Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Let's Encrypt is a certificate authority that entered public beta on December 3, 2015 that provides free X.509 certificates for Transport Layer Security encryption (TLS) via an automated process designed to eliminate the current complex process of manual creation, validation, signing, installation and renewal of certificates for secure websites.

An Python certificate management program called letsencrypt gets installed on the client side (the web server of an enrollee). This is used to order the certificate, to conduct the domain validation process, to install the certificate, to configure the HTTPS encryption in the HTTP server, and later to regularly renew the certificate.

After installation and agreeing to the user license, executing a single command is enough to get a valid certificate installed. Additional options like OCSP stapling or HTTP Strict Transport Security (HSTS) can also be enabled. Automatic setup initially only works with Apache and nginx.

Source: Wikiepdia

822 questions
0
votes
0 answers

Let's Encrypt hitting rate limit and lots of certs being generated

Something seems to have gone wrong with a Let's Encrypt configuration and I don't know how to stop it. When I logged onto to renew a cert that is to expire in 5 days I got the error: Failed to renew certificate inzu-mail.net with error:…
Kline
  • 247
  • 1
  • 5
  • 17
0
votes
1 answer

SSL Certificate with subdomain on different server

Hi i have specific problem which i haven't faced before because i never had to run different certificate for the same domain and subdomain but other company is requesting to run their own certificate on their server, the thing is main domain and…
lonerunner
  • 124
  • 1
  • 4
  • 16
0
votes
1 answer

Is there a way to configure nginx reverse proxy through Restful API

I can configure Nginx Reverse proxy with nginx server blocks by creating and editing configuration files. But its there a way to automate this process and configure reverse proxy entries and Lets encrypt certificates with API.
Ali Asad Sahu
  • 31
  • 5
0
votes
0 answers

Custom domain SSL on elastic beanstalk

Our Multi tenant SaaS application is hosted on elastic beanstalk(EBS). EBS load balancer uses a certificate issued by ACM(Amazon certificate manager) for SSL. We've customers who want to use their own custom domains for using our app. Is there a…
vishesh
  • 109
  • 3
0
votes
0 answers

LetsEncrypt Certificate is updated, but still showing old date on the website (restarted Apache)

Running Apache on EC2 ubuntu server, using letsencrypt certificate, which I see if I run sudo certbot certificates. I manually renewed it and confirmed the dates on the server, but the certificate on the website is still showing the old date. Then I…
Stewie Griffin
  • 131
  • 2
0
votes
2 answers

Possible conflict with multiple SSL certificates?

We currently have a SSL certificate for mycompany.com in GoDaddy and they are asking me to get one for our QA department for the URL qa.mycompany.com. I have installed certificates just fine with Let's Encrypt before, but never for a subdomain, and…
Tirux
  • 3
  • 5
0
votes
1 answer

Gmail connection error pop3 on dovecot postfix server

I configured a Dovecot Postfix mailserver on Ubuntu with letsencrypt certificates. It runs fine on mail clients like MacOS mail both in imap and pop3. No errors. However after adding two accounts to my gmail using pop3 I get 50% of the times a…
Klodder
  • 1
0
votes
1 answer

DDNS Certificates, Multiple Domains, Let's Encrypt, Certbot, Nginx, Ubuntu

I am a little confused and am looking for some guidance. I am running the latest Nginx on a home machine running Unbuntu 20.04 version 2. I have pfsense as my router/firewall running on a different machine. I have setup a DDNS…
Garet Jax
  • 115
  • 5
0
votes
0 answers

Traefik - Cannot get Let's Encrypt certificate - context deadline exceeded

I got "context deadline exceeded" error while getting Lets Encrypt certificate while installing Traefik, so I cannot get the cert. Port 80 is open and not blocked by iptables or VPS provider.
user615005
0
votes
1 answer

Can't find 301 redirect source

I'm running two websites from a Raspberry Pi. Until recently it all worked very well. Then I moved house and now nothing works. I don't think the moving of the house is the issue for various reasons. My set up is: Internet -> ISP Router -> Internal…
Corbat
  • 21
  • 2
0
votes
1 answer

How to avoid redirect if url match a string in Apache

I have a web server that redirects any HTML 404 error to another domain: ErrorDocument 404 https://error domain My goal if to avoid redirection when Let’s Encrypt tries to renew the certificates. All Let’s Encrypt challenges starts with:…
quollum
  • 1
0
votes
0 answers

Win-Acme / Let's encrypt DNS txt validation?

How do I do the DNS txt record validation? There are simply no tutorial or any info whatsoever about it. I need to bypass regular validation mechanism cause it uses Amazon which is banned here. How do I generate a TXT record to add to GoDaddy? I use…
Eric
  • 81
  • 1
  • 11
0
votes
1 answer

Cerbot with DNS Plugins running on multiple Nginx for to renew the same certificate

Am trying to deploy using Ansible (Ansible is not really relevant to the question but is just to give the whole picture) the Certbot configuration in order to obtain wildcard certificates to a cluster of Nginx servers that will be load-balanced…
Kalem
  • 103
  • 1
0
votes
0 answers

Getting Lets encrypt certificates for subdomains

I have several servers under domain myorg.example.com. For example git.myorg.example.com. I am planning to start using certificates provided by Lets Encrypt for these servers. Most of these servers are for internal use only and I don't like opening…
Madoc Comadrin
  • 570
  • 4
  • 11
  • 29
0
votes
1 answer

Lets Encrypt Auto Renew Quiet Mode Error

I have installed let's encrypt with Nginx configuration with DNS validation mode, As instructed on the documentation to auto-renew, I added the below entry: 15 3 * * * /usr/bin/certbot renew --quiet However, this didn't work, so I run it in the…
mahen3d
  • 4,342
  • 14
  • 36
  • 57
1 2 3
…
54 55