Questions tagged [lets-encrypt]

LET'S ENCRYPT QUESTIONS MUST BE PROGRAMMING RELATED. Let’s Encrypt is a free, automated, and open certificate authority provided by the Internet Security Research Group.

LET'S ENCRYPT QUESTIONS MUST BE PROGRAMMING RELATED. Let's Encrypt is a certificate authority that provides free X.509 certificates for Transport Layer Security encryption (TLS). It uses an automated process designed to eliminate the current complex process of manual creation, validation, signing, installation and renewal of certificates.

2023 questions
8
votes
0 answers

Using Let's Encrypt certificates on DigitalOcean App Platform for a HTTPS node app

I'm used to deploying HTTPS Node apps on DigitalOcean servers using Docker, the Express framework and the https package like this: const https = require('https'); const app = express(); // ... const ssl = { key:…
samdouble
  • 452
  • 4
  • 12
8
votes
2 answers

cert-manager letsencrypt order pending

My letsencrypt order keeps pending. I am using cert-manager on my single node kubernetes plane. Also I am using letsencrypt. kind: Certificate metadata: name: example-zone namespace: default spec: secretName: example-zone-tls renewBefore:…
Pascal K.
  • 138
  • 1
  • 3
  • 12
8
votes
2 answers

SSL handshake fails in Xamarin

I'm trying to access my RESTful API to retrieve data from a MySQL database. Everything is set up and works perfectly on my C# WPF project. But when using the exact same code in Xamarin Forms (built for Android) I cannot get a successful SSL…
MadWalnut
  • 111
  • 1
  • 7
8
votes
1 answer

Kubernetes certbot standalone not working

I'm trying to generate an SSL certificate with certbot/certbot docker container in kubernetes. I am using Job controller for this purpose which looks as the most suitable option. When I run the standalone option, I get the following error: Failed…
Ishan Khare
  • 1,745
  • 4
  • 28
  • 59
8
votes
2 answers

From self managed Let's Encrypt to AWS Certificate Manager

I have been managing Let's Encrypt's SSL certificates for a domain. Now I am moving to Amazon API gateway. I will be using the AWS Certificate Manager to generate HTTPS certificates for the root domain and a bunch of subdomains. If I make the…
treecoder
  • 43,129
  • 22
  • 67
  • 91
8
votes
1 answer

Can't create CAA record for subdomain on AWS Route 53

I have a public hosted zone at AWS Route 53. Just for the simplicity let's call the domain "foo.com". Which I bought a certificate for from Comodo. I have a CNAME type record for the subdomain "bar.foo.com". In order to renew the Let’s Encrypt…
stevo
  • 2,164
  • 4
  • 23
  • 33
8
votes
3 answers

Nginx with Let's encrypt "Welcome to Nginx" instead of rails app

I have recently deployed my Ruby on Rails application to a plain Ubuntu 16.04 DigitalOcean droplet with Nginx, passenger & Let's encrypt. The rails app worked fine with just passenger and Nginx but after I installed Let's Encrypt, it points to the…
Jake
  • 1,086
  • 12
  • 38
8
votes
3 answers

.well-known/acme-challenge nginx 404 error

I'm trying to verify a file upload for SSL certificate. The file needs to be .well-known/acme-challenge/file I have successfully placed the file as above, but while accessing the same file from the web…
Matey Johnson
  • 223
  • 1
  • 2
  • 12
8
votes
2 answers

What should letsencrypt certbot-auto's "webroot-path" be for a non-PHP / non-static-files website?

In the case you have a website using Apache only (maybe with PHP) that is in: /home/www/mywebsite/ /home/www/mywebsite/index.php /home/www/mywebsite/style.css then, it's easy to set certbot's --webroot-path: ./certbot-auto certonly --webroot…
Basj
  • 41,386
  • 99
  • 383
  • 673
8
votes
3 answers

certbot renew / certonly dash error : 'ascii' codec can't decode byte

I'm getting a weird error on lets-encrypt certbot that seems linked to the presence of a dash in my second domain name (on the real one position 8 correspond to the position of said dash). The error occurs regardless of wether I try to renew or…
Mathieu K.
  • 903
  • 8
  • 27
8
votes
3 answers

node.js FS cannot read certificate from letsencrpyt

const httpsOptions = { key: FS.readFileSync("/etc/letsencrypt/live/site/privkey.pem"), cert: FS.readFileSync("/etc/letsencrypt/live/site/fullchain.pem") }; EACCES: permission denied Trying to set up a HTTPS server with options. While…
kabuto178
  • 3,129
  • 3
  • 40
  • 61
8
votes
3 answers

AWS Policy: Allow update specific record in route53 hosted zone

Assume the documentation, I should use policy, like this: { "Version": "2017-11-27", "Statement":[ { "Effect":"Allow", "Action": [ "route53:ChangeResourceRecordSets" ], "Resource": [ …
vskubriev
  • 826
  • 1
  • 11
  • 21
8
votes
1 answer

Create a Docker Apache image with LetsEncrypt

I have a trouble with Docker and LetsEncrypt. As far as I can understand, Certbot (the bot to install LetsEncrypt on Apache or any HTTP Server) checks if the user owns the domain associated to the certificate. So in the Dockerfile, I add the…
hadf
  • 279
  • 2
  • 5
  • 15
8
votes
2 answers

How to uninstall/remove Certbot Let's Encrypt from Debian 8

I just followed the instuctions found on : https://certbot.eff.org/#debianjessie-apache to install let's encrypt certificate on my linux vps. but unfortunately, installation did not went as I expected because : A. I already had an instance of…
Rami Mohamed
  • 2,505
  • 3
  • 25
  • 33
8
votes
8 answers

Let's Encrypt unauthorized 403 forbidden

On the server, Nginx is installed. Let's Encrypt is working well with www.domain.com but is not working with static.domain.com With PuTTY, when I enter : sudo letsencrypt certonly -a webroot --webroot-path=/var/www/site/domain -d static.domain.com…