Questions tagged [ssl-certificate-renewal]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
2answers
243 views

SSLProtocol: Illegal protocol 'TLSv1.1' in linux

I know u think this a duplicate question but hear me out first. I am not able to find the answer with a system with same conf as min so here is my server conf: Red Hat 4.1.2-44 CentOS release 5 ...
0
votes
1answer
123 views

How to fix LetsEncrypt renewal failing with error “Unable to reach credentials server”?

I have successfully acquired a certificate using Win-Acme installed on Windows Server 2012. The software is setup to renew using the Route53 plugin to automatically verify ownership via DNS. Win-acme ...
0
votes
1answer
25 views

Request a Digicert Secure Site EV SSL certificate from Azure Portal (or PowerShell) for use with Azure Application Gateway/App Services

I'm trying to generate/request a new certificate from Digicert in Azure. I've been instructed to purchase the EV SSL cert from Digicert's Business tier. They call it Secure Site EV SSL, but I don't ...
1
vote
1answer
118 views

Online Kubernetes (kubeadm) control plane certificate renewal

kubeadm creates certificates for the Kubernetes control plane that are valid for one year. They will be renewed on every Kubernetes upgrade. Since it is definitely a good idea to update a Kubernetes ...
2
votes
0answers
601 views

How to easily renew PFX certificate?

I am using IIS 10 with a variety of SSL certificates installed and bound with SNI. I now need to renew a wildcard PFX certificate, I would normally Import the new file and manually rebind each site ...
-1
votes
1answer
541 views

LetsEncrypt certificate (renewing) installing error

I'm trying to renew my LetsEncrypt certificate on my Raspberry Pi running apache2, but I seem to get an error when CertBot tries to generate the certificate. Expected sha256 ...
0
votes
1answer
178 views

Duration to provision a new TLS certificate on GCP HTTPS-Load-Balancer?

What's the expected duration to provision/finish serving an updated TLS certificate (called "SSL certificate resource" in GCE) for the target HTTPS proxy (part of the GCP HTTPS-Load-Balancer)...
0
votes
1answer
661 views

How to update expired ssl certificate on server with key-pinning (hpkp)

On server with nginx web server was setup ssl section with key-pinning: add_header Public-Key-Pins 'pin-sha256="some-key"; pin-sha256="second-key"; max-age=5184000;' always; now certificate is ...
0
votes
1answer
1k views

Can certbot renew --dry-run result in a false positive?

If I run certbot renew --dry-run and make no further changes to my Nginx configuration, am I guaranteed that certbot renew will succeed 90 days later? In other words, can the result be a false ...
1
vote
1answer
53 views

How do replacement files for reissued SSL certificate must be specified in the VirtualHost configuration file?

Environment : Linux 4.4.0-77-generic , Ubuntu 16.04.2 LTS with Apache 2 ( Apache/2.4.18 (Ubuntu)) Here is the situation : I had an SSL certificate for domains without www in them. Basically I ...
0
votes
2answers
3k views

Let's encrypt nginx server tls-sni-01 challenge

I have a domain, let's say domain.com This domain was registered with Go Daddy and using the Go Daddy dashboard, I point the domain to a certain IP, let's say 1.2.3.4 This IP, 1.2.3.4, belongs to a ...
0
votes
0answers
475 views

Error renewing SSL certificate with certbot

root@nl6g:~# sudo certbot --nginx -d cienciadelgaza.com -d www.cienciadelgaza.com Saving debug log to /var/log/letsencrypt/letsencrypt.log Cert is due for renewal, auto-renewing... Renewing an ...
0
votes
2answers
182 views

Can I use Certbot to add a Lets Encrypt certificate as a stop gap between yearly renewals?

I had a SSL certificate expire over the weekend, the client had missed the renewal email, and obviously they were not happy their site was displaying SSL warnings. As I've been using Lets Encrypt on ...
4
votes
3answers
4k views

Does order of lines matter in Nginx?

I have a server file like this server { listen 80; server_name subdomain.example.com; return 301 https://$server_name$request_uri; location /.well-known/acme-challenge { root /var/www/...
2
votes
1answer
740 views

ssl-cert-check is not getting the correct expiry dates for Lets Encrypt certificates

I'm using ssl-cert-check to track a list of my domains certificates. In my crontab I set it to run quietly and email me expiring domains, but the command that I'm using to debug is: ssl-cert-check -...
0
votes
1answer
2k views

Browser still seeing/using old NGINX SSL cert

I just got a new SSL cert a domain which was previously covered by a wildcard SSL cert. Its been over a week since its been installed and about 99% of my users aren't having an issue. There are now ...
0
votes
1answer
21 views

Installing SSL certificate on windows server 2008 without removing the old one

I am a newbie in field of SSL certificates. My SSL certificate is expiring and i have received a new certificate from my CA. Currently the option which i have tried out is replacing the old with the ...
-1
votes
1answer
195 views

Who's right about when to renew Let's Encrypt certificates?

I received the following, sans unsubscribe link: Hello, Your certificate (or certificates) for the names listed below will expire in 1 days (on 14 Aug 16 23:07 +0000). Please make sure to ...