Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Let's Encrypt is a certificate authority that entered public beta on December 3, 2015 that provides free X.509 certificates for Transport Layer Security encryption (TLS) via an automated process designed to eliminate the current complex process of manual creation, validation, signing, installation and renewal of certificates for secure websites.

An Python certificate management program called letsencrypt gets installed on the client side (the web server of an enrollee). This is used to order the certificate, to conduct the domain validation process, to install the certificate, to configure the HTTPS encryption in the HTTP server, and later to regularly renew the certificate.

After installation and agreeing to the user license, executing a single command is enough to get a valid certificate installed. Additional options like OCSP stapling or HTTP Strict Transport Security (HSTS) can also be enabled. Automatic setup initially only works with Apache and nginx.

Source: Wikiepdia

822 questions
0
votes
0 answers

How to dynamically set SSLCertificateFile for user's custom domains

I have a site where users can point their own custom domain to their unique directory on my site through A Records. For example, example.com points to mysite.com/something and anothersite.org points to mysite.com/somethingelse Each of these custom…
Osman
  • 97
  • 1
0
votes
1 answer

Certbot wildcard with apache but none of the listed DNS providers

On the official certbot documentation for apache (https://certbot.eff.org/lets-encrypt/ubuntubionic-apache.html), it says you should do sudo apt-get install python3-certbot-dns- However, when I start typing that and then double TAB after…
Tobias Feil
  • 103
  • 3
0
votes
1 answer

Which Let’s Encrypt clients support ACME v2 in the official Debian Buster repos?

The ACME protocol version 1 is deprecated and will stop working with Let’s Encrypt in multiple steps from 2019 to 2021. See https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430 I’ve been using acmetool on Debian since Stretch.…
Daniel Böhmer
  • 271
  • 2
  • 13
0
votes
2 answers

Dovecot Unable to access letsencrypt certificates on LEMP server

I am attempting to setup postfix and dovecot on a LEMP server. I am using letsencrypt certificates. I suspect I am having a permissions problem because I cannot access the /etc/letsencrypt/live folder using cd unless I preface it with the sudo su…
DanRan
  • 73
  • 1
  • 3
  • 22
-1
votes
1 answer

How to protect a website with HTTPS using a digitalocean certificate?

I have deployed a website on a Digital Ocean droplet that listens on port 80, i.e. vanilla HTTP. I would like to protect the website using HTTPS, and it seemed like this would be a simple process using DO's Let's Encrypt integration under the…
J. Munson
  • 111
  • 1
-1
votes
1 answer

LetsEncrypt certificate (renewing) installing error

I'm trying to renew my LetsEncrypt certificate on my Raspberry Pi running apache2, but I seem to get an error when CertBot tries to generate the certificate. Expected sha256 a988718abfad80b6b157acce7bf130a30876d27603738ac39f140993246b25b3 …
Joey M
  • 1
  • 3
-1
votes
1 answer

CWP CentOS 7 hostname ssl not working?

My Site.. https://sajjadhsagor.com works with SSL fine.. but when i visit https://sajjadhsagor.com:2087 and try to login to admin SSL doesn't work anymore.. error says SSL issued to server1.sajjadhsagor.com which is my hostname server... I am…
Sajjad Hossain Sagor
  • 1
-1
votes
3 answers

letsencrypt failed authorization procedure

I'm receiving the following error when attempting to renew my ssl certificate Failed authorization procedure. karaokeottawa.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from…
Ian Arman
  • 123
  • 3
  • 8
  • 15
-1
votes
1 answer

modern installation of Tomcat with SSL on port 443

In the computer course I'm writing I'm using Tomcat for the server. (Students learn how to set up CentOS and everything from scratch. Currently the course has them using Tomcat running on port 8080.) I'm going back to write the section on security.…
Garret Wilson
  • 174
  • 3
  • 15
-1
votes
1 answer

Certify the Web: DNS challange keeps changing

I'm trying to make a * cert off my hosted services with the Community Edition of LetsEncrypt. I'm using the manual DNS update method. Every time I try, it changes the DNS _acme-challenge value on me. I'll go into my DNS manager, update my TXT,…
Matthew Hunt
  • 19
  • 3
-1
votes
1 answer

How to check if letsencrypt ssl certificate is installed?

I installed Lets Encrypt plugin in my WHM and run for one of my site but it when I'm checking to sslshopper site to confirm that certificate is installed or not it shows : Common name: example.io SANs: example.io, cpanel.example.io,…
Mohit Bumb
  • 99
  • 1
  • 5
-1
votes
1 answer

Let's Encrypt Expire Bot showing different date then command line

Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018. but when I log in to the server, and check the certificate with this command, echo | openssl s_client…
Zhenyu
  • 263
  • 1
  • 3
  • 10
-1
votes
3 answers

How to install cert-bot/letsencypt on Ubuntu?

Ubuntu 17. I've tried this: sudo add-apt-repository ppa:certbot/certbot sudo apt-get update sudo apt-get install python-certbot-nginx # doesn't exist The error: Reading package lists... Done Building dependency tree Reading state…
Wamaadi
  • 11
  • 1
  • 2
-1
votes
1 answer

Nginx Let's Encrypt Refused Connection

Using a Digital Ocean LEMP Ubuntu 16.04 installation with one site example.com. Visting http://example.com works normally. Installed Let's Encrypt using…
TechRemarker
  • 358
  • 1
  • 6
  • 17
-1
votes
1 answer

CAA SSL Lets encrypt lookup

If a domain is connected by pointing is it possible for the CNAME to provide the CAA response required by lets encrypt, or can this response only be provided by the controlling NameServers? Thanks for any help a bit stuck on this. I reviewed the…
Jhd33
  • 13
  • 3
1 2 3
…
54 55