Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Let's Encrypt is a certificate authority that entered public beta on December 3, 2015 that provides free X.509 certificates for Transport Layer Security encryption (TLS) via an automated process designed to eliminate the current complex process of manual creation, validation, signing, installation and renewal of certificates for secure websites.

An Python certificate management program called letsencrypt gets installed on the client side (the web server of an enrollee). This is used to order the certificate, to conduct the domain validation process, to install the certificate, to configure the HTTPS encryption in the HTTP server, and later to regularly renew the certificate.

After installation and agreeing to the user license, executing a single command is enough to get a valid certificate installed. Additional options like OCSP stapling or HTTP Strict Transport Security (HSTS) can also be enabled. Automatic setup initially only works with Apache and nginx.

Source: Wikiepdia

822 questions
0
votes
1 answer

letsencrypt works www but not root domain (apache)

i'm trying to install letsencrypt on a server, both www and the root domains are hosted by the box. i can install with the www subdomain no problem, but not the root domain. here's the error i'm getting Failed authorization procedure. domain.com…
user1130176
  • 173
  • 1
  • 10
0
votes
2 answers

apache2 with letsencrypt is very slow

I have a problem with my server configurations, My site works great with http requests, but when I changed it to https using letsencrypt certificate - to enable http2 - the server became really slow. a normal request with http will take from 4 to 7…
Cooper
  • 11
  • 1
  • 1
0
votes
2 answers

How to get Let's Encrypt to give challenge text for all domains at once?

I'm using Let's Encrypt for my Google App Engine site, so I'm generating certificates only, and while it's working, the process for verifying multiple domains seems clunky. I presume I'm doing something wrong, maybe I'm missing an optional argument?…
tom
  • 111
  • 3
0
votes
1 answer

Generate certificate on dev machine and copy to prod?

I want to use Let's Encrypt to create a certificate for my website. I have the client installed locally on my dev machine and would like to generate the cert and move it. For stand-alone webserver installation, the Let's Encrypt documentation says I…
Synesso
  • 209
  • 1
  • 4
  • 14
0
votes
0 answers

LetsEncrypt adding new Cert without killing Service

I use Let's Encrypt for my HTTPS certificates and every time I add a new cert or update a existing one I must stop my HTTP server on port 80 and start the Let's Encrypt script. I want to add new certs and update the old ones but without killing the…
alexohneander
  • 101
  • 3
0
votes
1 answer

Set server wide ssl configuration

Background I have a simple server with only one site. I want to force ssl. I previously did this with a self signed certificate, but now I have got a letsencrypt cert. I have used the auto set up, but when I access my site it uses the old…
Aaron
  • 132
  • 6
0
votes
1 answer

Apache redirect - let's encrypt SSL certificate redirecting to naked domain rather than www

I recently set up a new website running off Wordpress which is working nicely. Since I wanted to have an SSL certificate for the website I thought I'd use Let's Encrypt since I've been hearing a lot of good things about it. Well I have to agree it…
Cromulent
  • 316
  • 1
  • 2
  • 18
0
votes
0 answers

SSL server: Unable to get local issuer certificate (Let's Encrypt)

As the title says I'm having some problems with my https connection, it was working perfectly but now (2 weeks after) I was installing the Jetpack plug-in on my wordpress site when I got an IXR -32300: transport error: http_request_failed SSL…
Tiago Ferreira
  • 11
  • 2
0
votes
1 answer

Installing letsencrypt fails when running python install scripts

I'm trying to install letsencrypt from source on a Debian 8. When running ./letsencrypt-auto --help --verbose the script stops at the following lines: ... Collecting funcsigs (from mock->letsencrypt) Using cached…
maxdev
  • 101
  • 1
0
votes
1 answer

letsencrypt certificates automation

I ma trying to automate my letsencrypt installation for apache. If I try this: ./letsencrypt-auto certonly --renew-by-default -a webroot --webroot-path /home/sendy/ --email me@gmail.com --agree-tos -d example.com After a few successful attempts I…
Hristo Stoyanov
0
votes
1 answer

Redirect to non-www with HTTPS

I installed an apache webserver and created a website. Let's Encrypt is used for https. I followed the auto-configuration process and the non-www url works fine. But if I want to redirect https://www to https://xxxxx.com with a .htaccess it doesn't…
user325821
0
votes
0 answers

Firefox unable to connect ssl

I'm trying to setup my site through ssl. Apache starts without trouble but firefox gives me the following error: 'Unable to connect'. My virtualhost config: DocumentRoot /var/www/site ServerName site.nl ServerAlias…
joostlinux
  • 1
0
votes
1 answer

Win ACME DNS validation for Google DNS is not working

I am trying to request a LetsEncrypt certificate using DNS validation. My DNS provider is Google DNS. No matter what I do, I keep receiving the following error: [EROR] File C:\LetsEncrypt\{GCP-ServiceAccountKey} does not exist Where…
user1913559
  • 219
  • 2
  • 12
0
votes
1 answer

DST Root CA X3 (Self-signed) - has expired in certificate chain used by Let's Encrypt (Apache/Windows)

Is it safe to remove a self-signed root certificate from the chain; and what, if any, are the consequences of doing that? And how would I go about doing this on a Windows setup? The instructions under "Manually updating the local certificates" which…
MeSo2
  • 254
  • 1
  • 3
  • 18
0
votes
0 answers

How to manage certificate renewal using win-acme if the folder doesn't exist anymore?

win-acme auto renews SSL certificate by invoking task scheduler task which executes C:\Users\admin\Downloads\win-acme.v2.2.5.1541.x64.pluggable\wacs.exe Someone deleted that folder from the downloads directory. What is the way to reconfigure…
variable
  • 177
  • 2
  • 10
1 2 3
…
54 55