Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [certbot]

297 questions
28
votes
3 answers

How to totally remove a certbot-created SSL certificate?

I use Ubuntu 16.04 with Nginx and I've installed Nginx Certbot on my operating system (Ubuntu 16.04) with: apt-get update -y add-apt-repository ppa:certbot/certbot -y apt-get update -y apt-get upgrade python-certbot-nginx -y I setted Nginx…
user454858
  • 308
  • 1
  • 3
  • 5
25
votes
3 answers

Certbot letsencrypt on different port than 443

I want to set up certbot for a webserver on a different port than 443. I got the following error when running certbot --apache -d .. Failed authorization procedure. sub.domain.ext (tls-sni-01): urn:acme:error:connection :: The…
CaptainJack
  • 353
  • 1
  • 3
  • 5
14
votes
1 answer

Renew domains using certbot and using DNS challenge

I created several SSL certificates for several domains using the standalone method. I am only interested in the certificates, without server integration. They are now for renewal. So, I ran: certbot -d example.com --manual --preferred-challenges dns…
Merc
  • 719
  • 1
  • 6
  • 16
12
votes
5 answers

How to install Certbot on Amazon Linux EC2

I have an Amazon EC2 box. I have installed Apache, MariaDb and PHP on it. Among other things, I want to host a couple of WordPress websites on the EC2. How do I go about installing Certbot on Amazon Linux so that I may issue SSL certificates for the…
J86
  • 301
  • 3
  • 7
  • 15
10
votes
10 answers

certbot for letsencrypt missing pyopenssl module

I need help setting up the CertBot for LetsEncrypt I am running on CentOS 7 with Python 2.7 When I run certbot I get the following error: [root@li86-193 frappe-bench]#certbot certonly --manual Traceback (most recent call last): File…
cs378
  • 123
  • 1
  • 1
  • 7
7
votes
1 answer

nginx https www redirect to non-www using let's encrypt certbot

Hi this must be a basic question but I haven't seen an answer with cerbot considerations (if there are any considerations). How do I get https www to redirect to non-www instead of timing out? The https www version of my site times out instead of…
duncangarde
  • 73
  • 1
  • 4
7
votes
5 answers

Failing to install certbot on debian jessie

I've followed the instructions at https://certbot.eff.org/all-instructions/#debian-8-jessie-nginx but cannot install certbot: sudo apt-get -t jessie-backports install certbot Reading package lists... Done E: The value 'jessie-backports' is invalid…
Sue Spence
  • 191
  • 1
  • 7
7
votes
2 answers

Certbot fails with AttributeError: 'module' object has no attribute 'Locale'

I setup a new server a couple of months ago, running Ubuntu 18.04 LTS. I successfully installed certbot and created my certificates using the cloudflare DNS plugin. It's now getting to be time for renewal, but when I run certbot renew (or various…
Ben Holness
  • 914
  • 2
  • 10
  • 28
6
votes
1 answer

Why does certbot suddenly fall back to http-01 challenge instead of tls-sni-01 (https)?

I have a well-tested bash script that was running fine until a few weeks ago. It seems that certbot challenge defaults now to http instead of https. I can't figure out the reason. echo 'rsa-key-size = 2048 renew-hook = /usr/sbin/ipsec reload &&…
Houman
  • 1,325
  • 3
  • 18
  • 30
6
votes
1 answer

Explain Certbot's HTTPS redirect configuration

Can someone explain why Certbot is using the following redirect configuration server { if ($host = example.com) { return 301 https://$host$request_uri; } # managed by Certbot server_name example.com; listen 80; return…
Daniel
  • 6,780
  • 5
  • 31
  • 60
5
votes
2 answers

How to query DNS for special **NAMED** TXT records

I am using certbot to generate a ssl certificate for a third party web app. Because I cannot get into the source code or folder structure, I am using DNS validation. To further complicate things, my DNS provider does not make it clear when the…
wruckie
  • 546
  • 5
  • 18
5
votes
1 answer

What exactly does Let's Encrypt certbot's `enhance` command?

Let's Encrypt certbot have subcommand enhance that has a description "Add security enhancements to your existing configuration". The only additional information that I can find in certbot's CLI help file is: enhance: Helps to harden the TLS…
Maris B.
  • 214
  • 2
  • 10
5
votes
2 answers

Let's Encrypt DNS challenge with multiple public DNS providers

We use two DNS providers for redundancy. Since the DynDNS DDOS attack of 2016, I expect we are not alone in this practice. I am attempting to use the Let's Encrypt certbot with DNS challenge. Having two DNS providers seems to pose a problem. Do both…
Larry Silverman
  • 547
  • 6
  • 12
5
votes
4 answers

How to migrate letsencrypt renewal from apache2 to nginx

I inherited a very new magento configuration from a previous employee (who left for another job) where I currently work. The original Magento was set up with v2.1.8 but I have had to update/upgrade the installation a number of times as the…
Scott
  • 153
  • 1
  • 6
5
votes
2 answers

looking for a way to get certbot running on Amazon Linux 2

Amazon has a new Linux out called "Amazon Linux 2" When I try and get certbot going.... wget https://dl.eff.org/certbot-auto chmod a+x certbot-auto ./certbot-auto gives this error Sorry, I don't know how to bootstrap Certbot on your operating…
iewebguy
  • 213
  • 1
  • 3
  • 7
1
2 3
…
19 20