Questions tagged [certbot]

Certbot is the official client used to issue Let's Encrypt SSL certificates. This tag is for the certbot client itself. For questions regarding SSL in general, use the [ssl] tag.

Use the tag for all Certbot related questions. Questions should be about the certbot CLI itself, and not questions related to installing certificates generated by certbot. Certbot documentation can be found here.

795 questions
7
votes
1 answer

Nginx LetsEncrypt error "/etc/letsencrypt/options-ssl-nginx.conf" no such file or directory

I am trying to add https using LetsEncrypt and Nginx. I have added certbot and it ran sucessfully. Then when trying to run the Nginx server I am getting this error. /docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform…
theanilpaudel
  • 3,348
  • 8
  • 39
  • 67
7
votes
5 answers

Problem binding to port 80: Could not bind to IPv4 or IPv6 with certbot

I'm trying to update an SSL certificate on digital ocean with the command certbot renew But I get this error: Problem binding to port 80: Could not bind to IPv4 or IPv6. running netstat -plunt shows that port 80 is been used by…
Harry
  • 1,021
  • 4
  • 21
  • 41
7
votes
5 answers

No package certbot available

I'm trying to install certbot on RHEL server. Instructions to enable epel-release # yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm then # subscription-manager repos --enable "rhel-*-optional-rpms" --enable…
vbnr
  • 307
  • 2
  • 5
  • 14
7
votes
0 answers

Certbot DNS challenge with Dnsimple plugin

How can I use Certbot's Dnsimple plugin to acquire and renew automatically a certificate with DNS challenge? I can't find any examples online. https://github.com/certbot/certbot/tree/master/certbot-dns-dnsimple
angelokh
  • 9,426
  • 9
  • 69
  • 139
7
votes
3 answers

undefined symbol: OPENSSL_sk_num

I'm trying to renew Let's Encrypt certificate with Certbot. It stopped working and i don't know why. Here is the error: ImportError: /root/.local/share/letsencrypt/local/lib/python2.7/site-packages/cryptography/ hazmat/bindings/_openssl.so:…
7
votes
1 answer

Using lets encrypt without control over the root directory

I'm running a Django website and using lets encrypt for my SSL. Configuration of the framework is such that I can't allow access on: http://url.com/.xxxx What I can allow free access to is: http://url.com/static/.xxxx My /static/ URL can accept and…
Luke Dupin
  • 2,275
  • 23
  • 30
6
votes
2 answers

SignalR Failing after adding Letsencrypt SSL to nginx

I created a small demo project for SignalR. It all worked when I published my project behind Nginx without SSL. But after I ran Certbot and added SSL to the site all SignalR hubs / WebSockets stopped working. The site can be found…
Kiksen
  • 1,559
  • 1
  • 18
  • 41
6
votes
5 answers

certbort commands return ModuleNotFoundError: No module named '_cffi_backend'

I followed a guide to get my python flask app running and I am at the last step where I change http into https with certbot. But when I run my certbot command sudo certbot --nginx -d domainname -d www.domainname I get ModuleNotFoundError: No module…
Quinten C
  • 660
  • 1
  • 8
  • 18
6
votes
2 answers

Disable let's encrypt certbot daily renew emails

Is it possible to tell certbot not to email me every day when running on cronjob? My cronjob is: 0 0 * * * sudo /usr/bin/certbot renew --post-hook "sudo service nginx reload" And I get emails: Cert not yet due for renewal I only want to get…
John
  • 1,243
  • 4
  • 15
  • 34
6
votes
0 answers

Running certbot-auto without being root

I'm running into permissions issues renewing my certs with certbot-auto, because whenever it runs it displays this message: Requesting to rerun certbot-auto with root privileges... There is no need for it to run as root, because the user running…
Michael
  • 9,060
  • 14
  • 61
  • 123
6
votes
2 answers

systemd: start service after the previous one have finished

I have installed certbot, and certbot makes it's own systemd service file "certbot.service" for auto cert renew, which is started trough a .timer file once a day. After this "certbot.service" is sucessfully executed I like to execute a second one…
chao-samu
  • 153
  • 2
  • 7
6
votes
1 answer

Letsencrypt certbot-nginx plugin. How does it work?

I success with using certbot-nginx plugin. I know that it is opensource and hosted on github. But I do not have enough skill to analyze this code. For example: I have several internal sites which is proxied by nginx. All virtualhost configs has…
vskubriev
  • 826
  • 1
  • 11
  • 21
6
votes
2 answers

Nginx configuration, folder permissions and lets-encrypt

I am trying to use certbot and letsencrypt on my Ubuntu 16.0.4 server, so I can install a mail server. I am running certbot like this: sudo /opt/letsencrypt/certbot-auto certonly --agree-tos --webroot -w /path/to/www/example -d example.com -d…
Homunculus Reticulli
  • 65,167
  • 81
  • 216
  • 341
6
votes
1 answer

Cert not due for renewal, but simulating renewal for dry run

I'm using certbot-auto generate certificate https for my domain name. I use command like this sudo ./certbot-auto it's ok, but when i renew certificate use command sudo ./certbot-auto renew --dry-run it can't renew certificate and show error…
Ma YongChhin
  • 427
  • 3
  • 10
  • 24
5
votes
1 answer

How to generate Let's encrypt certificate with key type RSA/ECDSA using certbot?

Let's Encrypt Certbot default key type is changed to ECDSA with the latest version 2.0.0. How to specify the key type to generate RSA or ECDSA?
Thirumal
  • 8,280
  • 11
  • 53
  • 103