Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

146
votes
7answers
232k views

How to use Let's Encrypt DNS challenge validation?

Let's Encrypt has announced they have: Turned on support for the ACME DNS challenge How do I make ./letsencrypt-auto generate a new certificate using DNS challenge domain validation? EDIT I mean: ...
1
vote
1answer
693 views

nginx certbot certificate www and non-www

I haven't really wrapped my head around how to create (working) certificates using certbot for nginx. My sites-enables now look like this: First, a block for the www domain with SSL. All the SSL ...
10
votes
1answer
4k views

Redirect all requests to HTTPS, except for one subdirectory

I'm trying to move from self-signed certificates to Let's Encrypt certificates on my nginx webserver. Currently, I redirect all requests to http/80 to https/443, which uses a self signed certificate ...
40
votes
2answers
59k views

Lets Encrypt with an nginx reverse proxy

Introduction I have a dev server (currently running Ubuntu 14.04 LTS), which I have been using for a while now for hosting various development tools on different ports. Because the ports can be hard ...
82
votes
7answers
118k views

Cron job for let's encrypt renewal

Is this correct way to set cron for renewal of Let's Encrypt cert in Apache2 ? I use Ubuntu 16.04. @monthly letsencrypt renew && service apache2 reload
14
votes
5answers
21k views

Nginx disable .htaccess and hidden files but allow .well-known directory

I have a Nginx server, and disabled hidden files in the nginx_vhost.conf ## Disable .htaccess and other hidden files location ~ /\. { deny all; access_log off; ...
5
votes
3answers
1k views

How can I use Let's Encrypt (letsencrypt.org) as a free SSL certificate provider?

I have a few sites running with a StartSSL free certificate (CJSHayward.com, JobhuntTracker.com), and Firefox rejects StartSSL and displays an error page saying that my server is not properly ...
1
vote
1answer
2k views

nginx https www redirect to non-www using let's encrypt certbot

Hi this must be a basic question but I haven't seen an answer with cerbot considerations (if there are any considerations). How do I get https www to redirect to non-www instead of timing out? The ...
2
votes
2answers
2k views

Redirecting www to non-www (apache, letsencrypt )

Ubuntu 14.04 Apache 2.4.18 I have set up a SSL certificate using letsencrypt. It works well but in order to work, I cannot have multiple vhost defined in one virtualhost configuration file. Each ...
2
votes
3answers
829 views

How do I conditionally set the SSLCertificateFile when the file exists?

I am using Let's Encrypt (certonly) to generate SSL certificates for several websites hosted on an Apache server. The file location of these certificates is determinate before they are created, so I ...
0
votes
1answer
60 views

Certbot misbehaves by creating a certificate for a domain with “www”

This time when I used certbot it created a certificate for "www.$website" instead of $website. This is not what I need. Here it is: $ website="my_website123.com" $ sudo certbot certonly --...
6
votes
4answers
5k views

Let's Encrypt SSL Certificate File Not Found Error, but still working

I'm running SSL Certificates from Let's Encrypt. I've got them installed on my Ubuntu machine running Apache. The setup works fine and I can launch the website, see the green padlock and even got an A+...
7
votes
1answer
5k views

Redirect everything but .well-known in NGINX (Let's Encrypt)

I want to get a certificate via the letsencrypt.sh so I have to provide a challenge on HTTP. Already I use NGINX to forward to SSL (served on a nodejs server). Now I want to still redirect everything ...
1
vote
1answer
6k views

Nginx refused to connect to port 443

So, I am trying make Nginx serve my website via https, but it keeps hitting me with a refused to connect error. So here are the outputs for: curl https://juristnet.ro (this is the website) curl: (...
1
vote
1answer
900 views

Why is Let's Encrypt now failing to look up an A record from Pragmatometer.com?

I have used Let's Encrypt successfully for two of my domains; but when I tried the same steps as https://antipaucity.com/2016/01/06/lets-encrypt-centos-6-truly-free-ssl/, it hangs and eventually ...
1
vote
1answer
845 views

Letsencrypt on CentOS 6 with Multiple VirtualHosts

I am trying to setup Letsencrypt on a CentOS server that has multiple virtual hosts. It seems to work ok on Ubuntu, and I realize that the script that does the work only works for single domains on ...
1
vote
1answer
719 views

Exclude Let's Encrypt http requests from nginx https redirect

i found already some q&a's here regards this topic but none was helping me to solve the problem. I installed a debian 8 server just today and every request to my domain is redirected to https. Now ...
1
vote
2answers
227 views

nginx as reverse proxy with several domains & hosts

This question has probably been asked several times, but with all results I can find and my little knowledge, I'm kind of lost. I'm using Fedora 29. What I try to do with nginx : Use one let's ...
0
votes
2answers
67 views

Let's Encrypt setup for subdomain which is pointed to other host

I'm trying to setup a two server system, where one is doing webhosting and the another is delivering content (CDN) for the webhost server. I currently own two servers and they both have Let's Encrypt ...
0
votes
1answer
1k views

nginx with multiple certificates, letsencrypt and self-signed

I would like so use Nginx as frontend SSL proxy with Letsencrypt certificates and also limit client access to certain backend servers with other (self-signed) certificate. I cannot use Letsencrypt for ...