Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Let's Encrypt is a certificate authority that entered public beta on December 3, 2015 that provides free X.509 certificates for Transport Layer Security encryption (TLS) via an automated process designed to eliminate the current complex process of manual creation, validation, signing, installation and renewal of certificates for secure websites.

An Python certificate management program called letsencrypt gets installed on the client side (the web server of an enrollee). This is used to order the certificate, to conduct the domain validation process, to install the certificate, to configure the HTTPS encryption in the HTTP server, and later to regularly renew the certificate.

After installation and agreeing to the user license, executing a single command is enough to get a valid certificate installed. Additional options like OCSP stapling or HTTP Strict Transport Security (HSTS) can also be enabled. Automatic setup initially only works with Apache and nginx.

Source: Wikiepdia

822 questions
0
votes
2 answers

Certbot challenge using 443 instead of 80?

Is it possible to do the challenge using another port? I read here that you can't replace port 80, but using an "alternative let's encrypt client" you can? (not clear at all) I have one server in this network where the administrator is unable, or…
Guilherme Richter
  • 23
  • 4
0
votes
1 answer

Apache Reverse Proxy setup with some exemptions

I would like to install Mattermost on my server also running ISPConfig hosting software. ISPConfig has a mechanism to automatically obtain and install Letsencrypt certificates based on the hostname. For this, Letsencrypt needs access to the…
TomS
  • 175
  • 1
  • 1
  • 9
0
votes
1 answer

Unable to create ca certificate Lets Encrypt via PuTTY

As mentioned above I'm getting error generating certificate from Lets encrypt for subdomain. Using Chrome tried www, http://www.subdomain www.subdomain. Here is error I'm getting fzcpnl49094m6oe7p2@a04pm945 [~]$ acme.sh **--issue -d…
the dreamer i
  • 1
0
votes
0 answers

Letsencrypt - Existing domain certificate gets invalid when adding new domain

When I try to add ssl certificate for a -domain.com on the nginx server, It gets installed and works but the other existing old-domain.com show a certificate error This server could not prove that it is old-domain.com; its security certificate is…
TheMonkeyKing
  • 113
  • 1
  • 1
  • 5
0
votes
1 answer

Win-Acme - Renew a Certificate: No TXT Records found

This post is for a newbie, sorry for the stupid question, but quick long history, we have a dameware server proxy and the application have the certificate but its about to expire, we want to renew the certificate but when we try to renew the…
LeonardoHM
  • 1
0
votes
1 answer

Does Win-Acme / LetsEncrypt renew existing certificates or replace them?

I'm at the initial stages of considering the use of LetsEncrypt certificates for my Windows radius server. I don't see any purpose in the purchase and renewal process every year for what it is used for. My question is this...Using Win-Acme to…
Appleoddity
  • 3,488
  • 2
  • 13
  • 33
0
votes
1 answer

Different ports are serving different SSL certificates

I have an nginx server with ssl set up using certbot. Someone else set up the server originally. The main files are served at the root of the domain, and there is a node api running on port 4040. The problem is that while the SSL certificate for…
Matt Dietsche
  • 101
  • 1
0
votes
0 answers

How do I deal with "Some challenges have failed" in certbot?

I am trying to request a TLS certificate using Certbot (source: https://certbot.eff.org/instructions) with sudo certbot --nginx. It is supposed to be for a docker registry used as a pull through cache…
naraghi
  • 101
  • 1
  • 3
0
votes
0 answers

Redirecting from http to https with Nginx causes Google Search Console to report an issue

I have a website built (in plain HTML) using letsencrypt certificates. The Nginx config is redirecting traffic from http to https. I submitted this website to Google's Search Console, and they are sending me emails that "Page with redirect" issue…
xpanta
  • 159
  • 2
  • 10
0
votes
1 answer

Is this OK that certificate was logged?

I am using https://github.com/jhaals/yopass#docker-compose to configure otm service. And I have some question about nginx-proxy-letsencrypt and its logging. When I did docker logs -f otm-nginx-proxy-letsencrypt-1, I can see that cert is…
Eugen Konkov
  • 194
  • 1
  • 2
  • 13
0
votes
0 answers

Impossible to generate or renew any let's encrypt certificates on Plesk Obsidian

I can't create/renew any SSL certificate through Plesk panel with let's encrypt 'cause this error while trying: " Passed 'exception' value must be an \Throwable object " when click for adding the new SSL certificate (same result if I try with only…
Roberto C.
  • 1
  • 1
0
votes
1 answer

Apache mod_md: procedure for handling multiple VirtualHosts?

I have a working setup for multiple virtual hosts on the same server, but there's a problem: all the server's SSL certificates are unnecessarily renewed, and moved, whenever a vhost is added. In this setup, each vhost has a separate .conf file, and…
EML
  • 423
  • 4
  • 12
0
votes
0 answers

Unable to configure ssl on mariadb using certbot generated certificates and private key

I'm using certbot to generate a certificate for mariadb server and client ,but it's not working. sudo certbot certonly -d mariadbserver -d mariadbuser This is the command that i've used to generate certificates using certbot, I've got 4 files for…
Vijay
  • 1
  • 2
0
votes
0 answers

Why the letsencrypt certficate validity ended before the expiry date

I configured the letsencrypt certificate for my website which is hosted on centos 7 with httpd web server On 12-07-22 I renewed the SSL certificate manually by using /usr/bin/certbot renew. Then checked the SSL validity on the SSL checker website.…
jayaprakash R
  • 21
  • 1
  • 5
0
votes
0 answers

How to setup dovecot to accept client certificates signed with a private CA when the server certificate is signed by a public CA

I have been running a postfix/dovecot mail server with no issue for several years using SSL/TLS and Let's Encrypt issued server certificates: /etc/dovecot/conf.d/10-ssl.conf ssl = required # Bundle containing the public server certificate followed…
jean-christophe manciot
  • 111
  • 1
  • 5
1 2 3
…
54 55