Questions tagged [certbot]

328 questions
2
votes
1 answer

Let's Encrypt wildcard certificates and Apache 2 not working

I am trying to set up a wildcard certificate using Let's Encrypt on an Ubuntu 18.04 server running apache2, for domain abc.def.com (not the real domain name) and all subdomains (*.abc.def.com) I have succeeded in generating the certificate manually…
Ryan Griggs
  • 963
  • 2
  • 14
  • 29
2
votes
0 answers

Certbot renew running but not renewing

I've installed certbot on an Ubuntu 16.04 host using the PPA. I can see that the certbot timer is configured to run and that it's running: jaraco@punisher:~$ sudo systemctl status certbot ● certbot.service - Certbot Loaded: loaded…
Jason R. Coombs
  • 999
  • 1
  • 10
  • 18
2
votes
1 answer

Why are my TXT DNS records for certbot-auto not taken into account?

I tried to add a txt value to my DNS records to use certbot (certbot-auto as explained here ). Here are my DNS records in text mode (with example numbers): @ 10800 IN SOA ex1.example.net. hostmaster.example.net. XXXXX XXXXX XXXX XXXXXX XXXXX * 1800…
arthur.sw
  • 123
  • 5
2
votes
2 answers

SSL Certificate Issuing with No-IP DDNS & apache2 server & Let'sEncrypt Certbot: Conflicting info & Not working

The title is pretty explanatory regarding the tools I am using but I will try to elaborate further: I have a No-IP DDNS that is publicly accessible Port forwarding is configured for port 80 The port 80 forwarding points to a Raspberry Pi that I…
2
votes
1 answer

Let’s Encrypt certbot cannot complete verification due to Nginx server config

For an application I need the following line in my location block: rewrite ".*" /server.php break; This causes certbot fail to verify the domain. To install the SSL cert I commented that line and certbot worked fine. Now, the issue is renewal is…
Majid Fouladpour
  • 311
  • 5
  • 19
2
votes
0 answers

certbot-auto can't extend license to new domain (403 Forbidden)

I have an Ubuntu server on Digital Ocean from which I'm running mainly a single domain, with multiple subdomains: domain.com, sub1.domain.com, sub2.domain.com, etc. Each has it's own Virtual Host. The Virtual Hosts are all configured via their own…
CGriffin
  • 163
  • 1
  • 1
  • 5
2
votes
1 answer

What is running 'certbot renew'?

I'm using Let's Encrypt to secure an Apache installation on Ubuntu. I recently set up a deploy hook script to run on renewals, which I'm passing to certbot renew in a cron job by using the --deploy-hook option. On the first renewal since setting it…
Aron
  • 205
  • 2
  • 7
2
votes
0 answers

Let's Encrypt SSL install error on apache

I'm trying to install ssl on multiple virtual hosts and domains on same IP. I am using multiple .conf files for this. Already have three working domains on this IP with SSL. But while trying to install ssl on one more domain with…
Ramesh Pareek
  • 121
  • 1
  • 3
2
votes
1 answer

Let's Encrypt certbot-auto setuptools version error when run from cron

CentOS 6, certbot 0.16.0. When I run it manually as root (not by sudo) everything works. When I setup /etc/crontab to run it automatically it returns an error: Error: couldn't get currently installed version for…
2
votes
0 answers

Let's Encrypt: bypassing "query timed out looking up CAA..." with faulty DNS

While running certbot, the following message appears: query timed out looking up CAA for mydomain.com It appears that boulder is trying to query my DNS with a CAA record. However, my ISP's DNS does not support CAA, and the following command times…
Udi
  • 135
  • 6
2
votes
4 answers

How do I stop deprecation warnings for certbot?

I have a cron set up to update certbot. It mails a deprecation warning every day. How do I stop the deprecation warning? Cron /root/certbot-auto renew…
Chloe
  • 1,164
  • 4
  • 19
  • 35
2
votes
1 answer

Enabling Let's Encrypt SSL certificate on Apache for 2 domain names

I tried to get Let's Encrypt certificates for both my www and non-www domain names, then redirect all the requests to https://www.afa-advisory.com/. I installed certbot on my OVH VPS, then I tried many attempts to get both certificates: 1) I tried…
AFA Med
  • 597
  • 2
  • 6
  • 15
2
votes
1 answer

Invalid version when updating certificate with certbot

I have a server with a Let's encrypt certificate installed with certbot. I want to renew it with the following command sudo certbot renew --force-renewal but I get an error: Saving debug log to /var/log/letsencrypt/letsencrypt.log - - - - - - - - -…
Grigorii
  • 21
  • 2
2
votes
0 answers

nginx not reloading certificate after renewal

We have the following setup: multiple linux server with Ubuntu 20.04 and 22.04. Hosted on this servers are website for our customers. We using certbot to generate or renewal certificates. As webserver we using nginx. The certificates are generated…
premar
  • 21
  • 2
2
votes
1 answer

Automate renewal of let's encrypt ACME-DNS challenge with unbound

I changed from a certificate with multiple explicitly defined subdomains to a wildcard certificate. For this to work, the DNS-01 challenge needs to be solved. I have a very basic unbound DNS server running (authoritative). The unbound server is on…