Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

0
votes
1answer
425 views

Let's encrypt allows only one vhost per file on ubuntu/apache

Currently I am trying to set up let's encrypt on my Ubuntu 16.04 server. I am using Apache 2.4.18 as my webserver and also passenger. I am using the following command to generate my certs and to ...
2
votes
2answers
712 views

Systemd timer ignoring multipe hours

on an Arch linux machine hosting an nginx I want to automatically renew its LetsEncrypt certificates. I wrote a .service and .timer for this: #letsencrypt-update.service [Unit] Description=...
0
votes
1answer
332 views

SSL on some virtualhosts complains about wrong domain name

So I recently ran into this problem and want to describe the issue and the solution here: I have several virtualhosts on a httpd server and started to install letsencrypt SSL certificates on it via ...
0
votes
1answer
438 views

Disabled RC4 and SSL v3 with existing cert from letsencrypt

I can renew a cert like this: certbot-auto renew --apache but what parameters do I pass when I want to disable the less secure RC4 and SSL v3? I would assume the information I need is here, but I ...
3
votes
1answer
951 views

CentOS6.X: letsencrypt, cronjob and wrong “pip version”

I'm trying to write a script which will update the letsencrypt cert automatically via cronjob on up-to-date CentOS6.x. To do that I wrote have following script: #!/bin/sh # # get newest "Let's ...
4
votes
1answer
538 views

Let's Encrypt and local puppet development

I develop Puppet manifests in a Vagrant VM. I'd like to configure an SSL-terminating webserver, but obviously Let's Encrypt verification will fail when the node is only running on my laptop. Is ...
0
votes
0answers
393 views

Certbot - SSL: unknown protocol error

We are trying to install and use Certbot. We have installed it and we tried to install one certificate (for https://www.tuxx.cn/), but this gives the following error when using Mozilla Firefox: ...
2
votes
6answers
8k views

Using Lets Encrypt certificates with openLDAP

I've been running an openLDAP server for several months now and we use it to authenticate for a number of applications. A previous staff member set up the server and it doesn't seem to be a standard ...
3
votes
1answer
2k views

LetsEncrypt: Unknown SSL protocol error in connection

I have a host with LE certificate and it works well in a browsers, but I still can't connect using curl, openssl, wget, POST (libwww-perl): curl # curl -v -3 https://example.com/ * Hostname was NOT ...
0
votes
1answer
1k views

letsencrypt works www but not root domain (apache)

i'm trying to install letsencrypt on a server, both www and the root domains are hosted by the box. i can install with the www subdomain no problem, but not the root domain. here's the error i'm ...
0
votes
1answer
1k views

apache2 with letsencrypt is very slow

I have a problem with my server configurations, My site works great with http requests, but when I changed it to https using letsencrypt certificate - to enable http2 - the server became really slow. ...
6
votes
4answers
4k views

Let's Encrypt SSL Certificate File Not Found Error, but still working

I'm running SSL Certificates from Let's Encrypt. I've got them installed on my Ubuntu machine running Apache. The setup works fine and I can launch the website, see the green padlock and even got an A+...
1
vote
1answer
2k views

How to forward all http requests to https without breaking letsencrypt with nginx

I'm using Nginx to serve as a reverse proxy for Rstudio server and Shiny server for the purposes of securing the connection to these services. I'm using Letencrypt for free signed certs. I have this ...
2
votes
1answer
510 views

Reuse letsencrypt dns challenge

With letsencrypt, certificates have to be renewed every 90 days. Everytime a cert is renewed, ownership of the domains included in the cert has to be proven again. It is possible to do so by adding ...
2
votes
2answers
4k views

Using Lets Encrypt SSL for multiple Apache servers with distributed traffic

I'm having some issues setting up Let's Encrypt for a couple websites that are setup on two different servers, and have the traffic distributed to them via HAProxy. The servers have a number VHosts/...
5
votes
1answer
2k views

gitlab SSL configuration / certificate verification failed

I have my own gitlab server, now secured with an letsencrypt SSL certificate. Now, I want to publish some packages via packagist. But when I enter the git repository url in packagist, I got the ...
3
votes
1answer
1k views

Do I need to have port 80 configured in LAMP for an HTTPS website?

I have a LAMP webserver, and on it there is https://sslhosting.cz/ domain. First I attach a general Let's Encrypt config file, which I changed to my needs: /etc/letsencrypt/options-ssl-apache.conf #...
1
vote
0answers
1k views

RabbitMQ SSL Configuration

I generated a letsencrypt certificate and tried to configure the cert with my rabbitmq server. I enabled both rabbitmq_management and rabbitmq_mqtt plugins with the same ssl cert configuration. My ...
1
vote
1answer
896 views

Why is Let's Encrypt now failing to look up an A record from Pragmatometer.com?

I have used Let's Encrypt successfully for two of my domains; but when I tried the same steps as https://antipaucity.com/2016/01/06/lets-encrypt-centos-6-truly-free-ssl/, it hangs and eventually ...
1
vote
1answer
825 views

Letsencrypt on CentOS 6 with Multiple VirtualHosts

I am trying to setup Letsencrypt on a CentOS server that has multiple virtual hosts. It seems to work ok on Ubuntu, and I realize that the script that does the work only works for single domains on ...
38
votes
2answers
58k views

Lets Encrypt with an nginx reverse proxy

Introduction I have a dev server (currently running Ubuntu 14.04 LTS), which I have been using for a while now for hosting various development tools on different ports. Because the ports can be hard ...
1
vote
1answer
559 views

Setting up Let's Encrypt for my domain and all sub-domains

I have a server (Debian 7 Wheezy and Apache 2.2) set up that hosts my domain, and a few sub-domains stemming from this. At the moment, I have these all set up in the default conf file as separate ...
4
votes
3answers
15k views

LetsEncrypt certificate renewal failure

I tried to renew the certificate of my server. The current one has expired 1 month ago, but I didn't took care of it until now. I tried to use the letsencrypt-auto renew command but got a failure: ...
5
votes
1answer
4k views

How to fix issues with LetsEncrypt certificate chains on Windows Server?

I've been using LetsEncrypt to generate certificates for my sites on Windows 2012 R2 server. It worked great, until recently when I renewed the certificates. LetsEncrypt made a recent change where ...
5
votes
3answers
1k views

How can I use Let's Encrypt (letsencrypt.org) as a free SSL certificate provider?

I have a few sites running with a StartSSL free certificate (CJSHayward.com, JobhuntTracker.com), and Firefox rejects StartSSL and displays an error page saying that my server is not properly ...
0
votes
2answers
267 views

How to get Let's Encrypt to give challenge text for all domains at once?

I'm using Let's Encrypt for my Google App Engine site, so I'm generating certificates only, and while it's working, the process for verifying multiple domains seems clunky. I presume I'm doing ...
5
votes
3answers
7k views

Lets Encrypt OpenVPN AS

I've got an OpenVPN AS running and I am trying to setup SSL certs (running ubuntu) from letsencrypt. I've managed to get my certificates from letsencrypt (using letsencrypt standalone) and I was ...
-3
votes
1answer
61 views

I get other website's tls certificate when visiting my website [closed]

i have a weird issue while visiting my website using https... I can't track how often this happens, but sometimes T get a TLS certificate of another website.... and the browser warns me that the ...
0
votes
1answer
484 views

Generate certificate on dev machine and copy to prod?

I want to use Let's Encrypt to create a certificate for my website. I have the client installed locally on my dev machine and would like to generate the cert and move it. For stand-alone webserver ...
1
vote
2answers
2k views

Let's Encrypt certificate not recognized by Nginx

I successfully created some LE SSL certs, using this guide. However, when I updated my nginx config to use the certs and redirect all port 80 traffic to 443. http successfully redirects to https, the ...
8
votes
2answers
2k views

Using Let's Encrypt inside Docker's official Wordpress container

I'm trying to get Let's Encrypt inside the official Docker Wordpress container. Setup the environment $ cat docker-compose.yml wordpress: hostname: some.fqdn.com image: wordpress links: - ...
1
vote
1answer
225 views

How to exclude Apache VirtualHost from global rewriting?

I have setup Let's Encrypt SSL certificate on my VPS, which works fine, but now all VirtualHost are trying to load over https://. I have found RewriteRule directive in le-redirect.conf: <...
13
votes
5answers
20k views

Nginx disable .htaccess and hidden files but allow .well-known directory

I have a Nginx server, and disabled hidden files in the nginx_vhost.conf ## Disable .htaccess and other hidden files location ~ /\. { deny all; access_log off; ...
-1
votes
1answer
783 views

Letsencrypt ISPConfig 3 security error in Firefox

I have setup SSL certificates with letsencrypt and ISPConfig 3 (on a cheap hosting service). Installed letsencrypt on a Ubuntu desktop: git clone https://github.com/letsencrypt/letsencrypt cd ...
0
votes
0answers
72 views

LetsEncrypt adding new Cert without killing Service

I use Let's Encrypt for my HTTPS certificates and every time I add a new cert or update a existing one I must stop my HTTP server on port 80 and start the Let's Encrypt script. I want to add new ...
7
votes
1answer
5k views

Redirect everything but .well-known in NGINX (Let's Encrypt)

I want to get a certificate via the letsencrypt.sh so I have to provide a challenge on HTTP. Already I use NGINX to forward to SSL (served on a nodejs server). Now I want to still redirect everything ...
14
votes
4answers
11k views

how do I change the admin email for let's encrypt?

The email address used as the admin email when we started using let's encrypt needs to be modified (a former employee used his personal email address as the admin email and he is no longer with the ...
139
votes
7answers
222k views

How to use Let's Encrypt DNS challenge validation?

Let's Encrypt has announced they have: Turned on support for the ACME DNS challenge How do I make ./letsencrypt-auto generate a new certificate using DNS challenge domain validation? EDIT I mean: ...
0
votes
2answers
2k views

CloudFlare giving error 522 without HTTPS

I've set up Let's Encrypt (with nginx) on my server, following the tutorial I've linked in the comments. I've also set up CloudFlare with the following DNS settings: http://i.imgur.com/Z7PRD6l.png ...
0
votes
1answer
11k views

Disable/remove Let's Encrypt? [closed]

I followed this tutorial to enable Let's Encrypt on my server, however I now want to remove/disable it: https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-...
5
votes
2answers
3k views

Let's Encrypt — “DNS … query timed out looking up CAA for …”

I have been using Let's Encrypt on a few domains for a couple of months now, and it generally has been working. I was going through renewing the certs, and for one of the domains I get the following ...
2
votes
2answers
2k views

Redirecting www to non-www (apache, letsencrypt )

Ubuntu 14.04 Apache 2.4.18 I have set up a SSL certificate using letsencrypt. It works well but in order to work, I cannot have multiple vhost defined in one virtualhost configuration file. Each ...
0
votes
1answer
180 views

Set server wide ssl configuration

Background I have a simple server with only one site. I want to force ssl. I previously did this with a self signed certificate, but now I have got a letsencrypt cert. I have used the auto set up, ...
0
votes
1answer
957 views

Apache redirect - let's encrypt SSL certificate redirecting to naked domain rather than www

I recently set up a new website running off Wordpress which is working nicely. Since I wanted to have an SSL certificate for the website I thought I'd use Let's Encrypt since I've been hearing a lot ...
0
votes
0answers
1k views

SSL server: Unable to get local issuer certificate (Let's Encrypt)

As the title says I'm having some problems with my https connection, it was working perfectly but now (2 weeks after) I was installing the Jetpack plug-in on my wordpress site when I got an IXR -32300:...
1
vote
0answers
1k views

Let's Encrypt on AWS EC2 - domain name mismatch

I tried to generate a SSL certificate with Let's Encrypt on my EC2 instance with an elastic IP associated to it. The command I run is ./letsencrypt-auto certonly --standalone -d mariellaval.com -d ...
0
votes
1answer
459 views

Installing letsencrypt fails when running python install scripts

I'm trying to install letsencrypt from source on a Debian 8. When running ./letsencrypt-auto --help --verbose the script stops at the following lines: ... Collecting funcsigs (from mock->...
6
votes
3answers
2k views

configure CouchDB with Lets Encrypt SSL certificate

What i would like to do: Now I'm using a self signed SSL certificate which works wonderful. But I would like to replace them with an official one of lets encrypt. What i have (self signed certificate)...
7
votes
1answer
3k views

RabbitMQ with a LetsEncrypt certificate

I have been trying to install my LetsEncrypt generated certificates into my rabbitmq server but have had no luck. To test things out with out having to fight permission issues I have copied the pem ...
0
votes
1answer
558 views

letsencrypt certificates automation

I ma trying to automate my letsencrypt installation for apache. If I try this: ./letsencrypt-auto certonly --renew-by-default -a webroot --webroot-path /home/sendy/ --email me@gmail.com --agree-tos -...