Super User Stack Exchange
Super User Stack Exchange

Questions tagged [certbot]

52 questions
15
votes
1 answer

How to add a domain to existing certificate generated by Let’s Encrypt/Certbot?

This question is a continuation of essentially the same question that was closed for being "off-topic" on Stack Overflow. The OP's question: I am just simply trying to add the domain test.example.com to the certificate that already exists for…
Mike Godin
  • 655
  • 3
  • 8
  • 16
8
votes
2 answers

certbot: error: unrecognized arguments: --dns-digitalocean-credentials

Trying to execute this command sudo certbot certonly --dns-digitalocean --dns-digitalocean-credentials ~/.secrets/digitalocean.ini -d "*.example.com" --preferred-challenges dns --server https://acme-v02.api.letsencrypt.org/directory i get this…
Anatolii Kovalchuk
  • 81
  • 1
  • 2
7
votes
2 answers

What is the purpose of chain.pem files?

A general question about chaim.pem files; I used a csr obtained from my host, and used the Certbot from LetsEncrypt to generate a https cert; I used the following command $ certbot certonly --manual --csr file-with-my-csr.txt The certbot produced…
joedotnot
  • 431
  • 2
  • 6
  • 17
5
votes
1 answer

How to mount Certificates from CertBot to use inside Docker Container

The official certbot ( https://certbot.eff.org ) tool to issue and renew certificates from Let's Encrypt saves the currently valid certificate to ${prefix}/archive/${domain}/certN.pem, where N is an arbitrary number. The paths that should be used to…
NoMad
  • 742
  • 2
  • 10
  • 19
5
votes
2 answers

certbot-auto ImportError: No module named _ssl

Running certbot-auto gives this output: Error: couldn't get currently installed version for ... File "/opt/eff.org/certbot/venv/local/lib/python2.7/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 140, in…
Cam
  • 271
  • 1
  • 6
3
votes
2 answers

How do I renew ALL certificates with certbot?

I don't want to only renew the certificates which are going to expire soon. (Whatever soon means). I want to renew all of them to make sure they will be on the same timing in the future. I cannot find a way to do this with certbot. Any suggestions?
Corporal Touchy
  • 407
  • 1
  • 4
  • 11
3
votes
1 answer

certbot-auto fails to install automatic renewal?

I am using kernel 3.10 on CentOS 7. I have successfully installed CertBot 1.10.1 using alternative installation instructions as certbot-auto. Running certbot-auto successfully generated certificates for my nginx (1.7.8) installation. Simulating…
Alex
  • 182
  • 8
2
votes
2 answers

How to remove Certbot completely ubuntu 20.04

I ran this command sudo dpkg -l *certbot* and I got this certbot and the version number listed in the terminal: Next I ran this 2 commands sudo apt-get remove certbot and sudo apt autoremove and I though the certbot would be removed. But when I ran…
Nat
  • 121
  • 1
  • 2
1
vote
1 answer

What comes first - Certbot or nginx?

I am trying to set up nginx to act as a reverse proxy on a small personal server; however, I am encountering some circular logic when I ask certbot to generate SSL certificates. From what I can tell, certbot is supposed to modify the nginx.conf file…
henley
  • 21
  • 5
1
vote
1 answer

Connection refused when generating a Let's Encrypt certificate for a subdomain

I'm trying to add a subdomain to my Let's Encrypt certificate but it's giving Connection refused. The command I ran was sudo certbot --expand -d sub.domain.com Certbot failed to authenticate some domains (authenticator: apache). The Certificate…
kryz
  • 33
  • 4
1
vote
0 answers

PHP webpage downloads instead of opens in browser (nginx, php on debian10 server)

I have a server running Debian 10. I have installed nginx (1.18.0) and php and php-fpm (7.4.28). Following this guide https://landchad.net/index I was able to get html website with certification by certbot running. Then I wanted to use php to have…
Vojta Klimes
  • 111
  • 3
1
vote
0 answers

Certbot 1.12.0 - How to stop ISRG Root X1 from being signed by DST Root CA X3?

I have an NGINX reverse proxy (nginx/1.21.4 & Debian 11) using certbot (v1.12.0) to get Lets Encrypt certificates for my site. Since the expiry of the DST cert, I had intermittent issues with Firefox 96 (sometimes it loads the site, other times it…
user1239807
1
vote
1 answer

How can I fix cron letsencrypt certbot renew on Ubuntu (SSL3_GET_SERVER_CERTIFICATE, certificate verify failed)?

I have an nginx webserver running with letsencrypt certificates, updated through certbot renew. All on Ubuntu 14.04. Since 1st Oct 2021 I keep getting emails from cron that the certificates could not be renewed: Attempting to renew cert (joov.de)…
Johannes Overmann
  • 741
  • 2
  • 7
  • 18
1
vote
1 answer

How to remove deprecated certbot-auto, but keep certbot and existing configuration

Blindly following an installation tutorial, I ended up with both certbot-auto (git clone to /etc/letsencrypt) and the actual certbot tool. Now I would really like to clean-up my Ubuntu installation and ultimatelly end up with only the up-to-date…
Vince
  • 11
  • 4
1
vote
1 answer

How to renew LetsEncrypt SSL wildcard?

I have to renew my SSL certificate, but I want to use a wildcard certificate instead of my current simple SSL using LetsEncrypt also. I usually use this command below, but it doesn't work to update my SSL certificate as a wildcard. certbot…
Rafael Corrêa Gomes
  • 131
  • 6
1
2 3 4