Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

0
votes
0answers
10 views

Plesk: how to configure Proxy Rule for Lets Encrypt [closed]

I need a rule that doesn't redirect all requests from /.well-known/ to the docker container. The requests should go to the web directory of plesk. Info: I have a proxy rule that moves the domain ...
0
votes
1answer
34 views

letsencrypt failed authorization procedure

I'm receiving the following error when attempting to renew my ssl certificate Failed authorization procedure. karaokeottawa.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks ...
1
vote
1answer
59 views

LetsEncrypt certificate for parked domains

Hopefully you can shed some light on what might be going on here: I have migrated website cutit.sk from external VPS on my private server. I also have several domains, which are meant to redirect ...
0
votes
2answers
16 views

How do I get ssl_preread_alpn_protocols for acme-tls request working with nginx 1.14?

I'm trying to configure Nginx to support Let's Encrypt with TLS-ALPN-01 using dehydrated. In their documentation they have the following for telling Nginx load balancing to direct the request to a ...
-1
votes
1answer
46 views

modern installation of Tomcat with SSL on port 443

In the computer course I'm writing I'm using Tomcat for the server. (Students learn how to set up CentOS and everything from scratch. Currently the course has them using Tomcat running on port 8080.) ...
0
votes
0answers
46 views

IPv6 is resolved from G suite relay address cause “Invalid credentials” when sending via postfix test

I came across a wired issue it is obviously Gmail relay service resolved as IPv4/v6 randomly, which causes the authentication not passed. I used DigitalOcean Ubuntu 18.10 + Postfix + G Suite account +...
5
votes
1answer
16k views

Renew domains using certbot and using DNS challenge

I created several SSL certificates for several domains using the standalone method. I am only interested in the certificates, without server integration. They are now for renewal. So, I ran: certbot ...
2
votes
1answer
39 views

Let's encrypt: renew vs new, or: why renew

Might be a stupid question but: where is the difference between renewing a Let's encrypt certificate and just getting a new one? Related question and background for this question: do I need to keep ...
0
votes
1answer
1k views

disable ssl for mysql client apps

I have set up SSL for mysql replication. The problem is, that it makes problems on the other local apps which use mysql. Like postfix: Jul 25 23:00:22 srv1 postfix/proxymap[3141]: warning: connect ...
0
votes
0answers
32 views

Ubuntu Certbot SSL not working 18.04

I am trying to integrate SSL with my Laravel site http://enablerochester.com. I tried following the tutorial for setting up certbot on Ubuntu 18.04 here: https://www.digitalocean.com/community/...
2
votes
1answer
964 views

Requests can't be forwarded to peer network because the peer project disabled DNS peering

I am trying to get cert-manager works with my GKE. I had followed the official documents and had tried dns01 with no luck. Currently I believe I found the missing manual it called customized DNS. In ...
0
votes
0answers
12 views

Can't obtain SSL-cert with lets encrypt

IMPORTANT NOTES: - The following errors were reported by the server: Domain: xx.yy.no Type: connection Detail: Fetching http://xx.yy.no/.well-known/acme-challenge/...
-2
votes
1answer
67 views

How to use Letsencrypt to domain that has no root folder with Cloudflare?

I am trying to use Letsencrypt (HTTPS) on my website with Cloudflare (HTTP) but I confuse with this. the domain doesn't have a root folder accessing domain will be redirected to one of subdomains ...
0
votes
1answer
28 views

Https not working

I have a site running on Apache. My site is working properly for http requests, but not for https. This site is behind ProjectShield and I followed this tutorial in order to activate my own SSL ...
1
vote
2answers
131 views

Strongswan with letsencrypt certificates (IKEv2-EAP)

I am configuring Strongswan server for VPN clients to access internal network (EAP-IKEv2). I set it up successfully using self-signed server certificates and it works for clients using Mac OS X, ...
1
vote
0answers
15 views

Securing LDAPS service of Azure Active Directory Domain Services with Let's Encrypt certificate fails

While I was trying to import certificates into AADDS to secure the LDAPS service. I read the instructions (CN=<domain name> etc.) on how to do this. Self-signed certificates were working fine ...
0
votes
0answers
35 views

Deploying letsencrypt certs automatically to VMware VCSA 6.7

I have an existing haproxy VM responsible for managing various letsencrypt certificates. I'd like to use these certificates in VCSA 6.7. Does anyone know of a "nice" way to deploy them to VCSA non-...
1
vote
2answers
89 views

Is it necessary to buy a domain in order to run the Let's Encrypt DNS Challenge on the intranet?

This question(s) might sound naive to many of you, but I'm more of a developer than a sysadmin, so it'd be extremely useful to have some advice before digging in. Let's say I own the foobar.com ...
0
votes
1answer
46 views

Apply SSL certificate in a bigger context

In my default-ssl <VirtualHost _default_:443> ServerName example.co DocumentRoot /var/www/html/example SSLEngine On SSLCertificateFile /etc/letsencrypt/live/example.co/cert.pem ...
0
votes
1answer
1k views

Sni multiple ssl on different virtualhosts Apache 2.4.10 (Debian)

Is it possible to set up multiple domains ssl on that apache version? I have site A -> ssl certificate A site B -> certificate B then each file has a virtualhost like this, but it's not working: ...
1
vote
2answers
37 views

let's encrypt AWS redhat

I'm setup a server for testing in AWS EC2 and I can't secure the default domain. I'm following this tutorial https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/SSL-on-an-instance.html I've install: ...
0
votes
0answers
18 views

Ubuntu Apache https time out status. Though http works fine

Created ssl certificate using let's encrypt for apache. It is showing request timed out every time. nc -zvw 1 studytact.ml 443 nc: connect to studytact.ml port 443 (tcp) timed out: Operation now in ...
0
votes
1answer
1k views

SSL Permission Error: Node.js with HTTPS + Let's Encrypt SSL + Apache + Non-Root User

I have a Node.js server set up and I am trying to use HTTPS with my Let's Encrypt certificate on Apache. Here is the relevant code I have set up: var fs = require('fs'), https = require('https'), ...
1
vote
1answer
1k views

Traefik + k8s + Let's Encrypt wildcard SSL + Cloudflare issue

I'm trying to set-up a reverse proxy with wildcard SSL using Traefik, with a DNS challenge against a Cloudflare zone. I have this config in k8s: kind: ConfigMap apiVersion: v1 metadata: name: ...
6
votes
3answers
2k views

configure CouchDB with Lets Encrypt SSL certificate

What i would like to do: Now I'm using a self signed SSL certificate which works wonderful. But I would like to replace them with an official one of lets encrypt. What i have (self signed certificate)...
3
votes
3answers
1k views

Let's encrypt certificate and NGINX - Cannot find a cert or key directive

My server runs on a LEMP Stack Ubuntu 16.04 and last version of nginx I already have a SSL certificate installed on my server for the following domains and subdomains : example.com, domain1.example....
0
votes
1answer
58 views

How to renew an expired let's encrypt certificate

I didn't notice my Let's Encrypt certificate had expired. I would like to renew it. I typed the command below certbot renew But I got error below. # certbot renew Saving debug log to /var/log/...
0
votes
0answers
20 views

How to use OmniAuth with Rails+Nginx+DigitalOcean?

My Rails app used to use OmniAuth to login in through Facebook/Twitter/Google accounts (different omniauth gems). Everything was working when my app was in some server which was preconfigured, but ...
3
votes
1answer
1k views

Getting “Error: couldn't get currently installed version for letsencrypt” when trying to renew my certificates

I started getting an error when trying to renew my letsencrypt certificates on Ubuntu 15.04 + nginx server. Even when I try running the certbot-auto command, I see the following: Error: couldn't get ...
1
vote
0answers
28 views

Configure GitLab Docker container with Plesk and LetsEncrypt

Hi I have an issue with my GitLab setup. What I'm trying to achieve: running GitLab inside a Docker container access GitLab through a subdomain (gitlab.mydomain.com) at ports 80 and 443 for https ...
0
votes
0answers
18 views

Would it be feasible to detect domains and install Letsencrypt certificates via bash script?

I would like to create a scheduled shell script to do the following on a Centos server: Read the Apache virtual hosts file For every domain detected, check if there is a valid ssl cert in place For ...
0
votes
0answers
135 views

How to add CAA records, in PowerAdmin(PowerDNS) for ssl certificates in letsencrypt?

I am trying to add ssl certificates for a secure connection https for the domain and subdomains, but the problem I get is the following: DNS problem: SERVFAIL looking up CAA for DOMAIN DNS problem: ...
3
votes
3answers
3k views

How to grant access to “/.well-known” directory on SVN server (Apache 2.2)

I cannot figure out how to disable authentication for the .well-known directory. Things behave as expected when I remove the SVN specific directives (DAV, SVNPath, AuthzSVNAccessFile). <...
0
votes
0answers
32 views

How to set TXT TTL to 1

I am trying to verify my domain ownership to Let's Encrypt by adding a TXT record to mydomain.zone located in /var/named. Let's Encrypt wants me to add it with a TTL of 1 second. However, I find no ...
0
votes
0answers
46 views

Connection Closed after switching IPs with new SSL Certificate

I recently installed a couple SSL certificates on a few domains, and generally they work, but whenever I switch IP addresses I get an ERR_CONNECTION_CLOSED error. If I refresh a few times, it will ...
0
votes
1answer
46 views

How to complete certificate chain last node

I am running my own RocketChat latest version on Docker. And on top of it I have Nginx as a reverse proxy running Certbot to do a https. It works perfectly fine with Firefox web browser on Android and ...
0
votes
1answer
20 views

Deleting Cerbot-issued certificate

I have a production server. I created an exact copy of that server for development. example.com (Production Server) dev.example.com (Development Server) Because it is an exact replica, it also ...
0
votes
0answers
9 views

iptables blocks port-forwarded requests to port 80

My iptables rules are: -P INPUT DROP -P FORWARD ACCEPT -P OUTPUT ACCEPT -A INPUT -s 192.168.2.0/24 -p tcp -m tcp --dport 22 -j ACCEPT -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A ...
1
vote
1answer
114 views

SSL issue with LetsEncrypt for some users

I run https://podnews.net through AWS, and use their SNI SSL certificates. This appears to work fine for everyone. For the newsletter software, my click throughs go through https://sendy....
0
votes
0answers
16 views

SSL is forwarding domain

I currently ran lets encrypt auto on my ssh. When I ran it I had the option to forward all https requests. I went ahead and did so. I ran two domains at once and somehow subdomain 1.example.com is ...
1
vote
1answer
659 views

nginx certbot certificate www and non-www

I haven't really wrapped my head around how to create (working) certificates using certbot for nginx. My sites-enables now look like this: First, a block for the www domain with SSL. All the SSL ...
-2
votes
2answers
2k views

Nginx unexpected end of file

I have nginx set up in a docker container (https://hub.docker.com/r/aptalca/nginx-letsencrypt/). Some changes were made (adding the last location block) and now nginx fails to start. Using the nginx ...
2
votes
0answers
54 views

LetsEncrypt unable to authorize

I have setup my server on digital ocean, and followed along with https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-16-04 When I tried to run the ...
0
votes
1answer
1k views

Unable to verify my domain for letsencrypt

I can't understand how to verify my domain for letsencrypt. $ ./letsencrypt-auto certonly -a webroot --webroot-path=/home/my_user1/my_domain -d my_domain.com -d www.my_domain.com Requesting root ...
0
votes
0answers
16 views

Internal Server Error after installing LetsEncrypt SSL certificate and uninstalling it again

Following the directions given here, I tried to install a LetsEncrypt certificate on my Ubuntu 14.04 apache virtual private server with SSH (root) like this: apt-get install certbot python-certbot-...
0
votes
1answer
37 views

Are my NGINX server blocks set up improperly (HTTPS 301's and assets not being cached in browsers)?

I inherited a server and there are a couple of issues that I have diagnosed and that certain page speed performance tests are flagging. 1) In the server block certain requests are being redirected ...
0
votes
0answers
38 views

apachectl configtest “Function not implemented” and Let's Encrypt auto-renew fails

One of my CentOS 7 servers cannot run certbot-auto renew because of an error while running apachectl configtest. Here's its output: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...
0
votes
1answer
38 views

Nginx wildcard redirect everything to https non www but subdomains goes to a specific folder?

I just installed Let's Encrypt wildcard certificate and I want to use the non www as my standard regex for shorter server block. So I wish to do the following: http non www ---> https non www ...
0
votes
1answer
32 views

SSL Enabled Geonode Service

Recently I have installed geonode on apache tomcat8 in an Ubuntu 16.04 droplet on digitalocean . Everything worked without any issue. The service was up and running. Then I tried to enable SSL for ...
0
votes
0answers
21 views

Ansible to loop over grouped items

I got a small task I'd like to implement in ansible: There is a list of websites that are on the webserver, each associated with docroot, like this: site1.com => docroot: /var/www/site1/ site2.com =>...