Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [lets-encrypt]

Let's Encrypt is a certificate authority that provides free X.509 certificates for TLS encryption.

Let's Encrypt is a certificate authority that entered public beta on December 3, 2015 that provides free X.509 certificates for Transport Layer Security encryption (TLS) via an automated process designed to eliminate the current complex process of manual creation, validation, signing, installation and renewal of certificates for secure websites.

An Python certificate management program called letsencrypt gets installed on the client side (the web server of an enrollee). This is used to order the certificate, to conduct the domain validation process, to install the certificate, to configure the HTTPS encryption in the HTTP server, and later to regularly renew the certificate.

After installation and agreeing to the user license, executing a single command is enough to get a valid certificate installed. Additional options like OCSP stapling or HTTP Strict Transport Security (HSTS) can also be enabled. Automatic setup initially only works with Apache and nginx.

Source: Wikiepdia

822 questions
3
votes
1 answer

LetsEncrypt: Unknown SSL protocol error in connection

I have a host with LE certificate and it works well in a browsers, but I still can't connect using curl, openssl, wget, POST (libwww-perl): curl # curl -v -3 https://example.com/ * Hostname was NOT found in DNS cache * Trying 123.123.123.123... *…
Serhii Matrunchyk
  • 143
  • 1
  • 8
3
votes
1 answer

Do I need to have port 80 configured in LAMP for an HTTPS website?

I have a LAMP webserver, and on it there is https://sslhosting.cz/ domain. First I attach a general Let's Encrypt config file, which I changed to my needs: /etc/letsencrypt/options-ssl-apache.conf # Baseline setting to Include for all Let's Encrypt…
Vlastimil Burián
  • 499
  • 6
  • 20
3
votes
2 answers

Redirecting www to non-www (apache, letsencrypt )

Ubuntu 14.04 Apache 2.4.18 I have set up a SSL certificate using letsencrypt. It works well but in order to work, I cannot have multiple vhost defined in one virtualhost configuration file. Each vhost has to sit in its own .conf file inside…
pixeline
  • 658
  • 3
  • 13
  • 29
3
votes
1 answer

Let's Encrypt certificate on SQL Server 2019 - "The target principal name is incorrect"

Summary I'm having trouble getting a certificate issued by Let's Encrypt R3 to work on SQL Server 2019. When using the certificate for SSL but not trusting the server certificate explicitly (In SSMS, I check "Encrypt connection" but not "Trust…
fusillibips
  • 31
  • 2
3
votes
2 answers

SSL_ERROR_RX_RECORD_TOO_LONG after installing Certbot on Apache2

I'm trying to set up a web server on a raspberry pi, it's running a debian based system. I installed and set up apache (following this guide), set up port forwaring on my router and created 3 html only websites to test things. Since I only have one…
Simone
  • 31
  • 2
3
votes
1 answer

When using Let's Encrypt certbot, how do I restart/reload a network service only once and only if the cerificate was actually renewed?

The certbot command provides two hooks that run after automated renewals, from the docs: --post-hook POST_HOOK Command to be run in a shell after attempting to obtain/renew certificates. Can be used to…
Walf
  • 401
  • 1
  • 6
  • 17
3
votes
2 answers

Renew Let's encrypt certificate automatically without stopping nginx hosted on docker

I am using nginx as proxy and SSL termination for the site hosted on docker. App & nginx both are on docker. I have installed Let's encrypt SSL using Certbot directly on Ubuntu server. And now using the SSL cert installed on Ubuntu server in Docker…
Krunal
  • 251
  • 1
  • 4
  • 16
3
votes
2 answers

I have a rewrite in an apache httpd conf file, that breaks certbot. Is there a way to change it so that it doesn't?

I have a subdomain set up in Apache httpd, that is front-ending for a Tomcat server, with the httpd server secured by Let's Encrypt. If I have the following rewrite active in the conf file, then certbot fails. RewriteEngine on RewriteCond…
hbquikcomjamesl
  • 259
  • 2
  • 16
3
votes
0 answers

Apache2 Let's Encrypt 404 for .well-known/acme-challenge

I am trying to issue a Lts encrypt ssl on my Apache2 AWS ECS. I confirmed the www and non www versions of the domain are all pointed correctly to the server however I receive an error that I am not sure how to fix. Type: unauthorized Detail:…
Jayreis
  • 145
  • 15
3
votes
2 answers

Bind9 nsupdate update-policy rule to grant _acme-challenge.**.domain.tld (all additional subdomains)

Issue I'm using letsencrypt certbot's DNS-01 challenge, but it won't issue certificates more than one subdomain level deep. named.conf # grep -A 3 ^key /etc/bind/named.conf.local key "certbot." { algorithm hmac-sha512; secret …
ki9
  • 1,243
  • 1
  • 13
  • 19
3
votes
2 answers

NGINX SSL Reverse Proxy Verify Upstream SSL

I have NGINX setup as a reverse proxy to host multiple websites using only one IP address. I have a Lets Encrypt certificate on the proxy and a different Lets Encrypt certificate on the upstream server. Basically, I need NGINX to forward traffic to…
Marc Woodyard
  • 107
  • 2
  • 3
  • 9
3
votes
2 answers

How to change the default certificate chain in Kubernetes Ingress

I'm using AKS on Azure and Ingress with Let's Encrypt certificate (configured by https://docs.microsoft.com/en-us/azure/aks/ingress-static-ip) The certificate chain defaults to DST Root CA X3 but I would like to change it to alternative ISRG Root…
Ondřej Míchal
  • 133
  • 4
3
votes
2 answers

Unable to use LetsEncrypt - CertBot - When HTTP to HTTPS redirect is setup

I am trying to configure CertBot and it only works when I serve my site over http. Usually I have an https redirect and I don't want to have to change the site config each time I need to use certbot. I tried to serve only /.well-known/ over http but…
FreeSoftwareServers
  • 515
  • 1
  • 8
  • 26
2
votes
1 answer

HTTPS:// is not working on Nginx

My domain is: http://indiasaplings.com/ I ran this command: sudo certbot --nginx -d indiasaplings.com -d www.indiasaplings.com It produced this output: IMPORTANT NOTES: Congratulations! Your certificate and chain have been saved…
Brajmohan Kumar
  • 123
  • 1
  • 6
2
votes
1 answer

Too many redirects error

I am using drupal 8 , in a Google cloud engine (http and https traffic allowed) running apache on an Ubuntu 19.04. All worked, site (refered to here as sub.my-domain.com, it is indeed a subdomain with a dash in the domain) was running. Certificate…
pigeon
  • 23
  • 4
1 2 3
…
54 55