Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

0
votes
2answers
88 views

Nginx still redirecting to HTTPS after changing config

I need to temporarily disable HTTPS on our site because I accidentally got rate limited by letsencrypt when renewing the certificate. When I go to the site I get redirected to https, but our cert is ...
0
votes
1answer
73 views

If I need to provide custom SSL certs for customers, can i still use Elastic beanstalk?

For a SaaS application where customers can use their own custom domain names, I will be using lets encrypt to generate the certs for customer domains. I am currently using elastic beanstalk (which ...
0
votes
2answers
464 views

How do I change the Let's Encrypt CA Endpoint?

Recently, LE did announce that they are making wildcard certs available. Such a great thing! But, whether or not that's active or not, while attempting to test the feature today, I got this error: ...
0
votes
0answers
14 views

Why my cron job for certbot did not work? [duplicate]

I try get a automatic cron job for let's encrypt renewal. sudo cat /etc/cron.d/certbot # /etc/cron.d/certbot: crontab entries for the certbot package # # Upstream recommends attempting renewal twice ...
0
votes
1answer
76 views

nginx redirecting domains with ssl

I have a new domain (my-future-domain.com) that I am trying to use to replace my current domain (my-current-domain.com). I am using a DigitalOcean Nginx server on Ubuntu and believe that I should be ...
2
votes
2answers
127 views

How to decouple a webserver from an email server?

I have a server that runs a web server and an email server for multiple domains, and both services are configured to use SSL certificates from Let's Encrypt (for each domain the web server and the ...
1
vote
1answer
972 views

How to use Let's Encrypt with Google HTTPS Load Balancer and managed instance groups?

I'm trying to understand how to use auto-scaling with an HTTPS Regional Load Balancer on Google Cloud. Their documentation recommends having the connection to the backend services (from the proxy) ...
0
votes
1answer
264 views

Apache SSLProxy

I am looking for a solution to provide a webapplication running on our local network under a subdomain via SSL. We dont want to use a DynDNS but a subdomain of our own domain. Our current setup Root ...
16
votes
2answers
2k views

Why not validate self signed certificates through DNS-record instead of letsencrypt

I was just wondering. We use a lot of SSL certificates. Nowadays, we almost exclusively use letsencrypt (thanks!). The bottom line of these certificates is, that proof of ownership of the domain name(...
0
votes
2answers
350 views

Let's Encrypt with dynamic subdomains

Setup is like this. I've got a domain e.g. example.com I've setup Apache2 with a VirtualDocumentRoot, this way I can point a subdomain to a specific folder in an easy way: File sites-available/...
1
vote
1answer
453 views

Different certificates for the same domain name with letsencrypt

I have a bunch of ec2 nodes (serve HTTP) behind two haproxy nodes (client facing HTTPS). There are two A entries for my domain name, so clients send requests to both haproxy nodes. Each new request ...
0
votes
1answer
276 views

Nginx + Discourse + Letsencrypt misconfiguration: ERR_SSL_PROTOCOL_ERROR only when visting site for the first time

I have a problem with setting up Discourse forum with Letsencrypt SSL cert. For the sake of example, I will refer to my page as mypage.com. THE GOAL: I want to set up VPS where I will have wordpress ...
0
votes
1answer
235 views

Server has a valid SSL Cert, Clients only see expired cert, why?

I have a web server where the active ssl cert (letsencrypt CA) is valid and up-to-date. Nginx is the front. However, I notice that browsers complain that the cert is expired - they seem to get served ...
0
votes
1answer
273 views

Error creating SSL cert with LetsEncrypt certbot on Amazon Linux

I'm trying to setup a free LetsEncrypt SSL certificate for a web server (Apache) running on an AWS EC2 instance running Amazon Linux (2017.09) using the certbot software. I can't seem to get it from ...
6
votes
1answer
1k views

Why does certbot suddenly fall back to http-01 challenge instead of tls-sni-01 (https)?

I have a well-tested bash script that was running fine until a few weeks ago. It seems that certbot challenge defaults now to http instead of https. I can't figure out the reason. echo 'rsa-key-size =...
0
votes
1answer
1k views

MariaDB SSL configuration - using Let's Encrypt certificate

I'm having truble forcing MariaDB to use my SSL cert files on Debian 8. Apache2 works fine with current file permissions in /etc/letsencrypt/* The only service that has any trouble with current certs ...
1
vote
1answer
647 views

nginx certbot certificate www and non-www

I haven't really wrapped my head around how to create (working) certificates using certbot for nginx. My sites-enables now look like this: First, a block for the www domain with SSL. All the SSL ...
0
votes
1answer
47 views

Let's Encrypt Cron job for Azure Scalesets

So, i have a scale set on Azure with VM's that will turn themselves on and off as needs arise. I would like to know if there's a way to automate the process of installing and replicating the same ...
0
votes
0answers
167 views

Let's Encrypt certificate binds to router and not my site

On windows server 2008 r2 I installed a ssl certificate (Let'sEncrypt) using Certify The Web application. The certificate installs ok. However when I try and view my site in ISS I get the error that ...
0
votes
1answer
86 views

nginx (reverse proxy + ssl): shifting conf-lines destroys configuration

I have a problem - regarding nginx - that manual reading and searching the web couldn't solve. (The following systems has been handed over to me out of the blue and the configuration is "a bit" messy ...
1
vote
0answers
307 views

certbot-auto can't extend license to new domain (403 Forbidden)

I have an Ubuntu server on Digital Ocean from which I'm running mainly a single domain, with multiple subdomains: domain.com, sub1.domain.com, sub2.domain.com, etc. Each has it's own Virtual Host. ...
0
votes
0answers
349 views

How to fix error in process of generation of let's encrypt cert

I have A-record on my server: 192.0.2.4 - my external ip (of course this is a example); master.example.org - A-record for this ip address Command: certbot certonly --webroot --agree-tos --email ...
0
votes
1answer
71 views

How to find second ssl certificate for domain [closed]

This is a little hard to get across, so apologies if it's unclear. I have been asked by a client to install an ssl cert on a domain that lives on a server he looks after. There are multiple domains ...
0
votes
1answer
271 views

Configuring Let's Encrypt on Tomcat 8 with Ubuntu 16.04

I have a Ubuntu 10.04 VM running in Google Compute Engine. The VM is assigned a static IP, which is configured in my DNS entry for www.myapic.com . I have tomcat 8 running as the webserver. Now I ...
0
votes
2answers
2k views

Let's encrypt nginx server tls-sni-01 challenge

I have a domain, let's say domain.com This domain was registered with Go Daddy and using the Go Daddy dashboard, I point the domain to a certain IP, let's say 1.2.3.4 This IP, 1.2.3.4, belongs to a ...
2
votes
2answers
56 views

Why do my sub domains point to other sub domains when I disable a site? [closed]

I have a personal server and I use many sub-domains on it. Each sub domain has its own unique SSL cert setup with LetsEncrypt. Each sub domain has its own vhost file under /etc/apache/sites-available/ ...
1
vote
0answers
24 views

Incomaptible server name

I installed a Letsencrypt cert using certbot for my domain carmensteffens.us Everything is ok except, in browsers (Chrome and Safari) for Apple devices (iOS and OSX). The browsers in Apple devices ...
1
vote
1answer
2k views

nginx https www redirect to non-www using let's encrypt certbot

Hi this must be a basic question but I haven't seen an answer with cerbot considerations (if there are any considerations). How do I get https www to redirect to non-www instead of timing out? The ...
0
votes
0answers
234 views

Nginx server blocks + Multiple SSL Domains + Lets encrypt certificates

i have a weird situation and its getting to me, here is the situation in a nutshell. website A with domain name: webappA.com website B with domain name: webappB.com All websites are configured as ...
2
votes
1answer
461 views

Let's Encrypt Expiry Bot (certificate expiration notice)

I use Let's Encrypt on Ubuntu 17.10 server with Apache HTTP server. In crontab I have: 15 3 * * * /usr/bin/certbot renew If I check expire date with: sudo certbot certificate I get report for ...
1
vote
0answers
452 views

LetsEncrypt and Intermediate Certificates

I'm starting to use LetsEncrypt certs instead of proprietary ones. The hosting provider installs these for me, and they work great. However, wondering about LC's intermediate certificates. In my ...
0
votes
1answer
389 views

Rewriting a url in iis from a subdomain so letsencrypt will find the challenge key

I'm having an issue with the above. Basically, I have a webmail.domain.com that I use IIS to redirect to. When it's time to renew my certificates though, I have to manually disable the webmail rule, ...
1
vote
1answer
77 views

Why does Let's Encrypt pick up disabled sites?

If I run letsencrypt --apache, it will fail, complaining that five domains on my small server fail due to timeouts. However, all five domains are disabled (a2dissite fake.example.net). Why is Let's ...
2
votes
2answers
2k views

looking for a way to get certbot running on Amazon Linux 2

Amazon has a new Linux out called "Amazon Linux 2" When I try and get certbot going.... wget https://dl.eff.org/certbot-auto chmod a+x certbot-auto ./certbot-auto gives this error Sorry, I ...
2
votes
1answer
151 views

How do I fix this: Client auth is required but no trust anchors found in: /var/lib/neo4j/certificates/default/trusted

I've been trying to configure SSL for a Neo4j server per their documentation. To this end I have created the following directory structure. /var/lib/neo4j/certificates# ls -lR .: total 12 drwxr-xr-x ...
1
vote
1answer
3k views

Adding a subdomain on Google Domains

I'm trying to create a TXT DNS record with name _acme-challenge.www on Google Domains to allow me to validate my DNS (i.e. via _acme-challenge.www.example.com). I've already validated the domain ...
0
votes
2answers
189 views

Can I configure letsencrypt to ask the verifier to check control of a domain using a srv record rather than an A record?

Suppose I run a service on example.com that relies on a SRV record to direct clients to it (in my case it's xmpp, but I think this applies to anything really). The service needs a certificate to ...
0
votes
0answers
76 views

HTTPS Redirect to another VHost

I'm trying to implement HTTPS to all my VHosts on my Apache server. I launched LetsEncrypt script for each VHosts (Alternative DNS Names on certs musn't be seen by clients) and everything works fine ...
2
votes
1answer
1k views

What is running 'certbot renew'?

I'm using Let's Encrypt to secure an Apache installation on Ubuntu. I recently set up a deploy hook script to run on renewals, which I'm passing to certbot renew in a cron job by using the --deploy-...
4
votes
3answers
2k views

Certbot fails. Enable Let’s Encrypt certbot on a new server that will replace the existing production server

I have an nginx web server with an SSL certificate provided by Let’s Encrypt using Certbot. For example, this site is publically available at https://example.com New server I’m creating a new server ...
0
votes
0answers
242 views

VM-Instance External IP

I have domain name served on a vm-instance in the GCP. In Google Domains under "Registered hosts" I have my domain name (with and without www) and are using the external ip of my vm-instance. I used ...
-1
votes
1answer
570 views

Nginx Let's Encrypt Refused Connection [closed]

Using a Digital Ocean LEMP Ubuntu 16.04 installation with one site example.com. Visting http://example.com works normally. Installed Let's Encrypt using https://www.digitalocean.com/community/...
1
vote
0answers
486 views

Using Wildfly 10 with Let's Encrypt

I am thinking about a change to Let's Encrypt certificates for my WildFly 10 HTTPS connections. But I am a bit anxious about the needed automatically restart of Wildlfy after the scheduled import by ...
0
votes
1answer
233 views

Exclude certain paths on https redirect by letsencrypt

I have an application on a lamp stack. The application uses let's encrypt SSL certs for https. One function of the application is to allow users to embed certain content in an iframe on other sites. ...
0
votes
1answer
2k views

Nginx HTTPS connection to port 443 refused

So I've setup LetsEncrypt on my Nginx server but cannot connect over https. If I run curl https://my.domain.com Then I get the error curl: (7) Failed to connect to my.domain.com port 443: ...
0
votes
1answer
164 views

Apache's virtualhost only for redirect

I have multiple domains, but I have only one certificate. I have created two virtualhost's, one with certificate for domain: domain.lt second with redirects to domain.lt Apache's SSL config: <...
0
votes
0answers
548 views

Apache RedirectMatch for SSL allowing LetsEncrypt not working

I've been trying to use Apache RedirectMatch to send most requests to SSL, but still allowing the Lets Encrypt challenge to work: RedirectMatch permanent ^/(?!\.well\-known/acme\-challenge)(.*)$ ...
0
votes
3answers
1k views

Dockerized Nginx + Certbot + tls-sni challenge not working on renewal

I have an existing service running using docker containers: nginx (nginx:1.13.5) node-api (node container) node-website (node container) I wanted to add SSL certificates for both api and website. So ...
0
votes
1answer
110 views

https with name of company in address bar

I don't know how to name it, so I can't search for it. I have a website with a Let's encrypt SSL certificate running with nginx and I would like to display the name of the company in the address bar ...
1
vote
2answers
1k views

Your connection is not private (NET::ERR_CERT_AUTHORITY_INVALID)

URL : https://vishnubathala.com/ **Error** Subject: www.example.com Issuer: www.example.com Expires on: Aug 3, 2027 Current date: Nov 9, 2017 PEM encoded chain: -----BEGIN CERTIFICATE----- ...