Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Let's Encrypt is a certificate authority that entered public beta on December 3, 2015 that provides free X.509 certificates for Transport Layer Security encryption (TLS) via an automated process designed to eliminate the current complex process of manual creation, validation, signing, installation and renewal of certificates for secure websites.

An Python certificate management program called letsencrypt gets installed on the client side (the web server of an enrollee). This is used to order the certificate, to conduct the domain validation process, to install the certificate, to configure the HTTPS encryption in the HTTP server, and later to regularly renew the certificate.

After installation and agreeing to the user license, executing a single command is enough to get a valid certificate installed. Additional options like OCSP stapling or HTTP Strict Transport Security (HSTS) can also be enabled. Automatic setup initially only works with Apache and nginx.

Source: Wikiepdia

822 questions
-1
votes
1 answer

Lets Encrypt with CNAME (cross domain) on k8s

Like the gitbook provide a custom domain I've to design a service and user can register their custom domain. For example, I've a service hosting.example.com and user can register any domain based on this service. In the case I wish user JUST edit…
cmj
  • 29
  • 2
-1
votes
1 answer

get SSL certificate for mail server, while already having it for domain

I have already achieved an SSL certificate for my domain by certbot. the configuration is: ServerAdmin admin@xxx.com DocumentRoot "/root" ServerName xxx.com ServerAlias www.xxx.com ErrorLog "/var/log/httpd/xxx.error_log" CustomLog…
SAndroid
  • 21
  • 1
  • 6
-1
votes
1 answer

Problems with TXT record in combination with other Records

I have currently the following DNS setup. Domain: domain.tld Example IPv4: 1.2.3.4 Example IPv6: fe80::1 Host Type Destination * A 1.2.3.4 * AAAA fe80::1 This setup works perfectly as expected. If I open any software and enter…
Dominik S.
  • 1
  • 1
-1
votes
1 answer

Postfix 3.4.9 SSL issues -- no shared cipher from servers using TLSv1

Edit 1: I've narrowed it down to TLSv1 that both servers listed below (no others have failed yet) are attempting to use. I'll be contacting their webmasters requesting they stop using an insecure protocol but in the mean time would still like to…
Chris B
  • 9
  • 1
  • 5
-2
votes
1 answer

Create Certificate using ssh_keygen and letsEncrypt for IIS

I am pretty new to public-private key and creating certificates so I wanted to write out my thinking and see if I have the correct approach. 1) Use ssh_keygen to create a key pair. I have basic git-bash on my Windows machine which allows me to run…
heyNow
  • 97
  • 1
-2
votes
1 answer

How to use Letsencrypt to domain that has no root folder with Cloudflare?

I am trying to use Letsencrypt (HTTPS) on my website with Cloudflare (HTTP) but I confuse with this. the domain doesn't have a root folder accessing domain will be redirected to one of subdomains domain.com -> sub1.domain.com I have many…
Ferdy Sopian
  • 3
  • 1
-2
votes
1 answer

Let's Encrypt Certbot DNS 01 Challenge

I'm hosting my own webserver and currently don't use port 80 because my ISP has blocked it. But I found out that my ISP doesn't actually block port 443, so I attempted to use Certbot on my domain with a txt record (DNS 01 Challenge I believe it is…
Erik
  • 101
  • 3
-2
votes
1 answer

What does the Let's Encrypt apache plugin do when proving domain ownership?

I want to run $ letsencrypt --apache certonly to get a new cert, but I can't find anywhere in the documentation that explains what this actually does other than that it uses the "tls-sni-01 challenge type". What does it actually change in my Apache…
Flash
  • 119
  • 5
-3
votes
1 answer

cannot obtain certificate from let's encrypt

I have a problem with obtaining a certificate from let's encrypt. My website is: www.webuilder.co.uk. All the time I am receiving an error like this: Error My settings are like this: Ubuntu Virtualbox If any other information are required please let…
Przemek
  • 113
  • 4
-3
votes
1 answer

I get other website's tls certificate when visiting my website

i have a weird issue while visiting my website using https... I can't track how often this happens, but sometimes T get a TLS certificate of another website.... and the browser warns me that the certificate is fake. however I set the certificate…
Samuel E.
  • 177
  • 2
  • 6
-3
votes
2 answers

Creating/Configuring a DNS server with runtime configuration

I have a big Windows video/audio application that may be controlled remotely over a web server. For that, I can listen to a local port in a, say, 192.168.1.10 system to port 8000, forward the port via NAT and have a remote browser connect to…
Michael Chourdakis
  • 189
  • 1
  • 2
  • 11
-5
votes
1 answer

How do I renew my cert? ACMEv1 Brownout in Progress

I dont know what this means, their website doesn't offer any guides, and googling it doesn't provide any help. My whole website is now inaccessible and I can't fix it. Cert is due for renewal, auto-renewing... Attempting to renew cert from…
stackers
  • 307
  • 1
  • 3
  • 14
1 2 3
…
54
55