Questions tagged [certbot]

328 questions
1
vote
1 answer

How to use certbot-generated .pem files with nginx?

mostly out of curiosity I want to try out nginx for a change. On my production server I have set up an SSL certificate for Apache like this: SSLCertificateFile /etc/letsencrypt/live/example.de/fullchain.pem SSLCertificateKeyFile…
musbur
  • 193
  • 12
1
vote
1 answer

TLS 1.0 is obsolete. Enable TLS 1.2 or later. nginx

I have the following nginx configuration under /etc/nginx/sites-enabled/example_com for domain example.com: server { server_name example.com; location / { proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header …
Simoyw
  • 121
  • 2
  • 6
1
vote
1 answer

nginx serving wrong certificate for vitual hosts with own conf file

I've got a few virtual hosts set up through nginx on my centos7 server. I'm getting certs by using letsencrypt certbot. By default certbot writes the vhost info to the /etc/nginx/nginx.conf file. This isn't the behavior I want. I use the…
LoneWolfPR
  • 275
  • 1
  • 3
  • 17
1
vote
1 answer

Automatically updating bind9 DNS TXT entry after letsencrypt wildcard renwal

When updating a wildcard-letsencrypt-certificate you're being asked to deploy a DNS TXT record with some sort of hash-value before continuing with the verification. Like this: Please deploy a DNS TXT record under the…
C333D
  • 11
  • 1
  • 2
1
vote
1 answer

Can't download letsencrypt certificate using webroot method of certbot

Following this guide for windows installation, i try the webroot method, from an elevated cmd shell: C:\WINDOWS\system32> certbot certonly --webroot The command fails with unauthorized error, because IIS is does not expose hidden folder .well-known…
Miguel
  • 541
  • 4
  • 7
  • 17
1
vote
2 answers

Tomcat behind httpd, with Let's Encrypt and Certbot -- is my VirtualHost right?

Having (I hope) solved my problems with mutually independent httpd and Tomcat servers on an Amazon Linux ("not 2") instance, I now have a situation in which I do want Tomcat running behind an existing, running, httpd, on an Amazon Linux 2 instance…
hbquikcomjamesl
  • 259
  • 2
  • 16
1
vote
1 answer

Certbot failing with: ssl.SSLError: [X509] no certificate or crl found (_ssl.c:3732)

This is a copy of a recent Let's Encrypt community forum thread which helped me mitigate the issue. I am adding this here since it could potentially affect more users. I have a server with currently three websites using Let's Encrypt. These certs…
kghbln
  • 411
  • 2
  • 10
  • 20
1
vote
0 answers

Ubuntu server 18.04 nginx crashes and reboots when testing SSL certificates

So far I installed ubuntu server 18.04, made the latest upgrades and dist-upgrades then I installed nginx with apt install after that I used cerbot to get the SSL certificates. server { server_name www.example.com; location / { root …
dcharrezt
  • 11
  • 1
1
vote
2 answers

Removing DNS A Records

I currently have 2 DNS A records for main domain pointing to the different IP addresses. This is creating problems when I try to use certbot to generate Let's Encrypt's SSL certificate for my domain, because it seems that when doing http-01…
user3362334
  • 121
  • 4
1
vote
0 answers

Unauthorized error while trying to add LetsEncrypt to a domain using Nginx with docker for Spring boot

I am trying to add HTTPS to my domain using LetsEcnrypt. My server setup so far is, I have Spring Boot running on Tomcat in a docker container on Port 8088 and I have Nginx server in front of the Tomcat container which is allowed to access Port 80…
0
votes
1 answer

Unable to renew lets encrypt using certbot

I'm running centos 6, I recently tried installing python 3, might have messed something up related to python if I do python2 /usr/local/bin/certbot-auto renew I get file "/usr/local/bin/certbot-auto", line 20 if [ -z "$HOME" ]; then ^ SyntaxError:…
Lynob
  • 241
  • 1
  • 9
  • 17
0
votes
1 answer

Certbot LetsEncrypt Sending Scary Email, Not Sure If Auto-Renewal Is Working

I am running a linux server for a nodejs express app at katefromhrbot.com, and I used the certbot guide for Nginx and Ubuntu 18.04 LTS to give it the secure https domain support. It is working now, but I recently received a rather worrying email…
Jim
  • 111
  • 4
0
votes
1 answer

How to stop ports.conf getting modified by certbot

How can I get certbot to stop modifying /etc/apache2/ports.conf, but still autorenew? I have a ports.conf that looks like this NameVirtualHost 127.0.0.1:8080 Listen 127.0.0.1:8080 Listen 443
0
votes
0 answers

Ubuntu Server / Apache not listening to port 443

I'm having trouble reaching my site through https after executing the certbot script. That process finished without issues, the message was: Congratulations, you have succesfully enabled https://chiloexpress.ddns.net However, when I test my…
Carlos
  • 1
  • 1
0
votes
1 answer

How can I add a subdomain to my Certbot (letsencrypt) SSL?

/etc/letsencrypt/live/happydogg.com# ls README cert.pem chain.pem fullchain.pem privkey.pem I currently have my certificates in this folder. My Node.js server actually reads the files from this directory. When I run the expand command, I need…
Alex
  • 8,471
  • 26
  • 75
  • 99