload
0
votes
0
answers
133
views
MariaDB Crashes on Startup with Let's Encrypt Certificates
It seems I'm encountering an issue while setting up secure connections for my clients to connect to my database server on Debian 12. Every time I attempt to start MariaDB, it crashes with a Private ...
0
votes
1
answer
156
views
Mikrotik: Creating Letsencrypt cert fails on RouterOS v7
From RouterOS's webfig CLI I attempted to create a LetsEncrypt cert:
certificate/enable-ssl-certificate dns-name=my.domain.com
But it returned the error:
progress: [error] http challenge validation ...
- 405
0
votes
2
answers
169
views
Postfix TLS with Letsencrypt configuration
I am running Postfix inside a docker container. Certificate are generated with certbot.
With the following configuration:
smtpd_tls_cert_file=/var/keys/fullchain.pem
smtpd_tls_key_file=/var/keys/...
- 10.3k
0
votes
1
answer
199
views
Ubuntu 23.10 certbot: Unable to obtain certificate from root ISRG Root X2
Due to internal security policies I need an P384r1-only certificate chain. I use certbot 2.1.0 on Ubuntu 23.10. From my understanding
certbot certonly -v \\
-a apache -i None \\
--cert-name <...
0
votes
0
answers
116
views
StrongSwan IPSec VPN - IKEv2 - LetsEncrypt Certificate Issue (building CRED_PRIVATE_KEY - RSA failed, tried 10 builders)
I followed the link below for setup IKEv2 VPN Using Strongswan and Let's encrypt on CentOS 7.
How to Setup IKEv2 VPN Using Strongswan and Let's encrypt on CentOS 7
But info on that link has been ...
- 15
0
votes
0
answers
38
views
How to add trusted SSL certificate to LinuxForHealth FHIR Server
I'm currently facing an issue with my LinuxForHealth FHIR Server setup and SSL certificates. I have the FHIR server running as a Docker container on my server, using a self-signed certificate and ...
4
votes
3
answers
4k
views
Nginx master process running as root, but warnings state that it is not
I am running nginx 1.11.3, compiled from source with the addition of the ngx_cache_purge module, on Ubuntu 14.04.3 server.
I'm seeing in the nginx error.log the following:
2016/08/03 14:30:00 [warn] ...
- 964
0
votes
1
answer
11k
views
Unable to renew Let's Encrypt SSL certificate in Nginx Proxy Manager
I've set up a few sites in Docker, on Linode.
I started by following these instructions:
Connect Your Docker Containers to Domain Names For Easy Access using Portainer on Linode
The steps I followed ...
CommunityBot
- 1
2
votes
1
answer
6k
views
disable ssl for mysql client apps
I have set up SSL for mysql replication. The problem is, that it makes problems on the other local apps which use mysql.
Like postfix:
Jul 25 23:00:22 srv1 postfix/proxymap[3141]: warning: connect ...
CommunityBot
- 1
0
votes
2
answers
78
views
In Postfix, Should SSL FQDN Matches with myhostname or mydomain field in /etc/postfix/main.cf?
Quoted from the documentation:
myhostname
The internet hostname of this mail system. The default is to use the fully-qualified domain name (FQDN) from gethostname(), or to use the non-FQDN result ...
- 9,783
0
votes
0
answers
39
views
Certbot enables root domain, instead only subdomains
I own a domain, lets say example.com.
I want a root domain example.com to be 404 or return a blank page (if 404 is not possible).
sub1.example.com - should redirect a traffic to a running docker ...
- 121
1
vote
1
answer
319
views
Securing LDAPS service of Azure Active Directory Domain Services with Let's Encrypt certificate fails
While I was trying to import certificates into Entra Domain Services to secure the LDAPS service. I read the instructions (CN=<domain name> etc.) on how to do this. Self-signed certificates were ...
- 2,594
1
vote
3
answers
3k
views
openLDAP certificates untrusted or revoked
I've already spent two days on this problem but I can't find any solution.
Two openLDAP server run from docker on different hosts in master/master scenario. ldapsearch command or syncrepl process run ...
- 1
2
votes
1
answer
521
views
Certbot stopped generating certificates
tl;dr : Certbot stopped generating certificates, shows a "Redirect loop detected" error, but there is no actual redirect loop.
The following issue appeared around 2023-11-30. I've focused on ...
- 371
0
votes
2
answers
4k
views
Using Nginx to serve Multi-tenant app with HTTPS
We have a multi-tenant application (dotnet core + Angular), the main website url for https://example.com, The customers URLs are (http://cust1.example.com, http://cust2.example.com,......)
If the ...
- 4,970
0
votes
1
answer
253
views
Use let's encrypt certificates with the prometheus node exporter
I'm trying to configure a prometheus node exporter with HTTPS using the website certificates generated by let's encrypt.
There is certificates with permissions default let's encrypt permission
But I ...
- 49.8k
-1
votes
1
answer
120
views
How can I authenticate the ownership of the server without opening port 80 in letsencrypt using nginx? [duplicate]
I am on nginx web server.
certbot --nginx -d domain_name
I'd do just this when port 80 used to be open. But a client doesn't know how to open port 80. So, I need alternatives.
- 12.6k
0
votes
1
answer
259
views
How to Submit a CSR for a Let's Encrypt Certificate Using Posh-ACME in PowerShell?
I'm working on issuing a Let's Encrypt SSL certificate for my domain using Posh-ACME in PowerShell, specifically for a wildcard domain (*.mydomain.com). I have already generated a CSR, since it's ...
- 33.3k
-1
votes
1
answer
209
views
Letsencrypt is generating self signed certificate, not wanted
I'm struggling with generating certificates for my nginx proxy on Docker.
I've designed the docker-compose in the following way:
version: "3"
services:
postgres-db:
image: postgres:15....
- 436
0
votes
0
answers
155
views
Ubuntu/Nginx server seems to be supplying non-existant SSL certificate
I had four websites configured on an Ubuntu 22.04 server using NginX.
There was a technical problem with the database connection that required me to move the four websites to a new server.
I moved ...
- 87
0
votes
1
answer
221
views
Dovecot certificate is empty
I configured a Mail server with postfix, dovecot and mysql from the documentation.
When I add a mail address in Outlook, it refused.
I tried everything what I can find, but nothing helps.
Can somebody ...
- 17.1k
3
votes
3
answers
2k
views
Unable to run nginx because of missing nginx.conf after fresh install on Ubuntu 20.04 LTS
I had trouble with getting my letsencrypt certificate running for nginx so I tried uninstalling everything and starting from scratch.
Now, when I (re)install nginx on my Ubuntu 20.04 LTS server
sudo ...
- 2,020
0
votes
0
answers
141
views
Create letsencryot ssl for both IPV4 and IPV6 + reverse proxy
i have a vps with ipv6 ::ffff:8b3b:e2ee and 139.59.226.237, i plan to add ssl to my ipv6 and using nginx with reverse proxy to other ip https://139.59.226.237.
If i dont include [::]:80 and [::]:443, ...
14
votes
1
answer
4k
views
Why does my Let's Encrypt certificate contain references to Cloudflare?
I own a website that uses a Let's Encrypt certificate. It's not behind Cloudflare, it's hosted at OVH and I'm accepting direct traffic from it.
Now, I set up an apache2 webserver and used certbot to ...
- 9,274
0
votes
0
answers
16
views
Duplicating an EC2 instance for creating a development platform for Wordpress site
I have an EC2 instance running Ubuntu hosting a Wordpress site on Apache. I've used LetsEncrypt's CertBot to create an SSL certificate and everything's working fine. I also have direct IP to domain ...
2
votes
2
answers
6k
views
How can I make SSL Lets Encrypt certificate auto renew on Ubuntu
How can I make the certificate for vgo site to auto new every time so I don't have to renew it manual or it will auto renew itself?
ssl_certificate /etc/letsencrypt/live/www.site.com/fullchain.pem; # ...
-1
votes
1
answer
1k
views
LetsEncrypt certificate (renewing) installing error
I'm trying to renew my LetsEncrypt certificate on my Raspberry Pi running apache2, but I seem to get an error when CertBot tries to generate the certificate.
Expected sha256 ...
- 101
0
votes
1
answer
137
views
Win ACME DNS validation for Google DNS is not working
I am trying to request a LetsEncrypt certificate using DNS validation. My DNS provider is Google DNS. No matter what I do, I keep receiving the following error:
[EROR] File C:\LetsEncrypt\{GCP-...
- 239
2
votes
3
answers
2k
views
How to troubleshoot ERR_SSL_VERSION_OR_CIPHER_MISMATCH on server with nginx reverse proxy and let's encrypt?
I have a server (Debian 9.13) with several websites running in Docker containers with nginx (1.13.12) as a reverse proxy.
The websites are under two domain names : alchimie-web.com and ...
- 211
0
votes
1
answer
750
views
DST Root CA X3 (Self-signed) - has expired in certificate chain used by Let's Encrypt (Apache/Windows)
Is it safe to remove a self-signed root certificate from the chain; and what, if any, are the consequences of doing that?
And how would I go about doing this on a Windows setup? The instructions under ...
- 274
-3
votes
2
answers
113
views
Creating/Configuring a DNS server with runtime configuration [closed]
I have a big Windows video/audio application that may be controlled remotely over a web server. For that, I can listen to a local port in a, say, 192.168.1.10 system to port 8000, forward the port via ...
- 1,893
3
votes
1
answer
4k
views
nginx config using variable in ssl_certificate path throws permissions error
The nginx configuration server block:
localhost:/etc/nginx$ cat nginx.conf | grep -B 3 -A 6 '$ssl_server_name'
server {
listen 443 ssl http2 default_server;
ssl_certificate /etc/...
CommunityBot
- 1