Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Let's Encrypt is a certificate authority that entered public beta on December 3, 2015 that provides free X.509 certificates for Transport Layer Security encryption (TLS) via an automated process designed to eliminate the current complex process of manual creation, validation, signing, installation and renewal of certificates for secure websites.

An Python certificate management program called letsencrypt gets installed on the client side (the web server of an enrollee). This is used to order the certificate, to conduct the domain validation process, to install the certificate, to configure the HTTPS encryption in the HTTP server, and later to regularly renew the certificate.

After installation and agreeing to the user license, executing a single command is enough to get a valid certificate installed. Additional options like OCSP stapling or HTTP Strict Transport Security (HSTS) can also be enabled. Automatic setup initially only works with Apache and nginx.

Source: Wikiepdia

822 questions
2
votes
1 answer

Certbot connection refused whilst /.well-known/acme-challenge is accessible

I'm having issues to renew my certificate for my Nextcloud instance with letsencrypt on my ubuntu 16.04 server. Here is my renewal conf: # renew_before_expiry = 30 days version = 0.22.2 archive_dir = /etc/letsencrypt/archive/cloud.example.com cert…
wouter205
  • 123
  • 1
  • 4
2
votes
1 answer

Why is my ssl certificate self signed?

I followed the following steps to install an ssl-certificate on a website; https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-centos-7. However, the website is still not trusted because the certificate is…
E Zeller
  • 23
  • 3
2
votes
2 answers

How to setup LetsEncrypt SSL for multiple websites hosted on CentOS 7?

I have a CentOS 7 Server with Apache. Currently there are multiple websites hosted on Virtual Server as "Top Level Server" and "Sub-Server" using VirtualMin, i.e., Multiple Virtual Servers in Apache Webserver. Top-Level Server - www.example1.com…
Ratul Nandi
  • 23
  • 4
2
votes
1 answer

Is it possible to change the expiry threshold for expiring certificates in Exchange? (Event 12018)

We've recently switched to using LetsEncrypt for our Exchange certificates, which have a maximum validity of 90 days. Unfortunately this means I'm being pestered with tickets generated by our monitoring system due to Event 12018…
alt
  • 497
  • 2
  • 6
  • 15
2
votes
1 answer

nginx load balancer w/ https and lets encrypt cert renewal

I have a small Linux VPS instance set up with nginx to proxy requests as a load balancer to multiple application servers. All traffic is coming into https://app.example.com proxied to those upstream servers. Example nginx configuration for the load…
beaorn
  • 131
  • 7
2
votes
1 answer

Does nginx have something like apache's mod_macro?

I need to be able to manage thousands of domains in nginx, and each domain will have a lets-encrypt certification that I will manage. I was reading how apache has a macro feature that lets you do something like where you don't have to repeat the…
cool breeze
  • 101
  • 8
2
votes
2 answers

SSL Certificate Issuing with No-IP DDNS & apache2 server & Let'sEncrypt Certbot: Conflicting info & Not working

The title is pretty explanatory regarding the tools I am using but I will try to elaborate further: I have a No-IP DDNS that is publicly accessible Port forwarding is configured for port 80 The port 80 forwarding points to a Raspberry Pi that I…
Sterling Butters
  • 133
  • 1
  • 7
2
votes
1 answer

Let’s Encrypt certbot cannot complete verification due to Nginx server config

For an application I need the following line in my location block: rewrite ".*" /server.php break; This causes certbot fail to verify the domain. To install the SSL cert I commented that line and certbot worked fine. Now, the issue is renewal is…
Majid Fouladpour
  • 311
  • 5
  • 19
2
votes
1 answer

DNS hostname no longer resolves if a sub-hostname has been defined

I have trouble understanding a specific effect in DNS name resolution for subdomain names that came to light when enabling lets encrypt. The context of my question: I have a domain (basjes.nl) and I have set all hostnames in that domain to resolve…
Niels Basjes
  • 2,196
  • 3
  • 19
  • 26
2
votes
1 answer

Why does my domain show an SSL from another domain?

I've deleted the Letsencrypt SSL for my domain, now i cannot access it through http. I am prompted to bypass the warning by my browser (Chrome and Firefox), and access it throught the strike through https (the site is www.phpninja.fr. However this…
Yvon Huynh
  • 199
  • 1
  • 9
2
votes
2 answers

How to get multi domain wildcard ssl from let's encrypt?

I have a server that responds to domains like a.b.c.example.com. a b and c are dynamic parts and I want to cover them all with a single SSL certificate. I created wildcard certificate here for *.example.com. But now I have en error…
light_keeper
  • 123
  • 1
  • 4
2
votes
2 answers

How to decouple a webserver from an email server?

I have a server that runs a web server and an email server for multiple domains, and both services are configured to use SSL certificates from Let's Encrypt (for each domain the web server and the email server use the same certificate). I want to go…
goncalotomas
  • 123
  • 6
2
votes
1 answer

MariaDB SSL configuration - using Let's Encrypt certificate

I'm having truble forcing MariaDB to use my SSL cert files on Debian 8. Apache2 works fine with current file permissions in /etc/letsencrypt/* The only service that has any trouble with current certs is MariaDB. I tried to use ACL on files in…
Kristi
  • 91
  • 2
  • 10
2
votes
0 answers

certbot-auto can't extend license to new domain (403 Forbidden)

I have an Ubuntu server on Digital Ocean from which I'm running mainly a single domain, with multiple subdomains: domain.com, sub1.domain.com, sub2.domain.com, etc. Each has it's own Virtual Host. The Virtual Hosts are all configured via their own…
CGriffin
  • 163
  • 1
  • 1
  • 5
2
votes
2 answers

Why do my sub domains point to other sub domains when I disable a site?

I have a personal server and I use many sub-domains on it. Each sub domain has its own unique SSL cert setup with LetsEncrypt. Each sub domain has its own vhost file under /etc/apache/sites-available/ Each sub domain has its own A record and NS…
Frantumn
  • 121
  • 3
1 2 3
…
54 55