Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Let's Encrypt is a certificate authority that entered public beta on December 3, 2015 that provides free X.509 certificates for Transport Layer Security encryption (TLS) via an automated process designed to eliminate the current complex process of manual creation, validation, signing, installation and renewal of certificates for secure websites.

An Python certificate management program called letsencrypt gets installed on the client side (the web server of an enrollee). This is used to order the certificate, to conduct the domain validation process, to install the certificate, to configure the HTTPS encryption in the HTTP server, and later to regularly renew the certificate.

After installation and agreeing to the user license, executing a single command is enough to get a valid certificate installed. Additional options like OCSP stapling or HTTP Strict Transport Security (HSTS) can also be enabled. Automatic setup initially only works with Apache and nginx.

Source: Wikiepdia

822 questions
3
votes
1 answer

Error When Setting up SSL on Alternate Port

I have a web server running on a Raspberry Pi. I am running stunnel on port 443, so I have been working to move my web server to port 8443. I use Let's Encrypt (Certbot) for my SSL certificates, and previously they had been working perfectly. I…
FlyingHazard
  • 31
  • 4
3
votes
1 answer

How to use Let's Encrypt with both EC2 and Cloudfront?

I want to use Let's Encrypt certificates for both EC2 and Cloudfront. I am creating a wordpress installation EC2 t2.micro using Ubuntu 16.04(HVM) AMI and nginx. EC2 region will be us-east-2 (Ohio). I can create Let's Encrypt cert using the certbot…
mesumosu
  • 33
  • 4
3
votes
0 answers

What is the appropriate way to give non-root services access to letsencrypt certs

I have a service (ejabberd, though this question isn't specific to ejabberd) that runs as a non-root user. I want it to use a letsencrypt-provided certificate. Ideally I would like letsencrypt to put/update a cert into the service's configuration…
Andrew
  • 1,134
  • 3
  • 10
  • 16
3
votes
3 answers

Let's encrypt certificate and NGINX - Cannot find a cert or key directive

My server runs on a LEMP Stack Ubuntu 16.04 and last version of nginx I already have a SSL certificate installed on my server for the following domains and subdomains : example.com, domain1.example.com and everything is working fine. What I try to…
Leo
  • 131
  • 1
  • 4
3
votes
1 answer

How to use Certbot with server in docker container?

I have Tomcat 8 running in a docker container. Specifically, the image tomcat:8-jre8 . I am trying to install a certificate from Let's Encrypt in order to get all communications to the server to run over https. The issue I am having is that I am not…
Nevado
  • 31
  • 1
  • 3
3
votes
1 answer

How do I renew letsencrypt SSL certificates on Synology DSM?

It seems that for some reason the certificates that are generated with LetsEncrypt are not renewed automatically by latest Synology DSM. I tried the CLI, but it fails sudo syno-letsencrypt renew-all -v DEBUG: [syno.example.com] is not a subdomain…
sorin
  • 8,016
  • 24
  • 79
  • 103
3
votes
1 answer

Auto reload Nginx on certboot renew success?

Every three months, my Let's Encrypt certificate expires, and my customers get an invalid https certificate. So I recently placed the following cron task : @weekly certbot renew --quiet && service nginx reload From my understanding, when certbot…
Cyril N.
  • 624
  • 1
  • 10
  • 36
3
votes
1 answer

Getting "Error: couldn't get currently installed version for letsencrypt" when trying to renew my certificates

I started getting an error when trying to renew my letsencrypt certificates on Ubuntu 15.04 + nginx server. Even when I try running the certbot-auto command, I see the following: Error: couldn't get currently installed version for…
parrker9
  • 133
  • 4
3
votes
3 answers

Error installing LetsEncrypt SSL: (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain

I am trying to install LetsEncrypt on my server (which I have root SSH access to), for staging.dnslaude.com - which is a publicly accessible domain, pointing to 213.212.81.89. The server is running ubuntu 16.04, and an nginx web-server. Below is the…
Tom Lord
  • 133
  • 1
  • 5
3
votes
3 answers

Use letsencrypt on virtual machine behind a reverse proxy with server name indication

I have a server set up with some virtual machines behind a nat. I want to use encryption for my xmpp-server-vm, and therefore need a certificate inside the vm. Is there a possibility to use nginx as a reverse-proxy so i can run letsencrypt and…
user393856
  • 185
  • 3
  • 15
3
votes
2 answers

How to use Let's Encrypt with Dynamically configured mass virtual hostsing

I have a server configured to use Apach 2.4 dynamically configured vhosts. I have SSL configured for some domains but I am asked to use Let's Encrypt free service to provide SSL for all domains. Certbot was little bit unclear for me as I am not…
Faraz
  • 183
  • 1
  • 2
  • 10
3
votes
1 answer

Why does Chrome trust the same authority on this certificate, but not the other?

Why does Chrome trust the certificate authority for this site, but not for this one? This is the same machine, same browser, signed by the same authority, and Chrome shows the intermediate chain signed by the same root CA. You can confirm the host…
Jeff Puckett
  • 229
  • 5
  • 16
3
votes
3 answers

nginx master process running as root but complaining that it is not

I am running nginx 1.11.3, compiled from source with the addition of the ngx_cache_purge module, on Ubuntu 14.04.3 server. I'm seeing in the nginx error.log the following: 2016/08/03 14:30:00 [warn] 21827#21827: the "user" directive makes sense only…
Josh K
  • 63
  • 2
  • 6
3
votes
1 answer

Using my own private key for Let's Encrypt's certbot due to HPKP

I am currently using certificates from StartCom for my hosted virtual server. Since StartCom's OCSP servers are quite unstable at times, I was considering moving to Let's Encrypt. Their service is also less troublesome to use. As far as I found…
comfreak
  • 1,501
  • 1
  • 21
  • 33
3
votes
1 answer

CentOS6.X: letsencrypt, cronjob and wrong "pip version"

I'm trying to write a script which will update the letsencrypt cert automatically via cronjob on up-to-date CentOS6.x. To do that I wrote have following script: #!/bin/sh # # get newest "Let's Encrypt" version # cd /opt/letsencrypt git pull # bug…
Steffen
  • 989
  • 3
  • 13
  • 31
1 2 3
…
54 55