Questions tagged [lets-encrypt]

LET'S ENCRYPT QUESTIONS MUST BE PROGRAMMING RELATED. Let’s Encrypt is a free, automated, and open certificate authority provided by the Internet Security Research Group.

LET'S ENCRYPT QUESTIONS MUST BE PROGRAMMING RELATED. Let's Encrypt is a certificate authority that provides free X.509 certificates for Transport Layer Security encryption (TLS). It uses an automated process designed to eliminate the current complex process of manual creation, validation, signing, installation and renewal of certificates.

2023 questions
157
votes
6 answers

Letsencrypt add domain to existing certificate

I am just simply trying to add the domain test.example.com to the certificate that already exists for example.com. How do I add a domain to my existing certificate and replace the old certificate? I have tried these few commands ./letsencrypt-auto…
Jeff Davenport
  • 2,624
  • 2
  • 13
  • 19
137
votes
4 answers

Does Java support Let's Encrypt certificates?

I am developing a Java application that queries a REST API on a remote server over HTTP. For security reasons this communication should be switched to HTTPS. Now that Let's Encrypt started their public beta, I'd like to know if Java currently works…
Hexaholic
  • 3,299
  • 7
  • 30
  • 39
114
votes
4 answers

How to renew only one domain with certbot?

I have multiple domains with multiple certificates: $ ll /etc/letsencrypt/live/ > domain1.com > domain2.com > domain3.com > ... I need to renew only domain1.com, but the command certbot renew renews certificates for all domains. How can I renew…
e-info128
  • 3,727
  • 10
  • 40
  • 57
103
votes
12 answers

Git for Windows: SSL certificate problem: certificate has expired

I am aware that Let's Encrypt made changes that may impact older clients because a root certificate would expire. See DST Root CA X3 Expiration (September 2021). However, I didn't think this could impact me because my development machine is…
Jürgen Steinblock
  • 30,746
  • 24
  • 119
  • 189
77
votes
2 answers

How to install Certbot (Let's Encrypt) without interaction?

I am writing a bash script which bootstraps the whole project infrastructure in the freshly installed server and i want to configure ssl installation with letcecrypt certbot. After I execute line: certbot --nginx -d $( get_server_name ) -d www.$(…
Laimonas Sutkus
  • 3,247
  • 2
  • 26
  • 47
76
votes
12 answers

Letsencrypt renewal fails: Could not bind to IPv4 or IPv6.. Skipping

The full error message I'm getting is: Attempting to renew cert from /etc/letsencrypt/renewal/somedomain.com.conf produced an unexpected error: Problem binding to port 443: Could not bind to IPv4 or IPv6.. Skipping. This is running on an AWS ubuntu…
Anthony Ainsworth
  • 917
  • 1
  • 7
  • 9
59
votes
1 answer

Generate CRT & KEY ssl files from Let's Encrypt from scratch

I'd like to generate a CRT/KEY couple SSL files with Let's Encrypt (with manual challenge). I'm trying something like this : certbot certonly --manual -d mydomain.com But I only get these files in my /etc/letsencrypt/live/mydomain.com folder…
Sylvain
  • 2,742
  • 5
  • 21
  • 34
57
votes
8 answers

How can I set up a letsencrypt SSL certificate and use it in a Spring Boot application?

I'm new to securing a server so I don't really know much about this but I need to get my Spring Boot Application that is running on a Digital Ocean Droplet to use HTTPS. My idea is to register a letsencrypt certificate and then tell Spring to use…
BrandenS
  • 591
  • 1
  • 5
  • 7
56
votes
4 answers

https on S3 WITHOUT cloudfront possible?

We currently want to start hosting all our assets through AWS S3 and we also want to server everything over https. I understand I can use the Amazon Certificate Manager (ACM) with Cloudfront to server assets over https. The problem is that we are in…
kramer65
  • 50,427
  • 120
  • 308
  • 488
55
votes
5 answers

Issue using certbot with nginx

I'm actually working on a webapp, I use Reactjs for the frontend and Golang for the backend. Those 2 programs are hosted separately on 2 VMs on Google-Compute-Engine. I want to serve my app through https so I choose to use Nginx for serving the…
G.D
  • 802
  • 2
  • 7
  • 15
47
votes
6 answers

How to stop renewing a letsencrypt/certbot certificate?

There are lots of tutorials online of how to create and renew a certificate with letsencrypt, but I want to remove and stop renewing a certificate that I created (it was only created for testing purposes). How do I stop renewing one certificate…
Jackson
  • 9,188
  • 6
  • 52
  • 77
44
votes
9 answers

How do I schedule the Let's Encrypt certbot to automatically renew my certificate in cron?

I've seen conflicting recommendations. From the eff.org docs: if you're setting up a cron or systemd job, we recommend running it twice per day... Please select a random minute within the hour for your renewal tasks. I've also seen recommendations…
Chapman Atwell
  • 1,007
  • 1
  • 9
  • 13
43
votes
5 answers

Let's encrypt SSL couldn't start by "Error: EACCES: permission denied, open '/etc/letsencrypt/live/domain.net/privkey.pem'"

I tried to use SSL by Node.js but it doesn't work because permission denied. try { var TLSoptions = { key: fs.readFileSync("/etc/letsencrypt/live/domain.work/privkey.pem"), cert:…
kraftwerk
  • 443
  • 1
  • 4
  • 6
43
votes
3 answers

How to set up Let's Encrypt for a Go server application

I have my own domain with web services written in Go. I am using the inbuilt Go web server, without Nginx or Apache in front. I would like to start serving over HTTPS and I realized Let's Encrypt is just about to become THE WAY for doing that. Can…
Daniele B
  • 19,801
  • 29
  • 115
  • 173
41
votes
1 answer

Letsencrypt certificate for www and non-www domain

I have generated SSL certificate like so: sudo git clone https://github.com/letsencrypt/letsencrypt /opt/letsencrypt ./letsencrypt-auto certonly --standalone Then I was asked for email ... and a domain name. I entered example.com I figured out that…
user2814599
  • 1,060
  • 1
  • 13
  • 27
1
2 3
99 100