Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Let's Encrypt is a certificate authority that entered public beta on December 3, 2015 that provides free X.509 certificates for Transport Layer Security encryption (TLS) via an automated process designed to eliminate the current complex process of manual creation, validation, signing, installation and renewal of certificates for secure websites.

An Python certificate management program called letsencrypt gets installed on the client side (the web server of an enrollee). This is used to order the certificate, to conduct the domain validation process, to install the certificate, to configure the HTTPS encryption in the HTTP server, and later to regularly renew the certificate.

After installation and agreeing to the user license, executing a single command is enough to get a valid certificate installed. Additional options like OCSP stapling or HTTP Strict Transport Security (HSTS) can also be enabled. Automatic setup initially only works with Apache and nginx.

Source: Wikiepdia

822 questions
0
votes
1 answer

Nginx listening on port 443 , firewall is off still cannot connect

netstat output: tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN - tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN - tcp 0 0 127.0.0.1:5432 …
Dani Mateo
  • 121
  • 1
  • 1
  • 8
0
votes
0 answers

Let's Encrypt Win Simple Not Renewing

I am using Lets encrypt win simple but everytime I try to renew my cert it tells me that is been renewed but when I go to my site it tells me the cert is expired. Anyone have any ideas how I can renew my cert?
chobo2
  • 461
  • 1
  • 10
  • 18
0
votes
2 answers

Nginx Django Gunicorn https site cannot be reached error

so I have a Django application, on a droplet running Ubuntu. I have nginx and Gunicorn and I am trying to setup https with Let's Encrypt, but I keep getting a "Site cannot be reached error". Here is my nginx.conf : upstream Tutorial2_prod{ …
Dani Mateo
  • 121
  • 1
  • 1
  • 8
0
votes
0 answers

What is the best way to configure a large number of SSL certificates when using LetsEncrypt, HAProxy, Nginx, and Rails?

I am working on a multi-tenant web application that is hosted on AWS. It is written in Ruby on Rails, and each app server runs Nginx. We have an EC2 instance that runs HAProxy. We originally set up HAProxy because some of our customers could only…
ndbroadbent
  • 310
  • 2
  • 13
0
votes
1 answer

I use HPKP, my SSL certificate expired and after renewing my website is inaccessible

I have forgot to renew my Let's Encrypt certificate, and I had HPKP used on my website. At the moment, I cannot open my website due to the old pinned keys being there. The browser error I get is (on Firefox):…
shavit
  • 187
  • 1
  • 2
  • 6
0
votes
0 answers

Docker sharing /var/run/docker.sock when deploying through Docker Machine

I've been trying to deploy my containers using Docker Machine and Docker Compose. I am running a Windows 10 with docker for windows v1.12.5. When i start my configuration i run the following: docker-machine env my-machine & "C:\Program…
Maxim
  • 105
  • 3
0
votes
2 answers

How to use letsencrypt on a brocade firewall?

From my review of letsencrypt, it seems to require running code on the endpoint. If my endpoint is an embedded device (e.g. a brocade load balancer), how do I go about getting a letsencrypt cert?
Jonesome Reinstate Monica
  • 5,445
  • 10
  • 56
  • 82
0
votes
1 answer

Website response from Nginx empty over TLS in firefox, but fine over http and in other browsers

I already posted here: https://stackoverflow.com/questions/41138169/website-does-not-open-in-firefox-no-error-opens-in-chrome-and-safari-though but I guess serverfault might actually be the better place to ask. My problem: My website veare.de works…
Lukas Oppermann
  • 143
  • 10
0
votes
1 answer

What is the correct root for Jetbrains Hub, UpSource & YouTrack with LetsEncrypt

I'm looking for the correct root to use for Jetbrains Hub, UpSource & YouTrack with LetsEncrypt. I have all three of these located in their own folder in /opt/ With certbot, I am using the following command to generate a certificate: certbot…
Yates
  • 111
  • 3
0
votes
2 answers

VirtualHost with SVN + HTML

We are providing an SVN repository under svn.example.org. Now we want to add a Let's Encrypt certificate for that domain - however there is a problem now. Let's Encrypt verifies the domain by putting a file into a subfolder of that vhost (e.g.…
fritzmg
  • 101
  • 3
0
votes
1 answer

updating ssl cert for gitlab using certbot & lets encrypt

I am running gitlab on ubuntu 14. The previously configured cert has expired (no cron entry was setup for renewal). I am trying to setup certbot (with let's encrypt) to renew the cert and then setup the crontab entry for auto renewals. When I run…
ali haider
  • 1,140
  • 3
  • 16
  • 29
0
votes
1 answer

How well does Apache 2.4 scale with lots of certificates?

With the advent of easy, free Let's Encrypt certs and IE8 not being a problem anymore, I'm planning on enabling SSL on an Apache server with thousands of host names. Does Apache scale? Switching Apache to something else is not an option at this…
tuomassalo
  • 738
  • 2
  • 8
  • 22
0
votes
1 answer

404 after setting up lets-encrypt SSL for nginx

So I followed this guide to set up letsencrypt ssl for nginx using the acme script, and it all worked great, I have it setup and I can access my site (wasabi.guru) via ssl, however it returns with a 404 error. When accessing my site via non-https it…
Elijah Rohrbaugh
  • 3
  • 2
0
votes
0 answers

letsencrypt/certbot python cryptography error

My certificates expire in a few days and I haven't had any luck updating them with letsencrypt-auto or certbot-auto. As fas as I can tell, everything is up to date but I get a: Running setup.py install for cryptography: finished with status…
innesngunn
  • 101
  • 2
0
votes
2 answers

How to ensure a smooth transition to Let's Encrypt SSL Cert?

I've got LAMP running on Ubuntu 14.04 and almost a year ago I installed SSL (TLS 1.2) certificate for my web server, so my site would only run under HTTPS protocol. On October 8 the certificate expires. And from now on I want to install and use…
Gregory
  • 121
  • 1
  • 3
  • 9
1 2 3
…
54 55