Questions tagged [lets-encrypt]
LET'S ENCRYPT QUESTIONS MUST BE PROGRAMMING RELATED. Let’s Encrypt is a free, automated, and open certificate authority provided by the Internet Security Research Group.
1,993
questions
1
vote
0
answers
11
views
Installing let's encrypt on Amazon Linux2023
I am trying to get SSL certificate with let's encrypt nginx. First, I added epel using the commands $ wget https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm and $ sudo rpm -ihv --...
0
votes
0
answers
18
views
Can't request Let's Encrypt certificate on ispmanager
When I try to issue Let's Encrypt certificate on my ispmanager panel I see this strange error:
Certificate request failed
Return code: 403
Details: Order's status ("valid") is not ...
0
votes
1
answer
23
views
Hostinger VPS Webmin/Virtualmin SSL Issue
I have recently purchased VPS service from hostinger and installed Ubuntu 20.04 on it along with Webmin/Virtualmin. This is via their installation panel (Not custom install).
I am trying to use it as ...
0
votes
0
answers
33
views
Cert-Manager and Kubernetes stuck on ACME / http01 challenge
I'm a problem with Cert-Manager for days and I already tried everything to try to solve it but nothing seems to work. I have a Domain (example.com) and I want to create a certificate for multiple ...
1
vote
0
answers
18
views
Creating Let's Encrypt certificate without root access and different port
I try to create a certificate without root access because my web apps will be creating/renewing certs automatically. I found acme.sh, i was able to create a certficate with non-root user over 80.port. ...
0
votes
0
answers
69
views
Docker Certbot failed to authenticate some domains (authenticator: webroot)
I have this domain: dev-core.app.example.com that I am trying to install an ssl certificate for using this tutorial: https://pentacent.medium.com/nginx-and-lets-encrypt-with-docker-in-less-than-5-...
0
votes
0
answers
27
views
Auto Renew Letsencrypt on Cloudpanel using Cron Job
I installed cloudpanel on ubuntu, but I can't find the automatic renewal option for SSL (letsencrypt), the only option is through cron jobs
I searched but didn't find anything about how to do this.
...
0
votes
0
answers
16
views
Acme dns-01 challege with cloudflare api
I have manipulated the acme-tiny script to solve dns-01 challenges
As soon as i request a cert it hangs at the status: "pending" and i can't get it to work may somebody have an idea why ...
-1
votes
1
answer
19
views
How to handle SSL/Let's encrypt with docker
I am new to docker. I built a site with it using express/handlebars. I run the container and the system is up using unsecure http. How do I use SSL encryption using Let's Encrypt. What are my ...
0
votes
1
answer
70
views
Unable to connect Websocket with wss using SSL Certificate
I have added SSL certificate from letsencrypt and did configuration using Nginx but unable to connect to the websocket using WSS. It works fine if change the configuration to ws.
Here is the ...
-1
votes
0
answers
15
views
my custom domain goes in a redirection loop, after connecting it with packetriot
I set up a local flask application with port 80, i run the flask app, then i start packetriot which is connected to my custom domain. however, when i go look into my custom domain, it goes in a ...
0
votes
1
answer
168
views
Kubernetes nginx ingress with wild card domain does not get SSL certificate
I have a Kubernetes based setup using microk8s. I have an ingress defined with wildcard domain. I also have a cert manager to get certificate from LetsEncrypt.
I am able to see LetsEncrypt has issued ...
0
votes
0
answers
57
views
Issue creating CSP type certificate for use with Microsoft Teams bot
I've been trying to get the a realtime media calling bot up and running in Teams. The example I am using is the Microsoft provided HueBot.
The setup requires you to provide an SSL certificate so I ...
0
votes
0
answers
17
views
How to use certbot non-interactively to generate acme challenge and validate later in separate process
I'm trying to create a process where people are setting up hostnames CNAMEd to our endpoint (we don't control the hostnames), and on our side we're generating LETs certs automatically.
Trying to use ...
0
votes
0
answers
28
views
Can't get spring boot working with letsencrypt keystore
This is how I created my keystore:
sudo openssl pkcs12 -export -in /etc/letsencrypt/live/mypage/fullchain.pem -inkey /etc/letsencrypt/live/mypage/privkey.pem -out /opt/mypage/mypage.p12 -name mypage -...
0
votes
0
answers
32
views
Traefik serving only 404 for dashboard and whoami service (docker, letsencrypt, cloudflare)
The simple example for the whomai and dashboard service from Traefiks documentation fails for me and only serves a 404.
Notice: Assume that my DNS foo.bar resolves to 127.0.0.1
error
All 3 routes ...
0
votes
0
answers
28
views
Handle both http and https with a single Traefik config
I want to run Dokku container behind Trefik, I also expose other services with same Traefik instance directly without Dokku. Dokku apps can have either http or https on their own. The idea is:
if ...
1
vote
1
answer
37
views
Lets Encrypt SSL giving ERR_CERT_DATE_INVALID for request towards node server
I had installed a LetsEncrypt SSL certificate on AWS instance, webserver is nginx, the application was working fine with it. However, it seems that there was a automatic update of certificate, and ...
0
votes
0
answers
48
views
Let's Encrypt in Dokku in Docker - docker.env: no such file or directory
When I try to enable letsencrypt it can't find docker.env file although it exists, I checked manually. Here is the error log.
ubuntu@arm1:~$ dokku letsencrypt:enable nextjs-app
=====> Enabling ...
0
votes
0
answers
30
views
Creating Let's ecrypt SSL for my Kuberenetes service using Istio
Hope you are doing well. I have a domain onlinetransport.africa I want SSL for the domain so I decided to use the Let’s encrypt. I wrote some script which is:
apiVersion: cert-manager.io/v1
kind: ...
1
vote
0
answers
69
views
Error 2026:tls/ssl error:Sslv3 alert handshake failure
I'm using centos 7 and mariadb 10.6. I'm trying to configure mariadb ssl between client and server using let's encrypt certificate. Using the below command i have generated certificate
Certbot ...
0
votes
0
answers
85
views
certbot/dns-cloudflare for authentik
I happen to run a domain on Cloudflare DNS that I want to use for an authentik deployment. From the corresponding documentation it seems to be rather straight forward to use certbot to get ACME/...
0
votes
0
answers
23
views
How can I dynamically create SSL certificates for domains using yaac - Yet another ACME client (LetsEncrypt)?
I'm building a php script that allows creating SSL certificate for the given domain, to automate this process I am using yaac - Yet another ACME client library. Which will create certificate and key, ...
1
vote
2
answers
88
views
Cluster-issuer secret wont replicate with multiple ingress
I was under the impression that the main point of cluster-issuer is that its namespaced and doesn't have to be recreated across different resources, in general there could be one main cluster-issuer ...
0
votes
1
answer
102
views
Traefik and certbot cannot generate certificate on OVH
On Docker I installed Portainer and then create new Stack with Traefik (certbot).
I logged into my OVH and generate API keys for certbot.
My docker-compose file looks like bellow.
I use this manual ...
-1
votes
1
answer
115
views
Unable to issue letsencrypt ssl certificate to website or mail server, shows success message in cyberpanel but https not opening and mails not going [closed]
I am unable to issue letsencrypt ssl certificate to website (domain.com) and mail server (mail.domain.com), shows success message in cyberpanel ("ssl manager" in left menu) but https is ...
0
votes
1
answer
211
views
K3s dial tcp lookup server misbehaving during letsencrypt staging
After succesfully hosting a first service on a single node cluster I am trying to add a second service with both its own dnsName.
The first service uses LetsEncrypt succesfully and now I am trying out ...
0
votes
0
answers
77
views
certbot challenge fails with jellyfin as it returns 404
jellyfin container runs behind nginx reverse proxy.
When I try to get an ssl certificate, jellyfin unfortunately returns a 404 error. Anyone know what I need to change in the configuration to make it ...
0
votes
0
answers
22
views
Using letsencrypt with node.js HTTPS server
I have a node.js HTTPs server that I want to use with a letsencrypt cert. Is there any easy way to automate the creation and renewal of certificates for node.js? Either within node.js with some kind ...
0
votes
0
answers
77
views
ALB Ingress Controller, Terminating TLS via AWS ACM. How to go End-To-End?
We currently use the AWS ALB Ingress Controller to front out ingress, and terminate SSL using a certificate from AWS ACM. This work fine.
Is there a way, to also encrypt the traffic from the Load ...
0
votes
0
answers
9
views
protect from certificate spoofing by letsencrypt
I use letsencrypt for my platform, securing multiple websites.
I can prove i am the domain owner, then generate certificate, by controlling the origin and response to the challenge, but if my website ...
0
votes
1
answer
75
views
Letsencrypt apache, disable https for specific directory
Im using ubuntu, apache and letsencrypt. I want to disable https for one directory.
This is my .htaccess right now:
RewriteEngine On
RewriteBase /
#HTTP TO HTTPS
RewriteCond %{HTTP_HOST} ^www\.(.*)$ [...
1
vote
0
answers
36
views
How to (programatically) remove a certificate from a PEM file?
I have an old version of an application that is using it's own cert store, however the expired DST ROOT X3 is still in the cert store causing issues when it's encountering letsencrypt certificates.
I ...
0
votes
1
answer
290
views
Traefik requests sub-domain specific certificate instead of wildcard?
I have the following docker-compose.yml file
version: "3.8"
secrets:
loopia_api_user:
file: "./traefik/secrets/loopia_api_user.secret"
loopia_api_password:
file: "...
0
votes
1
answer
169
views
From Ingress to IngressRoute with CertManager, HTTP01 Challenge and Let's Encrypt ClusterIssuer
I have a Kubernetes (v1.25.2) cluster running with cert-manager 1.11.0 and Traefik 2.9.6.
For some services I want Let's Encrypt to auto sign certificates. For some reason, it feels nicer, to use ...
0
votes
0
answers
75
views
cannot connect to turn server (coturn) with Let's Encrypt SSL/TLS
I configured the server as below
Coturn-4.5.1.1 'dan Eider'
tls-listening-port=5349
fingerprint
use-auth-secret
server-name=turn.***.com
realm=turn.****.com
verbose
cert=/etc/coturn/certs/turn.***.com....
0
votes
1
answer
60
views
MariaDB ubuntu 20.04 letsencrypt set up ssl
I'm having a bit of a problem with setting up SSL for mariaDB on my ubuntu 20.04.
I installed certbot generated a certificate and added the following lines to /etc/mysql/mariadb.conf.d/50-server.conf:
...
0
votes
0
answers
12
views
Installed Lets Encrypt Certbot and now neither frontend nor backend is accessible - Magento 2.4.5
I followed this documentation and installed Certbot and now Magento 2 is not accessible.
https://certbot.eff.org/instructions?ws=apache&os=ubuntufocal
Getting the following error in Chrome Console
...
0
votes
0
answers
49
views
Tomcat LetsEncrypt win-acme Windows java 18
I have done a lot of reading and this is where I'm at
Apache Tomcat 9.0.68
win-acme 2.1.23
windows server 2022
I have a win-acme certificate
Windows -> Console Root -> Certificates -> ...
-1
votes
1
answer
89
views
DNS management to k8s cluster and LetsEncrypt http-01 challenge fail with 404
busy with learning about setting up a dns management (directAdmin) to my virtual private server(DigitalOcean) with a k8s cluster with example.com host with a http-01 challenge letsencrypt and I stuck ...
0
votes
0
answers
63
views
Create uuidv4 subdomains (or another unique label) for automatic customer scaling in an ERP
We need to create uuidv4 subdomains (or another unique label) for automatic customer scaling in an ERP where dedicated servers (vps/api) are created for each company.
Every time a new client registers ...
0
votes
0
answers
272
views
Traefik 2 letsencrypt. Add new domain in a smart way
What could be the best way to issue missing letsencrypt certificates automatically?
I have a Traefik 2.9 proxy that works for multiple docker containers for multiple domain names.
Acme http challenge ...
0
votes
0
answers
116
views
Nginx cannot find fullchain.pem from Letsencrypt certificate
I generate certificates using certbot certonly for my app deployed on Ubuntu 22.04 (AWS EC2 instance). But when it comes to deploy nginx using Docker, I have an error :
2023/01/12 14:09:58 [emerg] 6#6:...
2
votes
0
answers
229
views
how to setup multiple apps on different subdomains using docker compose and 'SteveLTN/https-portal'?
I am using DigitalOcean's droplet to host the apps.
I have different apps that I want to run on different subdomains (sub1.example.com,sub2.example.com, etc).
So far I managed to run just one of them ...
0
votes
0
answers
65
views
How to generate a trusted ssl certificate for the backend of an application developed with spring-boot
I have a web application developed with spring boot and Angular. The frontend is running on ngnix web server , the backend is running on embedded tomcat for spring boot , both of them are hosted on a ...
0
votes
0
answers
94
views
certbot unable to authenticate some domain in ec2 mern stack
I am developing a MERN stack application
I deployed the mern stack to ec2 instance
It is working fine with http but I want to add ssl using certbot
I am getting the error below
Certbot failed to ...
0
votes
0
answers
32
views
getting unauthorized error creating ssl on nginx using certbot on AWS
I am trying to create a ssl for my nginx using certbot but I am getting this error.
I am using aws EC2 instance.
I created A record and pointed it to the ec2 instance
nginx
server {
listen 80;
...
0
votes
0
answers
29
views
Docker containers not accessible from internet (using jwilder's nginx+letsencrypt solution)
I have been using the jwilder's nginx + letsencrypt solution to access my containers online.
Last week my server crashed and after a restart, I couldn't access any of my containers from the internet. ...
0
votes
1
answer
54
views
Configuring SSL for an AWS autoscaling group
My app is divided into a web app and an API server. Both are hosted on separate AWS instances. The API server is enabled for autoscaling.
This question is with regard to my API server. What's the way ...
0
votes
1
answer
353
views
How to use wildcard certificates in Kubernetes with nginx ingress and cert-manager?
I am trying to deploy a React website together with an Express API on GKE. There should be multiple subdomains for both the website and the API, i.e.
domain.com, a.domain.com, b.domain.com, ... -> ...