Questions tagged [certbot]

Certbot is the official client used to issue Let's Encrypt SSL certificates. This tag is for the certbot client itself. For questions regarding SSL in general, use the [ssl] tag.

Use the tag for all Certbot related questions. Questions should be about the certbot CLI itself, and not questions related to installing certificates generated by certbot. Certbot documentation can be found here.

795 questions
5
votes
4 answers

Unable to `openssl verify' letsencrypt certificate

I gererate a certificate with Letsencrypt using the Certbot container: $ mkdir /home/$USER/letsencrypt $ docker run -it --rm -p 80:80 -p 443:443 -v /home/$USER/letsencrypt:/etc/letsencrypt certbot/certbot certonly --standalone --email…
David Carboni
  • 1,556
  • 23
  • 24
5
votes
2 answers

Certbot :ImportError: No module named 'requests.packages.urllib3

I use nginx on centos 7.3. I installed certbot following https://certbot.eff.org/#centosrhel7-nginx There is an error when running certbot --nginx: [root@demo src]# certbot --nginx Traceback (most recent call last): File "/usr/bin/certbot",…
zwl1619
  • 4,002
  • 14
  • 54
  • 110
5
votes
2 answers

Let's encrypt csr with ECC (P-521)

I'm trying to generate a certificate for my web server with Let's Encrypt. I want to manually generate key and csr with openssl, and then use letsencrypt / certbot to get the certificate. I specifically want the certificate to use sha256withecdsa.…
user7958558
5
votes
0 answers

Nginx proxy_pass make certbot doesn't work

My nginx config is server { listen [::]:80; root /usr/share/nginx/www/; index index.html index.htm; server_name op.liu666jiu.me; location / { proxy_set_header HOST $host; proxy_set_header…
5
votes
1 answer

Howto change live directory with certbot?

I using CentOS7 and certbot for make ssl certificate, but the default directory of certificates is "/etc/letsencript/live/first-host" , how to change the forst-host directory with "/etc/letsencript/default" by example? I using the certbot: certbot…
e-info128
  • 3,727
  • 10
  • 40
  • 57
4
votes
1 answer

Difference between certbot's dry run and staging options

Whenever I'm testing with certbot, I'm afraid of exceeding rate limits and thus getting my account throttled. So I use both the --dry-run and --staging options simultaneously. This is shown in many other SO questions and tutorials - and since it…
lonix
  • 14,255
  • 23
  • 85
  • 176
4
votes
0 answers

LetsEncrypt Challenge failed for domain

Running this with my domain: sudo certbot certonly --standalone --preferred-challenges http --server https://acme-staging-v02.api.letsencrypt.org/directory --register-unsafely-without-email -d example.com Saving debug log to…
Chris G.
  • 23,930
  • 48
  • 177
  • 302
4
votes
1 answer

website down after installing ssl certificate through certbot in nginx

Below is my nginx configuration. I modified the 'default' file (which is placed at 'sites-available). I am able to access the website when it's through 'http'. But when I try through 'https', there is a connection time out and the page cannot be…
Edwin Varghese
  • 473
  • 1
  • 5
  • 15
4
votes
0 answers

Automatically delete all unused certbot certificates

I'm aware certbot certificates gives me a complete list of all available certificates. I'm also aware certbot delete does the same, and then gives me the ability to remove one. However, considering certbot integrates itself with nginx and apache, is…
Saturnix
  • 10,130
  • 17
  • 64
  • 120
4
votes
1 answer

DNS problem: NXDOMAIN looking up A for www.exampl.com - check that a DNS record exists for this domain

I'm going to install SSL for nginx via certbot But I face this error: "DNS problem: NXDOMAIN looking up A for www.example.com - check that a DNS record exists for this domain" However, I have two A records in Cloudflare: example.com ip www …
mohamad
  • 101
  • 1
  • 1
  • 8
4
votes
2 answers

cannot install certbot on amazon linux2 nginx

I am following this guide to install certbot and create ssl cert. But when I run wget https://dl.eff.org/certbot-auto, error shows: --2021-07-09 02:16:27-- https://dl.eff.org/certbot-auto Resolving dl.eff.org (dl.eff.org)... xxx.xxx.xx.xxx,…
CCCC
  • 5,665
  • 4
  • 41
  • 88
4
votes
2 answers

How to setup Let's Encrypt's certificate in AWS Elastic Load Balancer

I have a apache server running on amazon linux 2. I have installed SSL/TLS using Lets Encrypt and certbot. Now, my website is properly running on https. Now, I want the CDN service of cloudfront. When I tried to create a load balancer it requires a…
Rejaul
  • 831
  • 1
  • 12
  • 35
4
votes
1 answer

Why run certbot in a docker container?

I have a site working which has angular and node apps running in docker containers. These are brought up in a docker-compose file which also mounts volumes linking to the letsencrypt certificates, and it all seems to work fine. I created the…
Kissenger
  • 345
  • 4
  • 15
4
votes
2 answers

Certbot authenticator error with webroot setting

I am trying to obtain an SSL certificate with certbot and the --webroot setting. My current command is: sudo certbot certonly --webroot -w -d -d <*.URL> Every time I run the command I get this error: Client with the currently selected…
Jonaswinz
  • 342
  • 4
  • 15
4
votes
1 answer

The JWS was signed by a public key the server does not support when trying to get certificate

I am trying to get a certificate for my IIS server using Certbot. But I keep on getting this error: [31mAn unexpected error occurred:[0m [31mThe JWS was signed by a public key the server does not support :: sa.StorageAuthority.KeyBlocked timed out…
Munchkin
  • 857
  • 5
  • 24
  • 51