Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Let's Encrypt is a certificate authority that entered public beta on December 3, 2015 that provides free X.509 certificates for Transport Layer Security encryption (TLS) via an automated process designed to eliminate the current complex process of manual creation, validation, signing, installation and renewal of certificates for secure websites.

An Python certificate management program called letsencrypt gets installed on the client side (the web server of an enrollee). This is used to order the certificate, to conduct the domain validation process, to install the certificate, to configure the HTTPS encryption in the HTTP server, and later to regularly renew the certificate.

After installation and agreeing to the user license, executing a single command is enough to get a valid certificate installed. Additional options like OCSP stapling or HTTP Strict Transport Security (HSTS) can also be enabled. Automatic setup initially only works with Apache and nginx.

Source: Wikiepdia

822 questions
0
votes
1 answer

How to fix LetsEncrypt renewal failing with error "Unable to reach credentials server"?

I have successfully acquired a certificate using Win-Acme installed on Windows Server 2012. The software is setup to renew using the Route53 plugin to automatically verify ownership via DNS. Win-acme does run the renewal task but it fails with an…
Rich C
  • 103
  • 6
0
votes
1 answer

SSL: is it possible to use a certificate for a specific subdomain and a wilcard for all other sub domain?

I have a domain, say domain.com. I have some random subdomains which all point to the same server. (eg: user-00.domain.com, user-01.domain.com, etc.) I also have some fixed sub domain names, let's say fixed.domain.com which also point on the same…
dagatsoin
  • 3
  • 1
0
votes
1 answer

How to install SSL certificate for domain and subdomain

I want to install certificate on EC2 for domains and subdomains. I'm running a website "www.example.in" on single EC2 instance which is in public subnet with public IP and also pointing some subdomains like "api.example.in", "dashboard.example.in"…
rajeev singh
  • 1
  • 2
0
votes
1 answer

Old LetsEncrypt SSL certificate still being served by EC2 instance

I'm working on renewing the SSL certificate for my websites. They are all running on the same EC2 instance with the same Apache server. Two of my domains recently expired so I also tried to remove them from the certificate. I think I renewed the…
Neel
  • 143
  • 7
0
votes
1 answer

How to lets-encrypt several virtual servers on apache

I host several instances of the same ruby on rails application via passenger on an Apache server. In the past these applications have been made available via separate Domains. But now I received a domain and several sub-branches from our IT…
Claas-Thido Pfaff
  • 3
  • 2
0
votes
0 answers

Exposing port http and https to the docker container but still can't communicate

Edit #3: fix by disabling FirewallD. It turns out because of my lack of understanding about CentOS. I did not have this problem before because Alibaba Cloud decide it is best to just disable firewalld in the first place. Docker use iptables, and…
Jason Rich Darmawan
  • 103
  • 4
0
votes
0 answers

How to add SSL certificates for multiple VPS (Shared Hosting Servers) with the same primary domain?

I am planning 3 VPS shared hosting servers. Of particular focus in this question...they are also acting as mail servers. host1.mydomain.com host2.mydomain.com host3.mydomain.com (where "mydomain" is identical across the 3 servers) I am not using…
adam
  • 11
  • 3
0
votes
1 answer

How do I setup lets encrypt for an Azure Linux Service Web App

There are plenty of guides on how to set up Lets Encrypt for Azure Windows Web App Services, but I can't find any at all for Linux based services. Here are two example of such tutorials (that require…
JensB
  • 259
  • 1
  • 3
  • 15
0
votes
1 answer

How should certificates for multiple separate sub-domain servers be issued/renewed with Let's Encrypt?

Upgrading my home infrastructure to learn as well as be more secure, I have not been able to find out how best to get certificate(s) issues and installed across my servers, which comprise: Firewall (pfSense - FreeBSD): fw.example.com NAS…
andybjackson
  • 105
  • 6
0
votes
0 answers

Cloudflare stops website working as it is enabled

My website is usign Cloudflare to manage its DNS records. I've installed SSL using LetsEncrypt on my website and everything works well when Cloudflare is disabled. As I enable Cloudflare, my website can not be reached anymoer. The SSL configuration…
Mohammad Bagher Saberi
  • 99
  • 1
  • 3
  • 9
0
votes
0 answers

SSL certificate valid in Chrome but not in Firefox

I have installed an ssl certificate with letsencrypt (actually, my provider has an automated workflow for this which I used). As the title says: in Chrome (Chromium in Linux) it says that it is safe. In Firefox (also on Linux) it says that the…
Alb
  • 3
  • 7
0
votes
1 answer

LetsEncrypt ACMEv2 updates with CertifyTheWeb

I have a number of Windows 2016 servers configured with CertifyTheWeb's LetsEncrypt application. This secures a number of IIS certs. I've received a notification that the ACMEv1 protocol is due to be deprecated in June 2020 and that I need to switch…
TheDemonLord
  • 103
  • 2
0
votes
1 answer

How to install letsencrypt wildcard certificates?

I am using certbot/letsencrypt from the EPEL repository with apache on CentOS 7 without any issues on "normal" domain names. The certbot tool recognizes server name aliases from the virtualhost config files just fine. Renewal also works fine. For…
uncovery
  • 305
  • 5
  • 14
0
votes
1 answer

Apache HTTP to HTTPS Redirect working for alias but not server name

I have created an SSL certificate using Let's Encrypt. The certificate has been installed and is referenced in the Apache config file. The Apache config provides a ServerName (e.g., example.com) and a ServerAlias (e.g., www.example.com). Both are…
David Patterson
  • 141
  • 1
  • 6
0
votes
1 answer

What is the proper procedure to replace an existing paid certificate with lets encrypt

I have a paid certificate that's about to expire soon. I would like to use lets encrypt cert in replacement of this one. What is the appropriate procedure to do this? Info: - CentOS 6.3 - Apache 2.2 - Digicert - Still don't have any lets encrypt…
HelloWorld
  • 3
  • 2
1 2 3
…
54 55