Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Let's Encrypt is a certificate authority that entered public beta on December 3, 2015 that provides free X.509 certificates for Transport Layer Security encryption (TLS) via an automated process designed to eliminate the current complex process of manual creation, validation, signing, installation and renewal of certificates for secure websites.

An Python certificate management program called letsencrypt gets installed on the client side (the web server of an enrollee). This is used to order the certificate, to conduct the domain validation process, to install the certificate, to configure the HTTPS encryption in the HTTP server, and later to regularly renew the certificate.

After installation and agreeing to the user license, executing a single command is enough to get a valid certificate installed. Additional options like OCSP stapling or HTTP Strict Transport Security (HSTS) can also be enabled. Automatic setup initially only works with Apache and nginx.

Source: Wikiepdia

822 questions
0
votes
0 answers

SSL Issue : Unable to access website on Android Phones

Some of the users are unable to access our website on their Smart Phones (specifically Android 4+ and 6+ versions) They are facing this warning, whenever accessing. NET::ERR_CERT_AUTHORITY_INVALID But ironically all other websites in the world can…
Siddhu Moosewala
  • 1
0
votes
1 answer

Apache2 SSL: None of the common names in the certificate match the name that was entered (works with www. but not without)

I'm using https://www.sslshopper.com/ssl-checker.html to check my site, and it's failing with this error message: None of the common names in the certificate match the name that was entered (example.net). You may receive an error when accessing this…
HC_
  • 101
  • 2
0
votes
0 answers

Strategy for reverse proxy and certificate renewal

I am migrating a machine that holds several (Apache) websites to a new machine where I want one frontend (I have chosen nginx) acting as a reverse proxy and many small lxc virtual machines, each dedicated to a specific website. This is working…
JC Boggio
  • 101
0
votes
1 answer

Is random response from DNS authoritative server normal

We are trying to setup Lets Encrypt certificate issuance using cert-manager and dns01 solver. We are using Dreamhost as our DNS provider and we created glue component that bridges between RFC-2136 cert-manager and Dreamhost API. We are experiencing…
AGrzes
  • 103
  • 4
0
votes
1 answer

Certbot - Failed authorization procedure

I want to generate a Let's Encrypt certificate for my server, so that I can renew it automatically. I ran the command certbot --nginx -d testpbx.info.eu and got the following error. certbot --nginx -d testpbx.info.eu Saving debug log to…
Ekip_DetP
  • 1
  • 2
  • 3
0
votes
0 answers

Remove discarded subdomains (wildcard) from subdomain scanners

I have a server which I use with my own domain name, with a wildcard DNS record. On the server side, I use the nginxproxy docker image to autogenerate VHosts. This allows me to add new websites/pages/services on the fly with their own subdomain…
Lurnak
  • 1
0
votes
1 answer

Unable to renew a Certbot NGINX certificate

I have a NGINX server and I use Certbot to generate a Let's Encrypt certificate. I saw that my certificate was not renewing automatically despite the cron I had set up. I tried to renew it manually with the command: $ certbot renew --cert-name…
Ekip_DetP
  • 1
  • 2
  • 3
0
votes
1 answer

Server refused to connect after installing SSL via Certbot | Docker + Nginx, AWS Lightsail

I have successfully managed to install SSL via certbot into my Nginx Docker container, but after installation, all traffic routed via HTTPS refuses to connect. curl https://www.example.com or curl https://the_ip_of_server curl: (7) Failed to connect…
Pranav
  • 101
  • 3
0
votes
1 answer

How do I set up a Let's Encrypt wildcard certificate for Apache on an Amazon Linux 2 AMI EC2 instance?

I have a domain (let's say example.com), and I currently have a Let's Encrypt certificate set up and properly working for example.com and www.example.com for Apache on an Amazon Linux 2 AMI EC2 instance, and I'm trying to reconfigure the certificate…
HartleySan
  • 103
  • 4
0
votes
1 answer

Sharing a Let's Encrypt certificate with a node websocket connection on the same domain? Possible? Advisable?

Is it possible / advisable to register and renew a Let's Encrypt certificate through Nginx for https, and share that same certificate on a websocket connection (wss://) on the same domain? The websocket server is being ran off of node.js (Colyseus…
Jon
  • 103
  • 3
0
votes
1 answer

TLS certificate for non standard ports

We have a server (running on Ubuntu 20.04) accessible from a subdomain myserver.university.country, I would like to install SSL/TLS certificate on the server to make the connections to the server encrypted. This is my first time managing a server…
llrs
  • 105
  • 4
0
votes
1 answer

Kubernetes Nginx Ingress with Cert Manager and letsencrypt does not allow wildcarts in domain names

I have a self-hosted Kubernetes cluster with an Nginx Ingress. Cert-manager is also running on the cluster, with which I try to get valid SSL certificates using Letsencrypt. It all works and I get a valid certificate for example.com, www.example.com…
Tamino Elgert
  • 83
  • 1
  • 1
  • 9
0
votes
2 answers

What commands can I use to simulate letsencrypt adding the TXT field to my server?

I'm trying to debug my DNS setup for the letsencrypt challenge. I understand that BIND9 may not be receiving the requests, although it was earlier in the day. The .jnl does not get created, unfortunately. What I'd like to know is how can I send a…
Alexis Wilke
  • 2,210
  • 1
  • 20
  • 37
0
votes
1 answer

Apache serves with new and old SSL Root certificate

I am hosting a website at https://www.tabletop.cloud A while back I switched from the DST Root CA X3 root certificate to the ISRG Root X1 certificate. When I access my website in every browser the SSL certificate seems to be working as normal (see…
Milan
  • 103
  • 3
0
votes
0 answers

Serve different SSL certificate depending upon connection

I currently have a Nextcloud installation running on a server at home behind an Nginx proxy, which in turn is routed through Cloudflare. The proxy currently presents a Cloudflare origin SSL certificate to perform authenticated pulls from…
Adam
  • 101
  • 1
1 2 3
…
54 55