Questions tagged [ssl-certificate-renewal]

The process of issuing a new certificate with existing public and private keys. Common reasons for this are: extending its validity, changing thumbprint hash algorithm or even changing content (common name (CN) or subject alternative name (SAN)).

Filter by
Sorted by
Tagged with
0 votes
0 answers
151 views

Can you use old SSL keystore to import a new certificate with possibly a different private key?

I am importing a new certificate into an old java keystore from a new keystore jks file. I am not sure if the old and the new keystores use the same private key. Will the old keystore work with the ...
AK800's user avatar
  • 1
0 votes
0 answers
83 views

SSL Certificate related - Too many redirects

I am using bitnami wordpress website. I was trying to replace the old SSL certificates files with the new ones. I did replaced it but now I am getting "too many redirects errors". Can anyone ...
Dhaval Joshi's user avatar
0 votes
2 answers
2k views

How to Renew an SSL Certificate from a PFX file?

I have a .PFX file, and want to use it to update an existing SSL certificate in IIS. I can use the Import command. This prompts me for my PFX file and password. That's exactly what I want except that ...
Jonathan Wood's user avatar
0 votes
0 answers
223 views

ADFS2 secondary server not listening on port 443

Our monitoring sensor connection for https 443 to our secondary ADFS server is refused. We recently renewed theADFS SSL certificate, and since the secondary server is not listening on port 443. All ...
Zenith2k3's user avatar
0 votes
1 answer
836 views

ADCS WebServer Autoenrollment best practise

As in any IT environment, the number of web server certificates is constantly increasing. With the reduction of the duration to 1 year, the administration effort increases at the same time if such ...
Sinista's user avatar
  • 89
0 votes
1 answer
4k views

The certificate request was submitted to the online authority, but was not issued. The request was denied

I've a Hyper-V lab with few VMs. I'm trying to renew expired server certificate for one of my virtual machines which is running Windows Server 2019 (version 1809). I'm trying to renew the certificate ...
RBT's user avatar
  • 263
0 votes
1 answer
2k views

Postgres SSL server certificate upgrade / renew with openssl

I have inherited a Company Postgres Server with SSL clients. Its around 100 users so far. Two Problems: My Ca Cert (root.crt) expires next year and it seems to be still TlsV1.0. So an upgrade(renew) ...
aufmschlauch's user avatar
0 votes
1 answer
692 views

Backend services root certificate expiration

We are using mTLS for our backend services authentication and the root certificate is set to expire in 2022. Here are the expiration details for all certificates: The root certificate will expire in ...
StefB's user avatar
  • 1
3 votes
1 answer
10k views

When using Let's Encrypt certbot, how do I restart/reload a network service only once and only if the cerificate was actually renewed?

The certbot command provides two hooks that run after automated renewals, from the docs: --post-hook POST_HOOK Command to be run in a shell after attempting to ...
Walf's user avatar
  • 430
1 vote
1 answer
674 views

Is .well-known/acme-challenge ever needed after the initial domain fingerprintng?

I understand the initial challenge-response pattern when using Let's Encrypt, but I noticed that when testing renewals, no GET requests were hitting .well-known/acme-challenge. Once the domain/account ...
markson edwardson's user avatar
0 votes
1 answer
21k views

curl: (60) SSL certificate : unable to get local issuer certificate - ubuntu

We run the following software versions: Ubuntu 18.04.5 Apache 2.4.29 curl 7.58.0 We run an education application, and as part of this we have numerous APIs which upload files to a third party ...
mac987's user avatar
  • 1
0 votes
1 answer
292 views

New SSL Cert now showing up for Postfix in browser (Ubuntu, Namecheap)

I'm a newbie trying to wing it after our Sys Admin left. I needed to update our wildcard certificate and copy it onto our mail server. I renewed the cert at Namecheap, downloaded it, and installed it ...
DevOpsSauce's user avatar
0 votes
0 answers
778 views

How to automatically update an SSL certificate on Nginx as it gets renewed?

I have a website hosted on an EC2 instance with Ubuntu and nginx installed. My domain is managed through GoDaddy which is where I also issue the SSL certificate for the domain. Recently I got service ...
Microtribute's user avatar
0 votes
2 answers
384 views

Renew ssl cert but only have private key and fullchain file

Is it possible to renew certs from letsencrypt with just the private key and fullchain file? If not, can one just remove all the letsencrypt files and .well-known directory and apply for new ...
Rob's user avatar
  • 344
6 votes
2 answers
11k views

How to bundle intermediate certs into one file

I manage an apache web server for a government site. The SSL cert will expired in a few weeks so they sent me a zip file with 3 intermediate certs and the ssl certificate (I have the private key from ...
BioRod's user avatar
  • 303
0 votes
2 answers
5k views

SSLProtocol: Illegal protocol 'TLSv1.1' in linux

I know u think this a duplicate question but hear me out first. I am not able to find the answer with a system with same conf as min so here is my server conf: Red Hat 4.1.2-44 CentOS release 5 ...
DadyByte's user avatar
  • 101
0 votes
1 answer
2k views

How to fix LetsEncrypt renewal failing with error "Unable to reach credentials server"?

I have successfully acquired a certificate using Win-Acme installed on Windows Server 2012. The software is setup to renew using the Route53 plugin to automatically verify ownership via DNS. Win-acme ...
Rich C's user avatar
  • 103
0 votes
1 answer
135 views

Request a Digicert Secure Site EV SSL certificate from Azure Portal (or PowerShell) for use with Azure Application Gateway/App Services

I'm trying to generate/request a new certificate from Digicert in Azure. I've been instructed to purchase the EV SSL cert from Digicert's Business tier. They call it Secure Site EV SSL, but I don't ...
FishBasketGordo's user avatar
1 vote
1 answer
941 views

Online Kubernetes (kubeadm) control plane certificate renewal

kubeadm creates certificates for the Kubernetes control plane that are valid for one year. They will be renewed on every Kubernetes upgrade. Since it is definitely a good idea to update a Kubernetes ...
Stephan's user avatar
  • 285
2 votes
0 answers
3k views

How to easily renew PFX certificate?

I am using IIS 10 with a variety of SSL certificates installed and bound with SNI. I now need to renew a wildcard PFX certificate, I would normally Import the new file and manually rebind each site ...
userSteve's user avatar
  • 1,613
-1 votes
1 answer
1k views

LetsEncrypt certificate (renewing) installing error

I'm trying to renew my LetsEncrypt certificate on my Raspberry Pi running apache2, but I seem to get an error when CertBot tries to generate the certificate. Expected sha256 ...
Rat's user avatar
  • 1
3 votes
2 answers
2k views

Duration to provision a new TLS certificate on GCP HTTPS-Load-Balancer?

What's the expected duration to provision/finish serving an updated TLS certificate (called "SSL certificate resource" in GCE) for the target HTTPS proxy (part of the GCP HTTPS-Load-Balancer)...
Dominik's user avatar
  • 317
0 votes
1 answer
1k views

How to update expired ssl certificate on server with key-pinning (hpkp)

On server with nginx web server was setup ssl section with key-pinning: add_header Public-Key-Pins 'pin-sha256="some-key"; pin-sha256="second-key"; max-age=5184000;' always; now certificate is ...
Olexandr Grasymenko's user avatar
0 votes
1 answer
2k views

Can certbot renew --dry-run result in a false positive?

If I run certbot renew --dry-run and make no further changes to my Nginx configuration, am I guaranteed that certbot renew will succeed 90 days later? In other words, can the result be a false ...
lofidevops's user avatar
  • 1,325
1 vote
1 answer
76 views

How do replacement files for reissued SSL certificate must be specified in the VirtualHost configuration file?

Environment : Linux 4.4.0-77-generic , Ubuntu 16.04.2 LTS with Apache 2 ( Apache/2.4.18 (Ubuntu)) Here is the situation : I had an SSL certificate for domains without www in them. Basically I ...
mlclm's user avatar
  • 169
0 votes
2 answers
3k views

Let's encrypt nginx server tls-sni-01 challenge

I have a domain, let's say domain.com This domain was registered with Go Daddy and using the Go Daddy dashboard, I point the domain to a certain IP, let's say 1.2.3.4 This IP, 1.2.3.4, belongs to a ...
mayk93's user avatar
  • 115
0 votes
0 answers
558 views

Error renewing SSL certificate with certbot

root@nl6g:~# sudo certbot --nginx -d cienciadelgaza.com -d www.cienciadelgaza.com Saving debug log to /var/log/letsencrypt/letsencrypt.log Cert is due for renewal, auto-renewing... Renewing an ...
NeDark's user avatar
  • 463
0 votes
2 answers
251 views

Can I use Certbot to add a Lets Encrypt certificate as a stop gap between yearly renewals?

I had a SSL certificate expire over the weekend, the client had missed the renewal email, and obviously they were not happy their site was displaying SSL warnings. As I've been using Lets Encrypt on ...
OrderAndChaos's user avatar
11 votes
3 answers
18k views

Does order of lines matter in Nginx?

I have a server file like this server { listen 80; server_name subdomain.example.com; return 301 https://$server_name$request_uri; location /.well-known/acme-challenge { root /var/www/...
Saras Arya's user avatar
2 votes
1 answer
1k views

ssl-cert-check is not getting the correct expiry dates for Lets Encrypt certificates

I'm using ssl-cert-check to track a list of my domains certificates. In my crontab I set it to run quietly and email me expiring domains, but the command that I'm using to debug is: ssl-cert-check -...
Andy's user avatar
  • 317
0 votes
1 answer
4k views

Browser still seeing/using old NGINX SSL cert

I just got a new SSL cert a domain which was previously covered by a wildcard SSL cert. Its been over a week since its been installed and about 99% of my users aren't having an issue. There are now ...
Andy Jarrett's user avatar
0 votes
1 answer
94 views

Installing SSL certificate on windows server 2008 without removing the old one

I am a newbie in field of SSL certificates. My SSL certificate is expiring and i have received a new certificate from my CA. Currently the option which i have tried out is replacing the old with the ...
ankush dhawan's user avatar
-1 votes
1 answer
208 views

Who's right about when to renew Let's Encrypt certificates?

I received the following, sans unsubscribe link: Hello, Your certificate (or certificates) for the names listed below will expire in 1 days (on 14 Aug 16 23:07 +0000). Please make sure to ...
Christos Hayward's user avatar