Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Let's Encrypt is a certificate authority that entered public beta on December 3, 2015 that provides free X.509 certificates for Transport Layer Security encryption (TLS) via an automated process designed to eliminate the current complex process of manual creation, validation, signing, installation and renewal of certificates for secure websites.

An Python certificate management program called letsencrypt gets installed on the client side (the web server of an enrollee). This is used to order the certificate, to conduct the domain validation process, to install the certificate, to configure the HTTPS encryption in the HTTP server, and later to regularly renew the certificate.

After installation and agreeing to the user license, executing a single command is enough to get a valid certificate installed. Additional options like OCSP stapling or HTTP Strict Transport Security (HSTS) can also be enabled. Automatic setup initially only works with Apache and nginx.

Source: Wikiepdia

822 questions
0
votes
1 answer

Letsencrypt: Expiration Dates of Certificate differ

I've installed Letsencrypt on my server. The certificates were issued on Feb 22nd, so it's time to renew. The documentation says, sudo certbot renew should renew my certificates. But running sudo cerbot renew gives this response: The following certs…
z80crew
  • 101
  • 2
0
votes
1 answer

Lets encrypt auto renew not working

I am getting the following: # ./certbot-auto renue Error: couldn't get currently installed version for /root/.local/share/letsencrypt/bin/letsencrypt: ./certbot-auto: /root/.local/share/letsencrypt/bin/letsencrypt:…
user415419
0
votes
1 answer

Redirect subdomain to subdomain in HTTPS with Apache2

I have those subdomains: link.domain.com links.domain.com I want to redirect the link.domain.com to links.domain.com. For this, I used the same method as described here : Redirect subdomain to subdomain Apache2 and it works. I installed a TLS…
ÜberPosé
  • 3
  • 1
  • 4
0
votes
2 answers

Let's Encrypt verification failure

trying to generate a new SSL cert with Let's Encrypt following this guide - https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-14-04 but am getting verification failure. I am certain my DNS is set up…
Stretch0
  • 133
  • 8
0
votes
3 answers

Apache2 uses http instead of https, despite LetsEncrypt

Background I have an Ubuntu 16.04 server running Apache/2.4.18 (Ubuntu). I installed lets-encrypt from github and ran ./letsencrypt-auto --apache, choosing the second option from the following dialog: Please choose whether HTTPS access is required…
Socowi
  • 105
  • 1
  • 6
0
votes
1 answer

Apache HTTPD occasionally serving old/expired certificates

I have three hosts on the same server (single IP): domain1.com domain2.com domain3.com Each of them is supposed to use a Let's Encrypt certificate, recently issued in April 2017. However, occasionally the server seems to serve old (expired)…
Alex
  • 141
  • 7
0
votes
0 answers

“ssl_error_bad_cert_domain” - but only occasionally?

I've got a few domains setup on an Ubuntu server (14.04); they each are encrypted with LetsEncrypt (cron jobs setup to auto-renew them as well). Every once in a while, I will go to https://domainA.com and see the the…
Hanny
  • 131
  • 5
0
votes
1 answer

Letsencrypt client behind a reverse Nginx proxy

So the general setup is this: I have a server with a public Ip address (I will call this the frontend machine) that runs Nginx and serves a few webpages that are secured with Letsencrypt certificates. Now we want added a new machine (Let's call this…
guest7a72hha
  • 1
  • 1
0
votes
1 answer

Lets Encrypt Nginx - Your connection is not secure - for wrong subdomains

I have encryption from lets encrypt which is working fine. My configuration of Nginx allows only SSL connections. www.example.com, example.com, blog.example.com - all are working fine. The problems is if a type www1.example.com or…
DataScientYst
  • 111
  • 1
  • 3
0
votes
2 answers

Nginx redirects to default page after adding Lets Encrypt

Everything is working fine until I install Let's encrypt and modify /etc/nginx/sites-available/default What is the mistake I'm doing server { listen 80 default_server; listen [::]:80 default_server; root /var/www/html; …
Amar Ilindra
  • 111
  • 1
0
votes
1 answer

apache2 won't start after ssl configuration

I did the following to make my websites https able (german): http://www.tecchannel.de/a/owncloud-9-unter-ubuntu-server-16-04-lts-installieren,3277807,2 now if I start apache2 I get this error : > Job for apache2.service failed. See 'systemctl status…
Sarius
  • 171
  • 1
  • 3
  • 10
0
votes
1 answer

How can I get NGINX to conditionally redirect to HTTPS?

I'm setting up Let's Encrypt to issue certificates automatically. Each user will have their own subdomain so I need to create certificates in batch every so many hours to avoid LE's rate limits. Between the time they sign up and the time their…
That Realtor Programmer Guy
  • 233
  • 2
  • 8
0
votes
1 answer

nginx with multiple certificates, letsencrypt and self-signed

I would like so use Nginx as frontend SSL proxy with Letsencrypt certificates and also limit client access to certain backend servers with other (self-signed) certificate. I cannot use Letsencrypt for both since it does not offer client…
shpokas
  • 141
  • 6
0
votes
2 answers

nginx - After the installation, domain shows default page

I installed Let's Encrypt on my VPS. Before this, page normally work but after - domain showing "Welcome to nginx" page. I edited only default by adding declarations for SSL server { listen 80 default_server; listen [::]:80 default_server; …
Damian
  • 133
  • 2
  • 6
0
votes
0 answers

Multi SSL certificate on Apache

I am trying to install two certificates generated from Letsencrypt using gethttpsforfree.com. I have followed the steps as mentioned for each domain and was able to generate the certificates too. After copying the crt and pem file for each domain…
Sujeesh
  • 3
  • 1
1 2 3
…
54 55