Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

0
votes
0answers
7 views

LetsEncrypt TLS Cert invalid? “EVP_MD_size:message digest is null”

I am finding this in my logs for postfix, I'm using a LetsEncrypt certificate but I'm unable to find any useful information online about it. Does anybody know if this is a problem or something that ...
0
votes
0answers
4 views

Cannot access Kestrel from outside on Ubuntu with Apache2

I have a server running Ubuntu 18.04 with .NET Core 2.1, Kestrel and Apache2. I am using LetsEncrypt for SSL. The domain was set up with SSL before hosting a static index.html site. After following ...
2
votes
1answer
49 views

How do I get Nginx to work with subdirectories? [Nginx, Let's Encrypt, basic auth]

What I want: I want to install Mautic in a subfolder of my web root. I have a domain https://example.com and I want Mautic to be accessible from https://example.com/mautic. What I have: I have a ...
0
votes
0answers
25 views

create letsencrypt exception for apache reverse proxy along with ip restrictions

Under normal circumstances, setting up an apache reverse proxy with a letsencrypt exception for /.well-known is easily done with ProxyPass /.well-known ! It seems to become much more difficult (...
0
votes
1answer
802 views

send() failed (111: Connection refused) while resolving, resolver: 127.0.0.1:53

Because of SSL stalping errors I had to set ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'; ssl_prefer_server_ciphers on; ssl_stapling on; ...
0
votes
1answer
195 views

Let's Encrypt certificate binds to router and not my site

On windows server 2008 r2 I installed a ssl certificate (Let'sEncrypt) using Certify The Web application. The certificate installs ok. However when I try and view my site in ISS I get the error that ...
0
votes
1answer
157 views

How to add CAA records, in PowerAdmin(PowerDNS) for ssl certificates in letsencrypt?

I am trying to add ssl certificates for a secure connection https for the domain and subdomains, but the problem I get is the following: DNS problem: SERVFAIL looking up CAA for DOMAIN DNS problem: ...
0
votes
2answers
355 views

Let's Encrypt error with Amazon Linux with virtualenv

I download certbot-auto and ran ./certbot-auto certonly --standalone -d domain.com -m tech@domain.com --agree-tos -n --debug I get below error that it is looking for virtualenv==15.1.0 but ...
4
votes
1answer
100 views

How to make Certbot ignore a particular domain in nginx?

I have ~30 domains running on my server, all of them with SSL certificates managed by the Certbot nginx plugin. All of them, except one... let's call it selfsigned.example.com. This domain uses a ...
0
votes
2answers
47 views

Can a SSL certificate be used on a locally hosted website?

I tried to install Let's Encrypt on my local server. But I could not because it threw errors that I need a fully qualified domain name (FQDN). I use server.arch.local as my hostname. Does it not ...
0
votes
0answers
41 views

SSL with Let's Encrypt, Apache and ProjectShield not working for WWW

I have a site behind ProjectShield, for www and bare domain. Without https, it is working for www and bare domain. Under https, is only working for the bare domain, not working for www, and that is ...
1
vote
1answer
972 views

Using Let's Encrypt certs on LAN with DNS redirection?

I'm trying to use existing LE certs with a server on my LAN. I exposed port 443 to get the certs for mine.example.com and https access works fine from the WAN. However, I assumed (perhaps foolishly) ...
0
votes
0answers
46 views

Let's Encrypt SSL on Google Cloud

I am utterly failing to find a working guide for installing Let's Encrypt certificates on a single Google Cloud virtual machine. I'm pretty clearly getting the picture that just doing the Apache ...
0
votes
1answer
54 views

HAProxy Multiple Services, Reverse Proxy, CERT NAME INVALID

I have a server with HAProxy setup. I am trying to connect my public ip to multiple servers that offer DIFFERENT services via external ports. So Port 80 will direct to Server 1, Port 100 will ...
7
votes
1answer
17k views

Renew domains using certbot and using DNS challenge

I created several SSL certificates for several domains using the standalone method. I am only interested in the certificates, without server integration. They are now for renewal. So, I ran: certbot ...
1
vote
6answers
4k views

What are my options for moving my LetsEncrypt certificate from one server to another?

I have an ubuntu server running through Digital Ocean that has an SSH certificate that I got through LetsEncrypt. I'm trying to switch to a cheaper service, and I need to move the cert to my new ...
2
votes
0answers
22 views

Failed to renew SSL certificates using Certbot's “dry-run” command

I was using apache for my website and created the SSL for Apache. Then for some reason, I have to change my server from Apache to Node.js. To do that I just copied the SSL certificates path from ...
0
votes
1answer
46 views

letsencrypt failed authorization procedure

I'm receiving the following error when attempting to renew my ssl certificate Failed authorization procedure. karaokeottawa.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks ...
1
vote
1answer
62 views

LetsEncrypt certificate for parked domains

Hopefully you can shed some light on what might be going on here: I have migrated website cutit.sk from external VPS on my private server. I also have several domains, which are meant to redirect ...
0
votes
2answers
44 views

How do I get ssl_preread_alpn_protocols for acme-tls request working with nginx 1.14?

I'm trying to configure Nginx to support Let's Encrypt with TLS-ALPN-01 using dehydrated. In their documentation they have the following for telling Nginx load balancing to direct the request to a ...
-1
votes
1answer
61 views

modern installation of Tomcat with SSL on port 443

In the computer course I'm writing I'm using Tomcat for the server. (Students learn how to set up CentOS and everything from scratch. Currently the course has them using Tomcat running on port 8080.) ...
0
votes
0answers
70 views

IPv6 is resolved from G suite relay address cause “Invalid credentials” when sending via postfix test

I came across a wired issue it is obviously Gmail relay service resolved as IPv4/v6 randomly, which causes the authentication not passed. I used DigitalOcean Ubuntu 18.10 + Postfix + G Suite account +...
3
votes
1answer
48 views

Let's encrypt: renew vs new, or: why renew

Might be a stupid question but: where is the difference between renewing a Let's encrypt certificate and just getting a new one? Related question and background for this question: do I need to keep ...
0
votes
1answer
1k views

disable ssl for mysql client apps

I have set up SSL for mysql replication. The problem is, that it makes problems on the other local apps which use mysql. Like postfix: Jul 25 23:00:22 srv1 postfix/proxymap[3141]: warning: connect ...
0
votes
0answers
48 views

Ubuntu Certbot SSL not working 18.04

I am trying to integrate SSL with my Laravel site http://enablerochester.com. I tried following the tutorial for setting up certbot on Ubuntu 18.04 here: https://www.digitalocean.com/community/...
2
votes
1answer
984 views

Requests can't be forwarded to peer network because the peer project disabled DNS peering

I am trying to get cert-manager works with my GKE. I had followed the official documents and had tried dns01 with no luck. Currently I believe I found the missing manual it called customized DNS. In ...
0
votes
0answers
12 views

Can't obtain SSL-cert with lets encrypt

IMPORTANT NOTES: - The following errors were reported by the server: Domain: xx.yy.no Type: connection Detail: Fetching http://xx.yy.no/.well-known/acme-challenge/...
-2
votes
1answer
74 views

How to use Letsencrypt to domain that has no root folder with Cloudflare?

I am trying to use Letsencrypt (HTTPS) on my website with Cloudflare (HTTP) but I confuse with this. the domain doesn't have a root folder accessing domain will be redirected to one of subdomains ...
0
votes
1answer
31 views

Https not working

I have a site running on Apache. My site is working properly for http requests, but not for https. This site is behind ProjectShield and I followed this tutorial in order to activate my own SSL ...
1
vote
2answers
281 views

Strongswan with letsencrypt certificates (IKEv2-EAP)

I am configuring Strongswan server for VPN clients to access internal network (EAP-IKEv2). I set it up successfully using self-signed server certificates and it works for clients using Mac OS X, ...
1
vote
0answers
26 views

Securing LDAPS service of Azure Active Directory Domain Services with Let's Encrypt certificate fails

While I was trying to import certificates into AADDS to secure the LDAPS service. I read the instructions (CN=<domain name> etc.) on how to do this. Self-signed certificates were working fine ...
0
votes
0answers
61 views

Deploying letsencrypt certs automatically to VMware VCSA 6.7

I have an existing haproxy VM responsible for managing various letsencrypt certificates. I'd like to use these certificates in VCSA 6.7. Does anyone know of a "nice" way to deploy them to VCSA non-...
1
vote
2answers
110 views

Is it necessary to buy a domain in order to run the Let's Encrypt DNS Challenge on the intranet?

This question(s) might sound naive to many of you, but I'm more of a developer than a sysadmin, so it'd be extremely useful to have some advice before digging in. Let's say I own the foobar.com ...
0
votes
1answer
50 views

Apply SSL certificate in a bigger context

In my default-ssl <VirtualHost _default_:443> ServerName example.co DocumentRoot /var/www/html/example SSLEngine On SSLCertificateFile /etc/letsencrypt/live/example.co/cert.pem ...
0
votes
1answer
1k views

Sni multiple ssl on different virtualhosts Apache 2.4.10 (Debian)

Is it possible to set up multiple domains ssl on that apache version? I have site A -> ssl certificate A site B -> certificate B then each file has a virtualhost like this, but it's not working: ...
1
vote
2answers
42 views

let's encrypt AWS redhat

I'm setup a server for testing in AWS EC2 and I can't secure the default domain. I'm following this tutorial https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/SSL-on-an-instance.html I've install: ...
0
votes
0answers
24 views

Ubuntu Apache https time out status. Though http works fine

Created ssl certificate using let's encrypt for apache. It is showing request timed out every time. nc -zvw 1 studytact.ml 443 nc: connect to studytact.ml port 443 (tcp) timed out: Operation now in ...
0
votes
1answer
1k views

SSL Permission Error: Node.js with HTTPS + Let's Encrypt SSL + Apache + Non-Root User

I have a Node.js server set up and I am trying to use HTTPS with my Let's Encrypt certificate on Apache. Here is the relevant code I have set up: var fs = require('fs'), https = require('https'), ...
1
vote
1answer
1k views

Traefik + k8s + Let's Encrypt wildcard SSL + Cloudflare issue

I'm trying to set-up a reverse proxy with wildcard SSL using Traefik, with a DNS challenge against a Cloudflare zone. I have this config in k8s: kind: ConfigMap apiVersion: v1 metadata: name: ...
6
votes
3answers
2k views

configure CouchDB with Lets Encrypt SSL certificate

What i would like to do: Now I'm using a self signed SSL certificate which works wonderful. But I would like to replace them with an official one of lets encrypt. What i have (self signed certificate)...
3
votes
3answers
1k views

Let's encrypt certificate and NGINX - Cannot find a cert or key directive

My server runs on a LEMP Stack Ubuntu 16.04 and last version of nginx I already have a SSL certificate installed on my server for the following domains and subdomains : example.com, domain1.example....
0
votes
1answer
117 views

How to renew an expired let's encrypt certificate

I didn't notice my Let's Encrypt certificate had expired. I would like to renew it. I typed the command below certbot renew But I got error below. # certbot renew Saving debug log to /var/log/...
0
votes
0answers
26 views

How to use OmniAuth with Rails+Nginx+DigitalOcean?

My Rails app used to use OmniAuth to login in through Facebook/Twitter/Google accounts (different omniauth gems). Everything was working when my app was in some server which was preconfigured, but ...
3
votes
1answer
1k views

Getting “Error: couldn't get currently installed version for letsencrypt” when trying to renew my certificates

I started getting an error when trying to renew my letsencrypt certificates on Ubuntu 15.04 + nginx server. Even when I try running the certbot-auto command, I see the following: Error: couldn't get ...
1
vote
0answers
46 views

Configure GitLab Docker container with Plesk and LetsEncrypt

Hi I have an issue with my GitLab setup. What I'm trying to achieve: running GitLab inside a Docker container access GitLab through a subdomain (gitlab.mydomain.com) at ports 80 and 443 for https ...
0
votes
0answers
19 views

Would it be feasible to detect domains and install Letsencrypt certificates via bash script?

I would like to create a scheduled shell script to do the following on a Centos server: Read the Apache virtual hosts file For every domain detected, check if there is a valid ssl cert in place For ...
3
votes
3answers
3k views

How to grant access to “/.well-known” directory on SVN server (Apache 2.2)

I cannot figure out how to disable authentication for the .well-known directory. Things behave as expected when I remove the SVN specific directives (DAV, SVNPath, AuthzSVNAccessFile). <...
0
votes
0answers
38 views

How to set TXT TTL to 1

I am trying to verify my domain ownership to Let's Encrypt by adding a TXT record to mydomain.zone located in /var/named. Let's Encrypt wants me to add it with a TTL of 1 second. However, I find no ...
0
votes
0answers
54 views

Connection Closed after switching IPs with new SSL Certificate

I recently installed a couple SSL certificates on a few domains, and generally they work, but whenever I switch IP addresses I get an ERR_CONNECTION_CLOSED error. If I refresh a few times, it will ...
0
votes
1answer
57 views

How to complete certificate chain last node

I am running my own RocketChat latest version on Docker. And on top of it I have Nginx as a reverse proxy running Certbot to do a https. It works perfectly fine with Firefox web browser on Android and ...