Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Let's Encrypt is a certificate authority that entered public beta on December 3, 2015 that provides free X.509 certificates for Transport Layer Security encryption (TLS) via an automated process designed to eliminate the current complex process of manual creation, validation, signing, installation and renewal of certificates for secure websites.

An Python certificate management program called letsencrypt gets installed on the client side (the web server of an enrollee). This is used to order the certificate, to conduct the domain validation process, to install the certificate, to configure the HTTPS encryption in the HTTP server, and later to regularly renew the certificate.

After installation and agreeing to the user license, executing a single command is enough to get a valid certificate installed. Additional options like OCSP stapling or HTTP Strict Transport Security (HSTS) can also be enabled. Automatic setup initially only works with Apache and nginx.

Source: Wikiepdia

822 questions
0
votes
0 answers

Traefik on Synology: LetsEncrypt says it has DNS issues but the certificate file looks valid

My curent Network: Router - 192.168.1.1 (static) Windows PC - 192.168.1.10 (static) Synology NAS - 192.168.1.11 (static) DockerPihole - 192.168.1.12 (macvlan-static) DockerUnbound - 192.168.1.13 (macvlan-static) DockerTraefik …
LorneCash
  • 101
  • 1
0
votes
1 answer

Unable to renew Let's Encrypt SSL certificate in Nginx Proxy Manager

I've set up a few sites in Docker, on Linode. I started by following these instructions: Connect Your Docker Containers to Domain Names For Easy Access using Portainer on Linode The steps I followed are: Created a Linode Installed NGINX Proxy…
jdege
  • 193
  • 1
  • 11
0
votes
0 answers

Could not find the alias s1as in the key store

I get the following error remote failure: NCLS-SECURITY-05200 : org.jvnet.hk2.config.TransactionFailure: java.lang.RuntimeException: java.lang.IllegalArgumentException: Could not find the alias s1as in the key store java.lang.RuntimeException:…
Clifton Zama
  • 1
  • 1
0
votes
1 answer

Connection is not secure, only on mobile Certbot / LetsEncrypt

I have linked a service on my server through this reverse proxy var httpProxy = require('http-proxy'); var fs = require('fs'); httpProxy.createServer({ target: { host:…
N00b
  • 1
  • 1
0
votes
0 answers

Linux user access to file that is a soft link

I'm using Certbot to implement LetsEncrypt generated certificates on a Debian 11 server. Certbot was run/setup while logged in as root. This solution creates two files, fullchain.pem & privkey.pem, which the webserver needs to access. ls -la of live…
MindSpiker
  • 155
  • 4
0
votes
0 answers

cert-manager failing to generate certificate in kubernetes, how to fix that?

In the aks cluster, the helm chart I installed: Chart got from link And the ingress chart I used helm repo add jetstack https://charts.jetstack.io helm repo update helm upgrade --install \ cert-manager jetstack/cert-manager \ --namespace…
user2331760
  • 155
  • 4
  • 12
0
votes
2 answers

nginx as a web proxy with ssl

I have installed proxmox and am running a simple ubuntu server where I have installed nginx. How and where do I setup ssl? I only want to use nginx to forward location to another web server. Can I set up Let's Encrypt ssl on the nginx server and…
Asken
  • 215
  • 1
  • 2
  • 8
0
votes
1 answer

Getting not secure warning for www domain

I installed lets encrypt using certbot when I go to the www.domain.com I get this site is not secure error Found the following certs: Certificate Name: example.com Domains: example.com Expiry Date: 2023-05-25 15:01:00+00:00 (VALID: 70…
Utku Dalmaz
  • 1,329
  • 2
  • 13
  • 18
0
votes
2 answers

Issue valid HTTPS certificates for intranet subdomains with letsencrypt

I'm trying to provide secure services on my home intranet. Up to now I've used self-signed certificates with a made-up domain example.foo, with a subdomain for my separate systems (e.g. srv1.example.foo). These domains are defined on my local DNS…
emma.makes
  • 3
  • 1
0
votes
0 answers

K8s : nginx-ingress: SSL_do_handshake() failed (SSL: error:191CF08C:SSL routines:tls_parse_ctos_key_share:bad key share)

As we found out that the nginx ingress as well as the cert-manager were outdated and not compatible with the Kubernetes version of 1.22 anymore. I upgrade the two components: nginx-ingress from 0.26.1 to 1.5.1. and the cert-manager from version…
sam23
  • 49
  • 1
  • 5
0
votes
1 answer

Why I see all Vhost domain names in SSL certificate, what did I do wrong?

I have a VPS that hosts 2 websites, and I have 2 domains, domain1.com and domain2.com Server Nginx running on Ubuntu 20.04 I installed certbot and nginx according to their instructions and CA is Letsencrypt. The problem is that when I visit…
user174174
  • 103
  • 1
0
votes
0 answers

Hosting application on Windows Server running IIS and want to redirect website to application using a port

I am running Uptime Kuma on our server and it's using a port 1234 for instance. I can access the application by going to https://myserver.com:1234 but the certificate is invalid. I'd like to access the application directly on https://myserver.com…
ErocM
  • 226
  • 7
  • 23
0
votes
0 answers

HAProxy balance API

I have use many hour to search and learn the HAProxy config but i can't make the desired result in any way. I'll explain my scenario. I have three different server: api1.test.eu 10.20.30.130:8764 api2.test.eu 10.20.30.119:8764 api3.test.eu…
g-pane
  • 1
  • 1
0
votes
1 answer

Changing the issuer (from HTTP01 to DNS01 ACME verification) of a certificate in cert-manager

I have a certificate managed by cert-manager, on a Kubernetes cluster. It used to be renewed/validated via a HTTP01 ACME challenge but, because of security constraints (a firewall), that's not possible any more. I have to switch to a DNS01 ACME…
Silvian Cretu
  • 13
  • 3
0
votes
1 answer

Docker containers not accessible from internet (using jwilder's nginx+letsencrypt solution)

I have been using the jwilder's nginx + letsencrypt solution to access my containers online. Last week my server crashed and after a restart, I couldn't access any of my containers from the internet. Accessing them from LAN works but I get "refused…
Gaurav Suman
  • 101
  • 1
1 2 3
…
54 55