Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Let's Encrypt is a certificate authority that entered public beta on December 3, 2015 that provides free X.509 certificates for Transport Layer Security encryption (TLS) via an automated process designed to eliminate the current complex process of manual creation, validation, signing, installation and renewal of certificates for secure websites.

An Python certificate management program called letsencrypt gets installed on the client side (the web server of an enrollee). This is used to order the certificate, to conduct the domain validation process, to install the certificate, to configure the HTTPS encryption in the HTTP server, and later to regularly renew the certificate.

After installation and agreeing to the user license, executing a single command is enough to get a valid certificate installed. Additional options like OCSP stapling or HTTP Strict Transport Security (HSTS) can also be enabled. Automatic setup initially only works with Apache and nginx.

Source: Wikiepdia

822 questions
0
votes
1 answer

Apache Let's Encrypt Certbot Challenge Failed on Linux

I have a Fedora 34 server running Apache Tomcat. I had certificates from Let's Encrypt working. I installed them with certbot (as one does) and everything was working well. Now, when I go to renew my certs, I get the following error: [root@app…
rcsvivk
  • 31
  • 1
  • 5
0
votes
1 answer

Obtain Let's Encrypt SSL Certificate for Internal Server on Internal DNS Server

I currently run an organization and we use a internal website that is hosted within our network that runs a Gitea Server so that we are able to access important documents without having to rely on a third-party service. I have already setup a DNS…
Joe
  • 101
  • 4
0
votes
1 answer

How do you use wazuh with cert-manager in kubernetes?

The wazuh kubernetes install instructions uses self signed certificates. Is there a way to use cert-manager/LetsEncrypt certificates instead?
0
votes
0 answers

Why the certificate Authority always failed the temporary challenge file created by Certbot?

i'm using jonasal/nginx-certbot image for letsencript certificates generate. docker-compose.yml: version: '3' services: nginx: image: jonasal/nginx-certbot:latest restart: unless-stopped environment: -…
Anthony
  • 141
  • 7
0
votes
0 answers

letsencrypt not working for base domain

I'm using centos 8, and have installed let's Encrypt certificate that's not working for base (root) domain but working for sub domain. I've checked certificates available for both root and sub domains Found the following certs: Certificate Name:…
0
votes
1 answer

Can I use a wildcard ssl cert for subdomains, with let's encrypt for bare & www?

Our main site is hosted with free LE certs included. We have several subdomains on different hosting providers and our own servers that need https. Can we keep the main/www LE cert as is, and get a wildcard cert for the others?
0
votes
0 answers

Certbot renew running but not renewing - 2021

I have exactly the same issue as this post 3 years ago. Certbot timer is working, but the cert will not renew every 90 days. I resorted to booting the server and the cert will be updated. I have also shown my certbot system status and…
0
votes
1 answer

How to change an expiring CA certificate issued by letsencrypt to a new root CA of other than letsencrypt?

I was using a letsencrypt certificate for the https connection, but now the DST root CA X3 is getting expired and they added a new path to the root ISRG X1, which is not a trusted root for the IoT device that I'm using. So I need to change the root…
Diablo
  • 1
0
votes
0 answers

Let's Encrypt: SSL Certificate is valid for the Domain but not valid Specific Port (net::ERR_SSL_PROTOCOL_ERROR)

I am using VPS: Amazon EC2 and SSL Cert Provider: Let's Encrypt (through Certbot) I have seen some kind of a question but the answer is not useful for my situation. I have a domain api.example.com that is configured and fully functioning on an…
0
votes
0 answers

Access logs show +210k mentions of localhost IP as origin of request

I have a CentOS 7 server, with 5-6 domains (one being the main domain, the others subdomains). Ever since installing Lets Encrypt and handling the redirections in httpd-vhost.conf, the access log has been filling up with requests from localhost / my…
FiddlingAway
  • 123
  • 6
0
votes
2 answers

What do I need to do to get ProxyPass directives to register?

I am trying to make a MyCollab CE installation available via SSL, under Apache 2.4.38 (Debian). At present I am seeing ProxyPass not recognized. I have: ProxyPass / http://localhost:8080/ ProxyPassReverse / http://localhost:8080/ When I try to load…
Christos Hayward
  • 1,162
  • 3
  • 16
  • 35
0
votes
1 answer

AWS, nginx and LetsEncrypt

I have multiple websites, running on Nginx, and I am trying to set up a load balancer, with 3-5 instances sitting under it. All these websites will need an SSL cert. I am trying to think of the best way possible. Use nginx instance as a load…
Anuj Gakhar
  • 113
  • 1
  • 3
0
votes
0 answers

Docker wordpress/ nginx-proxy / nginx-proxy-companion - lets encrypt auto renewal - update image and restart?

I have a wordpress site on an aws ec2 that was setup (by someone else) to auto renew its SSL certificate via Let's Encrypt. The auto renewal has recently stopped and the certificate has since expired. I have attempting to run docker exec…
ksav
  • 101
  • 3
0
votes
1 answer

Apache and letsencrypt ssl | need assistance from cloudflare gurus or experts in ssl

hope you are all staying well and safe. So just to explain my setup which I have always proffered do which worked for me, until now.. I have: Ubuntu server running apache2 for websites Letsencrypt via certbot (installed last week along with fresh…
Jokfil
  • 1
0
votes
1 answer

Is it necessary or advisable to preserve SSL certificates when moving to a new server?

I have one domain that I'm serving a site on from a VPS. I used certbot to get certificates and automatically set up TLS on the nginx server. If I'm moving the site to a new VPS is there any reason to preserve the certificates and letsencrypt…